911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x2e00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:51:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:51:41 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 25) [ 2656.615617] 9pnet: Insufficient options for proto=fd 00:51:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2656.626005] 9pnet: Insufficient options for proto=fd 00:51:41 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x5, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:51:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) (fail_nth: 28) [ 2656.729869] FAULT_INJECTION: forcing a failure. [ 2656.729869] name failslab, interval 1, probability 0, space 0, times 0 [ 2656.731733] CPU: 1 PID: 11553 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2656.732850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2656.734003] Call Trace: [ 2656.734306] dump_stack+0x107/0x167 [ 2656.734815] should_fail.cold+0x5/0xa [ 2656.735351] ? create_object.isra.0+0x3a/0xa30 [ 2656.736010] should_failslab+0x5/0x20 [ 2656.736554] kmem_cache_alloc+0x5b/0x310 [ 2656.737123] create_object.isra.0+0x3a/0xa30 [ 2656.737736] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2656.738451] __kmalloc_track_caller+0x177/0x370 [ 2656.739131] ? p9_client_create+0x51e/0x1230 [ 2656.739769] kmemdup_nul+0x2d/0xa0 [ 2656.740263] p9_client_create+0x51e/0x1230 [ 2656.740868] ? p9_client_flush+0x430/0x430 [ 2656.741463] ? trace_hardirqs_on+0x5b/0x180 [ 2656.742069] ? lockdep_init_map_type+0x2c7/0x780 [ 2656.742733] ? __raw_spin_lock_init+0x36/0x110 [ 2656.743378] v9fs_session_init+0x1dd/0x1680 [ 2656.744004] ? lock_release+0x680/0x680 [ 2656.744574] ? kmem_cache_alloc_trace+0x151/0x320 [ 2656.745249] ? v9fs_show_options+0x690/0x690 [ 2656.745871] ? trace_hardirqs_on+0x5b/0x180 [ 2656.746485] ? kasan_unpoison_shadow+0x33/0x50 [ 2656.747128] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2656.747852] v9fs_mount+0x79/0x8f0 [ 2656.748352] ? v9fs_write_inode+0x60/0x60 [ 2656.748945] legacy_get_tree+0x105/0x220 [ 2656.749514] vfs_get_tree+0x8e/0x300 [ 2656.750034] path_mount+0x1490/0x21e0 [ 2656.750573] ? strncpy_from_user+0x9e/0x470 [ 2656.751183] ? finish_automount+0xa90/0xa90 [ 2656.751790] ? getname_flags.part.0+0x1dd/0x4f0 [ 2656.752444] ? _copy_from_user+0xfb/0x1b0 [ 2656.753037] __x64_sys_mount+0x282/0x300 [ 2656.753611] ? copy_mnt_ns+0xa00/0xa00 [ 2656.754165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2656.754906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2656.755656] do_syscall_64+0x33/0x40 [ 2656.756184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2656.756907] RIP: 0033:0x7f49777bbb19 [ 2656.757424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2656.759942] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2656.760815] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2656.761591] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2656.762436] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2656.763429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2656.764376] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:51:41 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x5, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:51:41 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 25) 00:51:41 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x6, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:51:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x3f00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2656.879690] FAULT_INJECTION: forcing a failure. [ 2656.879690] name failslab, interval 1, probability 0, space 0, times 0 [ 2656.882282] CPU: 0 PID: 11559 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2656.883765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2656.885526] Call Trace: [ 2656.886090] dump_stack+0x107/0x167 [ 2656.886863] should_fail.cold+0x5/0xa [ 2656.887687] should_failslab+0x5/0x20 [ 2656.888505] __kmalloc_track_caller+0x79/0x370 [ 2656.889474] ? match_number+0xaf/0x1d0 [ 2656.890304] kmemdup_nul+0x2d/0xa0 [ 2656.891064] match_number+0xaf/0x1d0 [ 2656.891860] ? match_u64+0x190/0x190 [ 2656.892645] ? __kmalloc_track_caller+0x2c6/0x370 [ 2656.893663] ? memcpy+0x39/0x60 [ 2656.894365] parse_opts.part.0+0x1f3/0x340 [ 2656.895257] ? p9_fd_show_options+0x1c0/0x1c0 [ 2656.896229] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2656.897440] ? trace_hardirqs_on+0x5b/0x180 [ 2656.898355] ? kfree+0xd7/0x340 [ 2656.899055] p9_fd_create+0x98/0x4a0 [ 2656.899858] ? p9_conn_create+0x510/0x510 [ 2656.900726] ? p9_client_create+0x798/0x1230 [ 2656.901652] ? kfree+0xd7/0x340 [ 2656.902346] ? do_raw_spin_unlock+0x4f/0x220 [ 2656.903272] p9_client_create+0x7ff/0x1230 [ 2656.904179] ? p9_client_flush+0x430/0x430 [ 2656.905074] ? trace_hardirqs_on+0x5b/0x180 [ 2656.905984] ? lockdep_init_map_type+0x2c7/0x780 [ 2656.906988] ? __raw_spin_lock_init+0x36/0x110 [ 2656.907975] v9fs_session_init+0x1dd/0x1680 [ 2656.908881] ? lock_release+0x680/0x680 [ 2656.909727] ? kmem_cache_alloc_trace+0x151/0x320 [ 2656.910754] ? v9fs_show_options+0x690/0x690 [ 2656.911698] ? trace_hardirqs_on+0x5b/0x180 [ 2656.912609] ? kasan_unpoison_shadow+0x33/0x50 [ 2656.913574] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2656.914645] v9fs_mount+0x79/0x8f0 [ 2656.915390] ? v9fs_write_inode+0x60/0x60 [ 2656.916274] legacy_get_tree+0x105/0x220 [ 2656.917129] vfs_get_tree+0x8e/0x300 [ 2656.917911] path_mount+0x1490/0x21e0 [ 2656.918731] ? strncpy_from_user+0x9e/0x470 [ 2656.919653] ? finish_automount+0xa90/0xa90 [ 2656.920567] ? getname_flags.part.0+0x1dd/0x4f0 [ 2656.921546] ? _copy_from_user+0xfb/0x1b0 [ 2656.922446] __x64_sys_mount+0x282/0x300 [ 2656.923304] ? copy_mnt_ns+0xa00/0xa00 [ 2656.924142] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2656.925247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2656.926329] do_syscall_64+0x33/0x40 [ 2656.927120] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2656.928223] RIP: 0033:0x7f18e28f1b19 [ 2656.929015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2656.932913] RSP: 002b:00007f18dfe67188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2656.934525] RAX: ffffffffffffffda RBX: 00007f18e2a04f60 RCX: 00007f18e28f1b19 [ 2656.936040] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2656.937549] RBP: 00007f18dfe671d0 R08: 0000000020000280 R09: 0000000000000000 [ 2656.939065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2656.940584] R13: 00007ffdbb8fc63f R14: 00007f18dfe67300 R15: 0000000000022000 [ 2656.988734] 9pnet: Insufficient options for proto=fd [ 2657.020809] FAULT_INJECTION: forcing a failure. [ 2657.020809] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.022350] CPU: 1 PID: 11565 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2657.023370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2657.024384] Call Trace: [ 2657.024695] dump_stack+0x107/0x167 [ 2657.025111] should_fail.cold+0x5/0xa [ 2657.025548] ? create_object.isra.0+0x3a/0xa30 [ 2657.026185] should_failslab+0x5/0x20 [ 2657.026662] kmem_cache_alloc+0x5b/0x310 [ 2657.027200] create_object.isra.0+0x3a/0xa30 [ 2657.027717] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2657.028265] __kmalloc_track_caller+0x177/0x370 [ 2657.028763] ? p9_client_create+0x51e/0x1230 [ 2657.029303] kmemdup_nul+0x2d/0xa0 [ 2657.029734] p9_client_create+0x51e/0x1230 [ 2657.030303] ? p9_client_flush+0x430/0x430 [ 2657.030893] ? trace_hardirqs_on+0x5b/0x180 [ 2657.031395] ? lockdep_init_map_type+0x2c7/0x780 [ 2657.032030] ? __raw_spin_lock_init+0x36/0x110 [ 2657.032524] v9fs_session_init+0x1dd/0x1680 [ 2657.033095] ? lock_release+0x680/0x680 [ 2657.033632] ? kmem_cache_alloc_trace+0x151/0x320 [ 2657.034162] ? v9fs_show_options+0x690/0x690 [ 2657.034637] ? trace_hardirqs_on+0x5b/0x180 [ 2657.035107] ? kasan_unpoison_shadow+0x33/0x50 [ 2657.035624] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2657.036168] v9fs_mount+0x79/0x8f0 [ 2657.036551] ? v9fs_write_inode+0x60/0x60 [ 2657.037119] legacy_get_tree+0x105/0x220 [ 2657.037558] vfs_get_tree+0x8e/0x300 [ 2657.038061] path_mount+0x1490/0x21e0 [ 2657.038541] ? strncpy_from_user+0x9e/0x470 [ 2657.039119] ? finish_automount+0xa90/0xa90 [ 2657.039619] ? getname_flags.part.0+0x1dd/0x4f0 [ 2657.040118] ? _copy_from_user+0xfb/0x1b0 [ 2657.040567] __x64_sys_mount+0x282/0x300 [ 2657.041118] ? copy_mnt_ns+0xa00/0xa00 [ 2657.041540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2657.042215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2657.042924] do_syscall_64+0x33/0x40 [ 2657.043324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2657.043882] RIP: 0033:0x7feccca28b19 [ 2657.044323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2657.046638] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2657.047465] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2657.048229] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2657.048995] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2657.049758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2657.050522] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:51:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:51:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 26) 00:51:53 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:51:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) (fail_nth: 29) 00:51:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:51:53 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 26) 00:51:53 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x7, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:51:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x4000, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2668.192687] FAULT_INJECTION: forcing a failure. [ 2668.192687] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.194071] CPU: 1 PID: 11586 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2668.194831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2668.195731] Call Trace: [ 2668.196019] dump_stack+0x107/0x167 [ 2668.196410] should_fail.cold+0x5/0xa [ 2668.196841] should_failslab+0x5/0x20 [ 2668.197262] __kmalloc_track_caller+0x79/0x370 [ 2668.197784] ? parse_opts.part.0+0x8e/0x340 [ 2668.198284] kstrdup+0x36/0x70 [ 2668.198659] parse_opts.part.0+0x8e/0x340 [ 2668.199118] ? p9_fd_show_options+0x1c0/0x1c0 [ 2668.199656] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2668.200260] ? quarantine_put+0x8b/0x1a0 [ 2668.200732] ? trace_hardirqs_on+0x5b/0x180 [ 2668.201235] ? kfree+0xd7/0x340 [ 2668.201622] p9_fd_create+0x98/0x4a0 [ 2668.202053] ? p9_conn_create+0x510/0x510 [ 2668.202530] ? p9_client_create+0x798/0x1230 [ 2668.203042] ? kfree+0xd7/0x340 [ 2668.203404] ? do_raw_spin_unlock+0x4f/0x220 [ 2668.203916] p9_client_create+0x7ff/0x1230 [ 2668.204466] ? p9_client_flush+0x430/0x430 [ 2668.205123] ? trace_hardirqs_on+0x5b/0x180 [ 2668.205616] ? lockdep_init_map_type+0x2c7/0x780 [ 2668.206275] ? __raw_spin_lock_init+0x36/0x110 [ 2668.206976] v9fs_session_init+0x1dd/0x1680 [ 2668.207648] ? lock_release+0x680/0x680 [ 2668.208107] ? kmem_cache_alloc_trace+0x151/0x320 [ 2668.208665] ? v9fs_show_options+0x690/0x690 [ 2668.209165] ? trace_hardirqs_on+0x5b/0x180 [ 2668.209663] ? kasan_unpoison_shadow+0x33/0x50 [ 2668.210195] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2668.210784] v9fs_mount+0x79/0x8f0 [ 2668.211174] ? v9fs_write_inode+0x60/0x60 [ 2668.211646] legacy_get_tree+0x105/0x220 [ 2668.212123] vfs_get_tree+0x8e/0x300 [ 2668.212561] path_mount+0x1490/0x21e0 [ 2668.213002] ? strncpy_from_user+0x9e/0x470 [ 2668.213494] ? finish_automount+0xa90/0xa90 [ 2668.213994] ? getname_flags.part.0+0x1dd/0x4f0 [ 2668.214594] ? _copy_from_user+0xfb/0x1b0 [ 2668.215224] __x64_sys_mount+0x282/0x300 [ 2668.215776] ? copy_mnt_ns+0xa00/0xa00 [ 2668.216243] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2668.216875] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2668.217576] do_syscall_64+0x33/0x40 [ 2668.218133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2668.218739] RIP: 0033:0x7f49777bbb19 [ 2668.219175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2668.221344] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2668.222239] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2668.223150] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2668.224004] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2668.224858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2668.225711] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2668.226640] 9pnet: Insufficient options for proto=fd 00:51:53 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 27) [ 2668.282831] FAULT_INJECTION: forcing a failure. [ 2668.282831] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.285709] CPU: 0 PID: 11584 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2668.287233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2668.289035] Call Trace: [ 2668.289608] dump_stack+0x107/0x167 [ 2668.290385] should_fail.cold+0x5/0xa [ 2668.291200] ? create_object.isra.0+0x3a/0xa30 [ 2668.292175] should_failslab+0x5/0x20 [ 2668.292983] kmem_cache_alloc+0x5b/0x310 [ 2668.293862] create_object.isra.0+0x3a/0xa30 [ 2668.294819] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2668.295941] __kmalloc_track_caller+0x177/0x370 [ 2668.296940] ? match_number+0xaf/0x1d0 [ 2668.297795] kmemdup_nul+0x2d/0xa0 [ 2668.298558] match_number+0xaf/0x1d0 [ 2668.299373] ? match_u64+0x190/0x190 [ 2668.300294] ? __kmalloc_track_caller+0x2c6/0x370 [ 2668.301347] ? memcpy+0x39/0x60 [ 2668.302076] parse_opts.part.0+0x1f3/0x340 [ 2668.302993] ? p9_fd_show_options+0x1c0/0x1c0 [ 2668.303999] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2668.305146] ? trace_hardirqs_on+0x5b/0x180 00:51:53 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x8, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2668.306091] ? kfree+0xd7/0x340 [ 2668.306989] p9_fd_create+0x98/0x4a0 [ 2668.307786] ? p9_conn_create+0x510/0x510 [ 2668.308661] ? p9_client_create+0x798/0x1230 [ 2668.309599] ? kfree+0xd7/0x340 [ 2668.310300] ? do_raw_spin_unlock+0x4f/0x220 [ 2668.311270] p9_client_create+0x7ff/0x1230 [ 2668.312184] ? p9_client_flush+0x430/0x430 [ 2668.313081] ? trace_hardirqs_on+0x5b/0x180 [ 2668.314003] ? lockdep_init_map_type+0x2c7/0x780 [ 2668.315006] ? __raw_spin_lock_init+0x36/0x110 [ 2668.316009] v9fs_session_init+0x1dd/0x1680 [ 2668.316936] ? lock_release+0x680/0x680 [ 2668.317789] ? kmem_cache_alloc_trace+0x151/0x320 [ 2668.318823] ? v9fs_show_options+0x690/0x690 [ 2668.319773] ? trace_hardirqs_on+0x5b/0x180 [ 2668.320696] ? kasan_unpoison_shadow+0x33/0x50 [ 2668.321691] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2668.322800] v9fs_mount+0x79/0x8f0 [ 2668.323574] ? v9fs_write_inode+0x60/0x60 [ 2668.324488] legacy_get_tree+0x105/0x220 [ 2668.325366] vfs_get_tree+0x8e/0x300 [ 2668.326171] path_mount+0x1490/0x21e0 [ 2668.326986] ? strncpy_from_user+0x9e/0x470 [ 2668.327908] ? finish_automount+0xa90/0xa90 [ 2668.328830] ? getname_flags.part.0+0x1dd/0x4f0 [ 2668.329814] ? _copy_from_user+0xfb/0x1b0 [ 2668.330706] __x64_sys_mount+0x282/0x300 [ 2668.331565] ? copy_mnt_ns+0xa00/0xa00 [ 2668.332412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2668.333534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2668.334673] do_syscall_64+0x33/0x40 [ 2668.335488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2668.336602] RIP: 0033:0x7f18e28f1b19 [ 2668.337425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2668.341445] RSP: 002b:00007f18dfe67188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2668.343081] RAX: ffffffffffffffda RBX: 00007f18e2a04f60 RCX: 00007f18e28f1b19 [ 2668.344616] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2668.346157] RBP: 00007f18dfe671d0 R08: 0000000020000280 R09: 0000000000000000 [ 2668.347703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2668.349276] R13: 00007ffdbb8fc63f R14: 00007f18dfe67300 R15: 0000000000022000 [ 2668.351859] 9pnet: Insufficient options for proto=fd [ 2668.364093] FAULT_INJECTION: forcing a failure. [ 2668.364093] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.365453] CPU: 1 PID: 11588 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2668.366247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2668.367225] Call Trace: [ 2668.367546] dump_stack+0x107/0x167 [ 2668.367988] should_fail.cold+0x5/0xa [ 2668.368445] should_failslab+0x5/0x20 [ 2668.368898] __kmalloc_track_caller+0x79/0x370 [ 2668.369434] ? parse_opts.part.0+0x8e/0x340 [ 2668.369947] kstrdup+0x36/0x70 [ 2668.370340] parse_opts.part.0+0x8e/0x340 [ 2668.370827] ? p9_fd_show_options+0x1c0/0x1c0 [ 2668.371345] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2668.371995] ? quarantine_put+0x8b/0x1a0 [ 2668.372475] ? trace_hardirqs_on+0x5b/0x180 [ 2668.372986] ? kfree+0xd7/0x340 [ 2668.373380] p9_fd_create+0x98/0x4a0 [ 2668.373820] ? p9_conn_create+0x510/0x510 [ 2668.374309] ? p9_client_create+0x798/0x1230 [ 2668.374821] ? kfree+0xd7/0x340 [ 2668.375206] ? do_raw_spin_unlock+0x4f/0x220 [ 2668.375734] p9_client_create+0x7ff/0x1230 [ 2668.376239] ? p9_client_flush+0x430/0x430 [ 2668.376741] ? trace_hardirqs_on+0x5b/0x180 [ 2668.377268] ? lockdep_init_map_type+0x2c7/0x780 [ 2668.377831] ? __raw_spin_lock_init+0x36/0x110 [ 2668.378371] v9fs_session_init+0x1dd/0x1680 [ 2668.378880] ? lock_release+0x680/0x680 [ 2668.379339] ? kmem_cache_alloc_trace+0x151/0x320 [ 2668.379932] ? v9fs_show_options+0x690/0x690 [ 2668.380458] ? trace_hardirqs_on+0x5b/0x180 [ 2668.380966] ? kasan_unpoison_shadow+0x33/0x50 [ 2668.381507] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2668.382106] v9fs_mount+0x79/0x8f0 [ 2668.382534] ? v9fs_write_inode+0x60/0x60 [ 2668.383017] legacy_get_tree+0x105/0x220 [ 2668.383497] vfs_get_tree+0x8e/0x300 [ 2668.383946] path_mount+0x1490/0x21e0 [ 2668.384402] ? strncpy_from_user+0x9e/0x470 [ 2668.384912] ? finish_automount+0xa90/0xa90 [ 2668.385425] ? getname_flags.part.0+0x1dd/0x4f0 [ 2668.385972] ? _copy_from_user+0xfb/0x1b0 [ 2668.386472] __x64_sys_mount+0x282/0x300 [ 2668.386950] ? copy_mnt_ns+0xa00/0xa00 [ 2668.387406] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2668.388042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2668.388656] do_syscall_64+0x33/0x40 [ 2668.389099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2668.389704] RIP: 0033:0x7feccca28b19 [ 2668.390275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2668.392849] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2668.393849] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2668.394878] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2668.395816] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2668.396919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2668.397771] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2668.399067] 9pnet: Insufficient options for proto=fd [ 2668.502439] FAULT_INJECTION: forcing a failure. [ 2668.502439] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.503917] CPU: 1 PID: 11597 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2668.504703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2668.505618] Call Trace: [ 2668.505910] dump_stack+0x107/0x167 [ 2668.506329] should_fail.cold+0x5/0xa [ 2668.506766] ? create_object.isra.0+0x3a/0xa30 [ 2668.507262] should_failslab+0x5/0x20 [ 2668.507725] kmem_cache_alloc+0x5b/0x310 [ 2668.508207] ? legacy_get_tree+0x105/0x220 [ 2668.508692] ? vfs_get_tree+0x8e/0x300 [ 2668.509157] create_object.isra.0+0x3a/0xa30 [ 2668.509677] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2668.510280] __kmalloc_track_caller+0x177/0x370 [ 2668.510832] ? parse_opts.part.0+0x8e/0x340 [ 2668.511299] kstrdup+0x36/0x70 [ 2668.511667] parse_opts.part.0+0x8e/0x340 [ 2668.512153] ? p9_fd_show_options+0x1c0/0x1c0 [ 2668.512687] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2668.513284] ? quarantine_put+0x8b/0x1a0 [ 2668.513745] ? trace_hardirqs_on+0x5b/0x180 [ 2668.514233] ? kfree+0xd7/0x340 [ 2668.514613] p9_fd_create+0x98/0x4a0 [ 2668.515032] ? p9_conn_create+0x510/0x510 [ 2668.515502] ? p9_client_create+0x798/0x1230 [ 2668.516012] ? kfree+0xd7/0x340 [ 2668.516389] ? do_raw_spin_unlock+0x4f/0x220 [ 2668.516894] p9_client_create+0x7ff/0x1230 [ 2668.517381] ? p9_client_flush+0x430/0x430 [ 2668.517883] ? trace_hardirqs_on+0x5b/0x180 [ 2668.518399] ? lockdep_init_map_type+0x2c7/0x780 [ 2668.518961] ? __raw_spin_lock_init+0x36/0x110 [ 2668.519671] v9fs_session_init+0x1dd/0x1680 [ 2668.520256] ? lock_release+0x680/0x680 [ 2668.520893] ? kmem_cache_alloc_trace+0x151/0x320 [ 2668.521583] ? v9fs_show_options+0x690/0x690 [ 2668.522089] ? trace_hardirqs_on+0x5b/0x180 [ 2668.522583] ? kasan_unpoison_shadow+0x33/0x50 [ 2668.523103] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2668.523694] v9fs_mount+0x79/0x8f0 [ 2668.524117] ? v9fs_write_inode+0x60/0x60 [ 2668.524606] legacy_get_tree+0x105/0x220 [ 2668.525087] vfs_get_tree+0x8e/0x300 [ 2668.525512] path_mount+0x1490/0x21e0 [ 2668.525950] ? strncpy_from_user+0x9e/0x470 [ 2668.526438] ? finish_automount+0xa90/0xa90 [ 2668.526935] ? getname_flags.part.0+0x1dd/0x4f0 [ 2668.527467] ? _copy_from_user+0xfb/0x1b0 [ 2668.527952] __x64_sys_mount+0x282/0x300 [ 2668.528413] ? copy_mnt_ns+0xa00/0xa00 [ 2668.528862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2668.529463] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2668.530237] do_syscall_64+0x33/0x40 [ 2668.530789] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2668.531579] RIP: 0033:0x7f49777bbb19 [ 2668.532124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2668.534601] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2668.535782] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2668.536630] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2668.537649] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2668.538643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2668.539634] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:52:05 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 28) 00:52:05 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x9, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x4084, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) (fail_nth: 30) [ 2680.948912] FAULT_INJECTION: forcing a failure. [ 2680.948912] name failslab, interval 1, probability 0, space 0, times 0 [ 2680.951916] CPU: 0 PID: 11606 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2680.953778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2680.956007] Call Trace: [ 2680.956727] dump_stack+0x107/0x167 [ 2680.957728] should_fail.cold+0x5/0xa [ 2680.958866] should_failslab+0x5/0x20 [ 2680.959916] __kmalloc_track_caller+0x79/0x370 [ 2680.961160] ? match_number+0xaf/0x1d0 [ 2680.962215] kmemdup_nul+0x2d/0xa0 [ 2680.963180] match_number+0xaf/0x1d0 [ 2680.964203] ? match_u64+0x190/0x190 [ 2680.965217] ? __kmalloc_track_caller+0x2c6/0x370 [ 2680.966527] ? memcpy+0x39/0x60 [ 2680.967429] parse_opts.part.0+0x1f3/0x340 [ 2680.968584] ? p9_fd_show_options+0x1c0/0x1c0 [ 2680.969817] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2680.971249] ? trace_hardirqs_on+0x5b/0x180 [ 2680.972448] ? kfree+0xd7/0x340 [ 2680.973284] p9_fd_create+0x98/0x4a0 [ 2680.974187] ? p9_conn_create+0x510/0x510 [ 2680.975187] ? p9_client_create+0x798/0x1230 [ 2680.976254] ? kfree+0xd7/0x340 [ 2680.977043] ? do_raw_spin_unlock+0x4f/0x220 [ 2680.978119] p9_client_create+0x7ff/0x1230 [ 2680.979150] ? p9_client_flush+0x430/0x430 [ 2680.980189] ? trace_hardirqs_on+0x5b/0x180 [ 2680.981239] ? lockdep_init_map_type+0x2c7/0x780 [ 2680.982396] ? __raw_spin_lock_init+0x36/0x110 [ 2680.983513] v9fs_session_init+0x1dd/0x1680 [ 2680.984558] ? lock_release+0x680/0x680 [ 2680.985540] ? kmem_cache_alloc_trace+0x151/0x320 [ 2680.986732] ? v9fs_show_options+0x690/0x690 [ 2680.987865] ? trace_hardirqs_on+0x5b/0x180 [ 2680.988902] ? kasan_unpoison_shadow+0x33/0x50 [ 2680.990025] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2680.991277] v9fs_mount+0x79/0x8f0 [ 2680.992162] ? v9fs_write_inode+0x60/0x60 [ 2680.993183] legacy_get_tree+0x105/0x220 [ 2680.994193] vfs_get_tree+0x8e/0x300 [ 2680.995118] path_mount+0x1490/0x21e0 [ 2680.996078] ? strncpy_from_user+0x9e/0x470 [ 2680.997142] ? finish_automount+0xa90/0xa90 [ 2680.998212] ? getname_flags.part.0+0x1dd/0x4f0 [ 2680.999370] ? _copy_from_user+0xfb/0x1b0 [ 2681.000338] __x64_sys_mount+0x282/0x300 [ 2681.001216] ? copy_mnt_ns+0xa00/0xa00 [ 2681.002054] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2681.003190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2681.004305] do_syscall_64+0x33/0x40 [ 2681.005090] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2681.006211] RIP: 0033:0x7f49777bbb19 [ 2681.007025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2681.010960] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2681.012584] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2681.014119] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2681.015662] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2681.017229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2681.018782] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:52:05 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 27) 00:52:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:05 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:06 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0xa, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2681.098385] FAULT_INJECTION: forcing a failure. [ 2681.098385] name failslab, interval 1, probability 0, space 0, times 0 [ 2681.100106] CPU: 1 PID: 11615 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2681.101023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2681.102161] Call Trace: [ 2681.102499] dump_stack+0x107/0x167 [ 2681.103022] should_fail.cold+0x5/0xa [ 2681.103478] ? create_object.isra.0+0x3a/0xa30 [ 2681.104049] should_failslab+0x5/0x20 [ 2681.104639] kmem_cache_alloc+0x5b/0x310 [ 2681.105241] ? legacy_get_tree+0x105/0x220 [ 2681.105699] ? vfs_get_tree+0x8e/0x300 [ 2681.106235] create_object.isra.0+0x3a/0xa30 [ 2681.106774] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2681.107474] __kmalloc_track_caller+0x177/0x370 [ 2681.108130] ? parse_opts.part.0+0x8e/0x340 [ 2681.108746] kstrdup+0x36/0x70 [ 2681.109135] parse_opts.part.0+0x8e/0x340 [ 2681.109715] ? p9_fd_show_options+0x1c0/0x1c0 [ 2681.110312] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2681.110998] ? quarantine_put+0x8b/0x1a0 [ 2681.111602] ? trace_hardirqs_on+0x5b/0x180 [ 2681.112237] ? kfree+0xd7/0x340 [ 2681.112643] p9_fd_create+0x98/0x4a0 [ 2681.113068] ? p9_conn_create+0x510/0x510 [ 2681.113689] ? p9_client_create+0x798/0x1230 [ 2681.114258] ? kfree+0xd7/0x340 [ 2681.114765] ? do_raw_spin_unlock+0x4f/0x220 [ 2681.115382] p9_client_create+0x7ff/0x1230 [ 2681.115876] ? p9_client_flush+0x430/0x430 [ 2681.116334] ? trace_hardirqs_on+0x5b/0x180 [ 2681.116802] ? lockdep_init_map_type+0x2c7/0x780 [ 2681.117422] ? __raw_spin_lock_init+0x36/0x110 [ 2681.117928] v9fs_session_init+0x1dd/0x1680 [ 2681.118556] ? lock_release+0x680/0x680 [ 2681.119116] ? kmem_cache_alloc_trace+0x151/0x320 [ 2681.119757] ? v9fs_show_options+0x690/0x690 [ 2681.120283] ? trace_hardirqs_on+0x5b/0x180 [ 2681.120802] ? kasan_unpoison_shadow+0x33/0x50 [ 2681.121350] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2681.121949] v9fs_mount+0x79/0x8f0 [ 2681.122371] ? v9fs_write_inode+0x60/0x60 [ 2681.122864] legacy_get_tree+0x105/0x220 [ 2681.123350] vfs_get_tree+0x8e/0x300 [ 2681.123799] path_mount+0x1490/0x21e0 [ 2681.124257] ? strncpy_from_user+0x9e/0x470 [ 2681.124761] ? finish_automount+0xa90/0xa90 [ 2681.125271] ? getname_flags.part.0+0x1dd/0x4f0 [ 2681.125805] ? _copy_from_user+0xfb/0x1b0 [ 2681.126303] __x64_sys_mount+0x282/0x300 [ 2681.126744] ? copy_mnt_ns+0xa00/0xa00 [ 2681.127171] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2681.127750] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2681.128369] do_syscall_64+0x33/0x40 [ 2681.128812] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2681.129428] RIP: 0033:0x7feccca28b19 [ 2681.129870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2681.132056] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2681.132984] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2681.133841] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2681.134695] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2681.135492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2681.136340] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2681.137381] 9pnet: Insufficient options for proto=fd [ 2681.154124] FAULT_INJECTION: forcing a failure. [ 2681.154124] name failslab, interval 1, probability 0, space 0, times 0 [ 2681.155425] CPU: 1 PID: 11613 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2681.156179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2681.157090] Call Trace: [ 2681.157398] dump_stack+0x107/0x167 [ 2681.157796] should_fail.cold+0x5/0xa [ 2681.158219] should_failslab+0x5/0x20 [ 2681.158634] __kmalloc_track_caller+0x79/0x370 [ 2681.159136] ? match_number+0xaf/0x1d0 [ 2681.159554] ? kfree+0xd7/0x340 [ 2681.159919] kmemdup_nul+0x2d/0xa0 [ 2681.160302] match_number+0xaf/0x1d0 [ 2681.160705] ? match_u64+0x190/0x190 [ 2681.161144] ? __kmalloc_track_caller+0x2c6/0x370 [ 2681.161725] ? memcpy+0x39/0x60 [ 2681.162117] parse_opts.part.0+0x1f3/0x340 [ 2681.162620] ? p9_fd_show_options+0x1c0/0x1c0 [ 2681.163119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2681.163726] ? trace_hardirqs_on+0x5b/0x180 [ 2681.164231] ? kfree+0xd7/0x340 [ 2681.164623] p9_fd_create+0x98/0x4a0 [ 2681.165069] ? p9_conn_create+0x510/0x510 [ 2681.165554] ? p9_client_create+0x798/0x1230 [ 2681.166079] ? kfree+0xd7/0x340 [ 2681.166465] ? do_raw_spin_unlock+0x4f/0x220 [ 2681.166982] p9_client_create+0x7ff/0x1230 [ 2681.167442] ? p9_client_flush+0x430/0x430 [ 2681.167906] ? trace_hardirqs_on+0x5b/0x180 [ 2681.168372] ? lockdep_init_map_type+0x2c7/0x780 [ 2681.168883] ? __raw_spin_lock_init+0x36/0x110 [ 2681.169387] v9fs_session_init+0x1dd/0x1680 [ 2681.169856] ? lock_release+0x680/0x680 [ 2681.170299] ? kmem_cache_alloc_trace+0x151/0x320 [ 2681.170869] ? v9fs_show_options+0x690/0x690 [ 2681.171349] ? trace_hardirqs_on+0x5b/0x180 [ 2681.171866] ? kasan_unpoison_shadow+0x33/0x50 [ 2681.172402] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2681.173004] v9fs_mount+0x79/0x8f0 [ 2681.173392] ? v9fs_write_inode+0x60/0x60 [ 2681.173875] legacy_get_tree+0x105/0x220 [ 2681.174359] vfs_get_tree+0x8e/0x300 [ 2681.174802] path_mount+0x1490/0x21e0 [ 2681.175255] ? strncpy_from_user+0x9e/0x470 [ 2681.175784] ? finish_automount+0xa90/0xa90 [ 2681.176261] ? getname_flags.part.0+0x1dd/0x4f0 [ 2681.176810] ? _copy_from_user+0xfb/0x1b0 [ 2681.177301] __x64_sys_mount+0x282/0x300 [ 2681.177779] ? copy_mnt_ns+0xa00/0xa00 [ 2681.178227] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2681.178852] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2681.179417] do_syscall_64+0x33/0x40 [ 2681.179872] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2681.180470] RIP: 0033:0x7f18e28f1b19 [ 2681.180906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2681.183020] RSP: 002b:00007f18dfe67188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2681.183925] RAX: ffffffffffffffda RBX: 00007f18e2a04f60 RCX: 00007f18e28f1b19 [ 2681.184695] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2681.185463] RBP: 00007f18dfe671d0 R08: 0000000020000280 R09: 0000000000000000 [ 2681.186232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2681.186998] R13: 00007ffdbb8fc63f R14: 00007f18dfe67300 R15: 0000000000022000 [ 2681.187973] 9pnet: Insufficient options for proto=fd 00:52:06 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x4800, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:06 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 29) 00:52:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) (fail_nth: 31) 00:52:06 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 28) 00:52:06 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0xb, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:06 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) (fail_nth: 1) [ 2681.365824] FAULT_INJECTION: forcing a failure. [ 2681.365824] name failslab, interval 1, probability 0, space 0, times 0 [ 2681.367183] CPU: 1 PID: 11627 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2681.368088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2681.369275] Call Trace: [ 2681.369592] dump_stack+0x107/0x167 [ 2681.370018] should_fail.cold+0x5/0xa [ 2681.370479] ? create_object.isra.0+0x3a/0xa30 [ 2681.371107] should_failslab+0x5/0x20 [ 2681.371614] kmem_cache_alloc+0x5b/0x310 [ 2681.372283] create_object.isra.0+0x3a/0xa30 [ 2681.372978] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2681.373587] __kmalloc_track_caller+0x177/0x370 [ 2681.374088] ? match_number+0xaf/0x1d0 [ 2681.374673] kmemdup_nul+0x2d/0xa0 [ 2681.375265] match_number+0xaf/0x1d0 [ 2681.375950] ? match_u64+0x190/0x190 [ 2681.376556] ? __kmalloc_track_caller+0x2c6/0x370 [ 2681.377290] ? memcpy+0x39/0x60 [ 2681.377813] parse_opts.part.0+0x1f3/0x340 [ 2681.378609] ? p9_fd_show_options+0x1c0/0x1c0 [ 2681.379327] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2681.380063] ? trace_hardirqs_on+0x5b/0x180 [ 2681.380811] ? kfree+0xd7/0x340 [ 2681.381299] p9_fd_create+0x98/0x4a0 [ 2681.381951] ? p9_conn_create+0x510/0x510 [ 2681.382670] ? p9_client_create+0x798/0x1230 [ 2681.383280] ? kfree+0xd7/0x340 [ 2681.383882] ? do_raw_spin_unlock+0x4f/0x220 [ 2681.384495] p9_client_create+0x7ff/0x1230 [ 2681.385277] ? p9_client_flush+0x430/0x430 [ 2681.385757] ? trace_hardirqs_on+0x5b/0x180 [ 2681.386359] ? lockdep_init_map_type+0x2c7/0x780 [ 2681.387162] ? __raw_spin_lock_init+0x36/0x110 [ 2681.387905] v9fs_session_init+0x1dd/0x1680 [ 2681.388667] ? lock_release+0x680/0x680 [ 2681.389235] ? kmem_cache_alloc_trace+0x151/0x320 [ 2681.389971] ? v9fs_show_options+0x690/0x690 [ 2681.390535] ? trace_hardirqs_on+0x5b/0x180 [ 2681.391130] ? kasan_unpoison_shadow+0x33/0x50 [ 2681.391687] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2681.392394] v9fs_mount+0x79/0x8f0 [ 2681.392973] ? v9fs_write_inode+0x60/0x60 [ 2681.393520] legacy_get_tree+0x105/0x220 [ 2681.394114] vfs_get_tree+0x8e/0x300 [ 2681.394722] path_mount+0x1490/0x21e0 [ 2681.395169] ? strncpy_from_user+0x9e/0x470 [ 2681.395637] ? finish_automount+0xa90/0xa90 [ 2681.396243] ? getname_flags.part.0+0x1dd/0x4f0 [ 2681.396987] ? _copy_from_user+0xfb/0x1b0 [ 2681.397740] __x64_sys_mount+0x282/0x300 [ 2681.398310] ? copy_mnt_ns+0xa00/0xa00 [ 2681.398853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2681.399486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2681.400317] do_syscall_64+0x33/0x40 [ 2681.400858] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2681.401601] RIP: 0033:0x7f49777bbb19 [ 2681.402099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2681.404112] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2681.404927] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2681.405698] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2681.406489] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2681.407650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2681.408810] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:52:06 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x4c00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2681.460657] FAULT_INJECTION: forcing a failure. [ 2681.460657] name failslab, interval 1, probability 0, space 0, times 0 [ 2681.462640] CPU: 1 PID: 11632 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2681.463615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2681.464889] Call Trace: [ 2681.465281] dump_stack+0x107/0x167 [ 2681.465773] should_fail.cold+0x5/0xa [ 2681.466258] ? create_object.isra.0+0x3a/0xa30 [ 2681.466892] should_failslab+0x5/0x20 [ 2681.467364] kmem_cache_alloc+0x5b/0x310 [ 2681.467822] create_object.isra.0+0x3a/0xa30 [ 2681.468430] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2681.469137] __kmalloc_track_caller+0x177/0x370 [ 2681.469645] ? match_number+0xaf/0x1d0 [ 2681.470125] kmemdup_nul+0x2d/0xa0 [ 2681.470548] match_number+0xaf/0x1d0 [ 2681.471161] ? match_u64+0x190/0x190 [ 2681.471835] ? __kmalloc_track_caller+0x2c6/0x370 [ 2681.472496] ? memcpy+0x39/0x60 [ 2681.472924] parse_opts.part.0+0x1f3/0x340 [ 2681.473473] ? p9_fd_show_options+0x1c0/0x1c0 [ 2681.474204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2681.474969] ? trace_hardirqs_on+0x5b/0x180 [ 2681.475644] ? kfree+0xd7/0x340 [ 2681.476223] p9_fd_create+0x98/0x4a0 [ 2681.476880] ? p9_conn_create+0x510/0x510 [ 2681.477451] ? p9_client_create+0x798/0x1230 [ 2681.477954] ? kfree+0xd7/0x340 [ 2681.478308] ? do_raw_spin_unlock+0x4f/0x220 [ 2681.478786] p9_client_create+0x7ff/0x1230 [ 2681.479363] ? p9_client_flush+0x430/0x430 [ 2681.479851] ? trace_hardirqs_on+0x5b/0x180 [ 2681.480455] ? lockdep_init_map_type+0x2c7/0x780 [ 2681.481037] ? __raw_spin_lock_init+0x36/0x110 [ 2681.481530] v9fs_session_init+0x1dd/0x1680 [ 2681.482002] ? lock_release+0x680/0x680 [ 2681.482565] ? kmem_cache_alloc_trace+0x151/0x320 [ 2681.483335] ? v9fs_show_options+0x690/0x690 [ 2681.484064] ? trace_hardirqs_on+0x5b/0x180 [ 2681.484776] ? kasan_unpoison_shadow+0x33/0x50 [ 2681.485396] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2681.486063] v9fs_mount+0x79/0x8f0 [ 2681.486561] ? v9fs_write_inode+0x60/0x60 [ 2681.487137] legacy_get_tree+0x105/0x220 [ 2681.487704] vfs_get_tree+0x8e/0x300 [ 2681.488227] path_mount+0x1490/0x21e0 [ 2681.488844] ? strncpy_from_user+0x9e/0x470 [ 2681.489474] ? finish_automount+0xa90/0xa90 [ 2681.490237] ? getname_flags.part.0+0x1dd/0x4f0 [ 2681.490928] ? _copy_from_user+0xfb/0x1b0 [ 2681.491520] __x64_sys_mount+0x282/0x300 [ 2681.492090] ? copy_mnt_ns+0xa00/0xa00 [ 2681.492631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2681.493299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2681.494020] do_syscall_64+0x33/0x40 [ 2681.494540] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2681.495255] RIP: 0033:0x7f18e28f1b19 [ 2681.495778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2681.498050] RSP: 002b:00007f18dfe67188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2681.498915] RAX: ffffffffffffffda RBX: 00007f18e2a04f60 RCX: 00007f18e28f1b19 [ 2681.499683] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2681.500463] RBP: 00007f18dfe671d0 R08: 0000000020000280 R09: 0000000000000000 [ 2681.501277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2681.502283] R13: 00007ffdbb8fc63f R14: 00007f18dfe67300 R15: 0000000000022000 [ 2681.503476] 9pnet: Insufficient options for proto=fd [ 2681.510388] FAULT_INJECTION: forcing a failure. [ 2681.510388] name failslab, interval 1, probability 0, space 0, times 0 [ 2681.511962] CPU: 1 PID: 11633 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2681.512784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2681.513673] Call Trace: [ 2681.513961] dump_stack+0x107/0x167 [ 2681.514355] should_fail.cold+0x5/0xa [ 2681.514894] should_failslab+0x5/0x20 [ 2681.515306] __kmalloc_track_caller+0x79/0x370 [ 2681.515890] ? match_number+0xaf/0x1d0 [ 2681.516403] kmemdup_nul+0x2d/0xa0 [ 2681.516854] match_number+0xaf/0x1d0 [ 2681.517258] ? match_u64+0x190/0x190 [ 2681.517772] ? __kmalloc_track_caller+0x2c6/0x370 [ 2681.518328] ? memcpy+0x39/0x60 [ 2681.518771] parse_opts.part.0+0x1f3/0x340 [ 2681.519357] ? p9_fd_show_options+0x1c0/0x1c0 [ 2681.519853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2681.520416] ? trace_hardirqs_on+0x5b/0x180 [ 2681.520882] ? kfree+0xd7/0x340 [ 2681.521358] p9_fd_create+0x98/0x4a0 [ 2681.521760] ? p9_conn_create+0x510/0x510 [ 2681.522330] ? p9_client_create+0x798/0x1230 [ 2681.522971] ? kfree+0xd7/0x340 [ 2681.523324] ? do_raw_spin_unlock+0x4f/0x220 [ 2681.523828] p9_client_create+0x7ff/0x1230 [ 2681.524290] ? p9_client_flush+0x430/0x430 [ 2681.524743] ? trace_hardirqs_on+0x5b/0x180 [ 2681.525207] ? lockdep_init_map_type+0x2c7/0x780 [ 2681.525713] ? __raw_spin_lock_init+0x36/0x110 [ 2681.526209] v9fs_session_init+0x1dd/0x1680 [ 2681.526673] ? lock_release+0x680/0x680 [ 2681.527104] ? kmem_cache_alloc_trace+0x151/0x320 [ 2681.527623] ? v9fs_show_options+0x690/0x690 [ 2681.528105] ? trace_hardirqs_on+0x5b/0x180 [ 2681.528569] ? kasan_unpoison_shadow+0x33/0x50 [ 2681.529060] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2681.529606] v9fs_mount+0x79/0x8f0 [ 2681.529991] ? v9fs_write_inode+0x60/0x60 [ 2681.530435] legacy_get_tree+0x105/0x220 [ 2681.530873] vfs_get_tree+0x8e/0x300 [ 2681.531273] path_mount+0x1490/0x21e0 [ 2681.531686] ? strncpy_from_user+0x9e/0x470 [ 2681.532156] ? finish_automount+0xa90/0xa90 [ 2681.532620] ? getname_flags.part.0+0x1dd/0x4f0 [ 2681.533119] ? _copy_from_user+0xfb/0x1b0 [ 2681.533565] __x64_sys_mount+0x282/0x300 [ 2681.534005] ? copy_mnt_ns+0xa00/0xa00 [ 2681.534425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2681.534984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2681.535543] do_syscall_64+0x33/0x40 [ 2681.535950] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2681.536506] RIP: 0033:0x7feccca28b19 [ 2681.536905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2681.539264] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2681.540179] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2681.541065] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2681.542090] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2681.542855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2681.543712] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2681.561720] FAULT_INJECTION: forcing a failure. [ 2681.561720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2681.563160] CPU: 1 PID: 11638 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2681.564122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2681.565289] Call Trace: [ 2681.565683] dump_stack+0x107/0x167 [ 2681.566231] should_fail.cold+0x5/0xa [ 2681.566684] _copy_from_user+0x2e/0x1b0 [ 2681.567160] __copy_msghdr_from_user+0x91/0x4b0 [ 2681.567713] ? __ia32_sys_shutdown+0x80/0x80 [ 2681.568350] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2681.568972] ? __lock_acquire+0x1657/0x5b00 [ 2681.569515] ? __lock_acquire+0xbb1/0x5b00 [ 2681.570061] sendmsg_copy_msghdr+0xa1/0x160 [ 2681.570654] ? do_recvmmsg+0x6d0/0x6d0 [ 2681.571151] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2681.571715] ? lock_downgrade+0x6d0/0x6d0 [ 2681.572177] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2681.572854] ___sys_sendmsg+0xc6/0x170 [ 2681.573317] ? sendmsg_copy_msghdr+0x160/0x160 [ 2681.573914] ? __fget_files+0x2cf/0x520 [ 2681.574436] ? lock_downgrade+0x6d0/0x6d0 [ 2681.575051] ? find_held_lock+0x2c/0x110 [ 2681.575679] ? __fget_files+0x2f8/0x520 [ 2681.576165] ? __fget_light+0xea/0x290 [ 2681.576626] __sys_sendmsg+0xe5/0x1b0 [ 2681.577176] ? __sys_sendmsg_sock+0x40/0x40 [ 2681.577643] ? rcu_read_lock_any_held+0x75/0xa0 [ 2681.578304] ? fput_many+0x2f/0x1a0 [ 2681.578735] ? ksys_write+0x1a9/0x260 [ 2681.579351] ? __ia32_sys_read+0xb0/0xb0 [ 2681.579870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2681.580474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2681.581219] ? trace_hardirqs_on+0x5b/0x180 [ 2681.581724] do_syscall_64+0x33/0x40 [ 2681.582217] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2681.582851] RIP: 0033:0x7fa5a13a4b19 [ 2681.583440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2681.585722] RSP: 002b:00007fa59e91a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2681.586693] RAX: ffffffffffffffda RBX: 00007fa5a14b7f60 RCX: 00007fa5a13a4b19 [ 2681.587627] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2681.588685] RBP: 00007fa59e91a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2681.589660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2681.590603] R13: 00007fff1c20acdf R14: 00007fa59e91a300 R15: 0000000000022000 00:52:06 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x6800, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:06 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 30) [ 2681.702698] 9pnet: Insufficient options for proto=fd [ 2681.828019] FAULT_INJECTION: forcing a failure. [ 2681.828019] name failslab, interval 1, probability 0, space 0, times 0 [ 2681.829270] CPU: 1 PID: 11650 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2681.830048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2681.831065] Call Trace: [ 2681.831381] dump_stack+0x107/0x167 [ 2681.831808] should_fail.cold+0x5/0xa [ 2681.832248] should_failslab+0x5/0x20 [ 2681.832679] __kmalloc_track_caller+0x79/0x370 [ 2681.833177] ? match_number+0xaf/0x1d0 [ 2681.833606] ? kfree+0xd7/0x340 [ 2681.833964] kmemdup_nul+0x2d/0xa0 [ 2681.834348] match_number+0xaf/0x1d0 [ 2681.834751] ? match_u64+0x190/0x190 [ 2681.835153] ? __kmalloc_track_caller+0x2c6/0x370 [ 2681.835675] ? memcpy+0x39/0x60 [ 2681.836038] parse_opts.part.0+0x1f3/0x340 [ 2681.836495] ? p9_fd_show_options+0x1c0/0x1c0 [ 2681.836983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2681.837551] ? trace_hardirqs_on+0x5b/0x180 [ 2681.838016] ? kfree+0xd7/0x340 [ 2681.838372] p9_fd_create+0x98/0x4a0 [ 2681.838771] ? p9_conn_create+0x510/0x510 [ 2681.839215] ? p9_client_create+0x798/0x1230 [ 2681.839688] ? kfree+0xd7/0x340 [ 2681.840047] ? do_raw_spin_unlock+0x4f/0x220 [ 2681.840522] p9_client_create+0x7ff/0x1230 [ 2681.840979] ? p9_client_flush+0x430/0x430 [ 2681.841435] ? trace_hardirqs_on+0x5b/0x180 [ 2681.841900] ? lockdep_init_map_type+0x2c7/0x780 [ 2681.842418] ? __raw_spin_lock_init+0x36/0x110 [ 2681.842913] v9fs_session_init+0x1dd/0x1680 [ 2681.843376] ? lock_release+0x680/0x680 [ 2681.843817] ? kmem_cache_alloc_trace+0x151/0x320 [ 2681.844341] ? v9fs_show_options+0x690/0x690 [ 2681.844824] ? trace_hardirqs_on+0x5b/0x180 [ 2681.845294] ? kasan_unpoison_shadow+0x33/0x50 [ 2681.845794] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2681.846339] v9fs_mount+0x79/0x8f0 [ 2681.846724] ? v9fs_write_inode+0x60/0x60 [ 2681.847168] legacy_get_tree+0x105/0x220 [ 2681.847606] vfs_get_tree+0x8e/0x300 [ 2681.848019] path_mount+0x1490/0x21e0 [ 2681.848436] ? strncpy_from_user+0x9e/0x470 [ 2681.848899] ? finish_automount+0xa90/0xa90 [ 2681.849362] ? getname_flags.part.0+0x1dd/0x4f0 [ 2681.849863] ? _copy_from_user+0xfb/0x1b0 [ 2681.850362] __x64_sys_mount+0x282/0x300 [ 2681.850848] ? copy_mnt_ns+0xa00/0xa00 [ 2681.851285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2681.851925] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2681.852503] do_syscall_64+0x33/0x40 [ 2681.852947] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2681.853538] RIP: 0033:0x7f49777bbb19 [ 2681.853982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2681.856170] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2681.857076] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2681.857927] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2681.858789] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2681.859641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2681.860503] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2681.861406] 9pnet: Insufficient options for proto=fd 00:52:19 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x10, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:19 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 31) 00:52:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) (fail_nth: 2) 00:52:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x6c00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:19 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:19 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) (fail_nth: 32) 00:52:19 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 29) [ 2694.647041] FAULT_INJECTION: forcing a failure. [ 2694.647041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2694.650043] CPU: 0 PID: 11667 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2694.651661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2694.653655] Call Trace: [ 2694.654277] dump_stack+0x107/0x167 [ 2694.655136] should_fail.cold+0x5/0xa [ 2694.656045] FAULT_INJECTION: forcing a failure. [ 2694.656045] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.658612] _copy_from_user+0x2e/0x1b0 [ 2694.658637] iovec_from_user+0x141/0x400 [ 2694.658662] __import_iovec+0x67/0x590 [ 2694.658679] ? __ia32_sys_shutdown+0x80/0x80 [ 2694.658710] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2694.663845] import_iovec+0x83/0xb0 [ 2694.664746] sendmsg_copy_msghdr+0x131/0x160 [ 2694.665803] ? do_recvmmsg+0x6d0/0x6d0 [ 2694.666764] ? lock_downgrade+0x6d0/0x6d0 [ 2694.667763] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2694.669052] ___sys_sendmsg+0xc6/0x170 [ 2694.669977] ? sendmsg_copy_msghdr+0x160/0x160 [ 2694.671084] ? __fget_files+0x2cf/0x520 [ 2694.672075] ? lock_downgrade+0x6d0/0x6d0 [ 2694.673064] ? find_held_lock+0x2c/0x110 [ 2694.674040] ? __fget_files+0x2f8/0x520 [ 2694.674998] ? __fget_light+0xea/0x290 [ 2694.675954] __sys_sendmsg+0xe5/0x1b0 [ 2694.676877] ? __sys_sendmsg_sock+0x40/0x40 [ 2694.677928] ? rcu_read_lock_any_held+0x75/0xa0 [ 2694.679048] ? fput_many+0x2f/0x1a0 [ 2694.679933] ? ksys_write+0x1a9/0x260 [ 2694.680874] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2694.682132] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2694.683365] ? trace_hardirqs_on+0x5b/0x180 [ 2694.684440] do_syscall_64+0x33/0x40 [ 2694.685340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2694.686577] RIP: 0033:0x7fa5a13a4b19 [ 2694.687475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2694.691920] RSP: 002b:00007fa59e91a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2694.693554] RAX: ffffffffffffffda RBX: 00007fa5a14b7f60 RCX: 00007fa5a13a4b19 [ 2694.695063] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2694.696595] RBP: 00007fa59e91a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2694.698103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2694.699609] R13: 00007fff1c20acdf R14: 00007fa59e91a300 R15: 0000000000022000 [ 2694.701188] CPU: 1 PID: 11666 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2694.702840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2694.704780] Call Trace: [ 2694.705397] dump_stack+0x107/0x167 [ 2694.706241] should_fail.cold+0x5/0xa [ 2694.707123] ? create_object.isra.0+0x3a/0xa30 [ 2694.708180] should_failslab+0x5/0x20 [ 2694.709045] FAULT_INJECTION: forcing a failure. [ 2694.709045] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.711572] kmem_cache_alloc+0x5b/0x310 [ 2694.712520] create_object.isra.0+0x3a/0xa30 [ 2694.713532] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.714711] __kmalloc_track_caller+0x177/0x370 [ 2694.715779] ? match_number+0xaf/0x1d0 [ 2694.716687] kmemdup_nul+0x2d/0xa0 [ 2694.717513] match_number+0xaf/0x1d0 [ 2694.718375] ? match_u64+0x190/0x190 [ 2694.719239] ? __kmalloc_track_caller+0x2c6/0x370 [ 2694.720356] ? memcpy+0x39/0x60 [ 2694.721124] parse_opts.part.0+0x1f3/0x340 [ 2694.722098] ? p9_fd_show_options+0x1c0/0x1c0 [ 2694.723173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2694.724432] ? trace_hardirqs_on+0x5b/0x180 [ 2694.725467] ? kfree+0xd7/0x340 [ 2694.726265] p9_fd_create+0x98/0x4a0 [ 2694.727155] ? p9_conn_create+0x510/0x510 [ 2694.728156] ? p9_client_create+0x798/0x1230 [ 2694.729204] ? kfree+0xd7/0x340 [ 2694.729998] ? do_raw_spin_unlock+0x4f/0x220 [ 2694.731055] p9_client_create+0x7ff/0x1230 [ 2694.732083] ? p9_client_flush+0x430/0x430 [ 2694.733093] ? trace_hardirqs_on+0x5b/0x180 [ 2694.734128] ? lockdep_init_map_type+0x2c7/0x780 [ 2694.735265] ? __raw_spin_lock_init+0x36/0x110 [ 2694.736368] v9fs_session_init+0x1dd/0x1680 [ 2694.737404] ? lock_release+0x680/0x680 [ 2694.738365] ? kmem_cache_alloc_trace+0x151/0x320 [ 2694.739521] ? v9fs_show_options+0x690/0x690 [ 2694.740590] ? trace_hardirqs_on+0x5b/0x180 [ 2694.741638] ? kasan_unpoison_shadow+0x33/0x50 [ 2694.742732] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.743965] v9fs_mount+0x79/0x8f0 [ 2694.744812] ? v9fs_write_inode+0x60/0x60 [ 2694.745783] legacy_get_tree+0x105/0x220 [ 2694.746733] vfs_get_tree+0x8e/0x300 [ 2694.747608] path_mount+0x1490/0x21e0 [ 2694.748514] ? strncpy_from_user+0x9e/0x470 [ 2694.749522] ? finish_automount+0xa90/0xa90 [ 2694.750542] ? getname_flags.part.0+0x1dd/0x4f0 [ 2694.751638] ? _copy_from_user+0xfb/0x1b0 [ 2694.752626] __x64_sys_mount+0x282/0x300 [ 2694.753588] ? copy_mnt_ns+0xa00/0xa00 [ 2694.754513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2694.755744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2694.756972] do_syscall_64+0x33/0x40 [ 2694.757849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2694.759046] RIP: 0033:0x7feccca28b19 [ 2694.759935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2694.764306] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2694.766115] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2694.767776] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2694.769431] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2694.771083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2694.772750] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2694.774436] CPU: 0 PID: 11664 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2694.776085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2694.777974] Call Trace: [ 2694.778571] dump_stack+0x107/0x167 [ 2694.779396] should_fail.cold+0x5/0xa [ 2694.780293] ? create_object.isra.0+0x3a/0xa30 [ 2694.781328] should_failslab+0x5/0x20 [ 2694.782202] kmem_cache_alloc+0x5b/0x310 [ 2694.783134] create_object.isra.0+0x3a/0xa30 [ 2694.784171] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.785338] __kmalloc_track_caller+0x177/0x370 [ 2694.786407] ? match_number+0xaf/0x1d0 [ 2694.787300] kmemdup_nul+0x2d/0xa0 [ 2694.788144] match_number+0xaf/0x1d0 [ 2694.788992] ? match_u64+0x190/0x190 [ 2694.789849] ? __kmalloc_track_caller+0x2c6/0x370 [ 2694.790965] ? memcpy+0x39/0x60 [ 2694.791728] parse_opts.part.0+0x1f3/0x340 [ 2694.792727] ? p9_fd_show_options+0x1c0/0x1c0 [ 2694.793929] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2694.795140] ? trace_hardirqs_on+0x5b/0x180 [ 2694.796169] ? kfree+0xd7/0x340 [ 2694.796934] p9_fd_create+0x98/0x4a0 [ 2694.797795] ? p9_conn_create+0x510/0x510 [ 2694.798758] ? p9_client_create+0x798/0x1230 [ 2694.799766] ? kfree+0xd7/0x340 [ 2694.800548] ? do_raw_spin_unlock+0x4f/0x220 [ 2694.801568] p9_client_create+0x7ff/0x1230 [ 2694.802546] ? p9_client_flush+0x430/0x430 [ 2694.803521] ? trace_hardirqs_on+0x5b/0x180 [ 2694.804556] ? lockdep_init_map_type+0x2c7/0x780 [ 2694.805654] ? __raw_spin_lock_init+0x36/0x110 [ 2694.806713] v9fs_session_init+0x1dd/0x1680 [ 2694.807705] ? lock_release+0x680/0x680 [ 2694.808650] ? kmem_cache_alloc_trace+0x151/0x320 [ 2694.809753] ? v9fs_show_options+0x690/0x690 [ 2694.810778] ? trace_hardirqs_on+0x5b/0x180 [ 2694.811784] ? kasan_unpoison_shadow+0x33/0x50 [ 2694.812864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.814031] v9fs_mount+0x79/0x8f0 [ 2694.814852] ? v9fs_write_inode+0x60/0x60 [ 2694.815809] legacy_get_tree+0x105/0x220 [ 2694.816790] vfs_get_tree+0x8e/0x300 [ 2694.817649] path_mount+0x1490/0x21e0 [ 2694.818535] ? strncpy_from_user+0x9e/0x470 [ 2694.819522] ? finish_automount+0xa90/0xa90 [ 2694.820542] ? getname_flags.part.0+0x1dd/0x4f0 [ 2694.821608] ? _copy_from_user+0xfb/0x1b0 [ 2694.822576] __x64_sys_mount+0x282/0x300 [ 2694.823507] ? copy_mnt_ns+0xa00/0xa00 [ 2694.824442] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2694.825653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2694.826840] do_syscall_64+0x33/0x40 [ 2694.827691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2694.828900] RIP: 0033:0x7f49777bbb19 [ 2694.829764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2694.834007] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2694.835752] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2694.837408] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2694.839029] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2694.840677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2694.842301] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2694.884997] FAULT_INJECTION: forcing a failure. [ 2694.884997] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.887832] CPU: 0 PID: 11674 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2694.889456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2694.891338] Call Trace: [ 2694.891963] dump_stack+0x107/0x167 [ 2694.892809] should_fail.cold+0x5/0xa [ 2694.893676] should_failslab+0x5/0x20 [ 2694.894542] __kmalloc_track_caller+0x79/0x370 [ 2694.895575] ? match_number+0xaf/0x1d0 [ 2694.896483] ? kfree+0xd7/0x340 [ 2694.897228] kmemdup_nul+0x2d/0xa0 [ 2694.898032] match_number+0xaf/0x1d0 [ 2694.898870] ? match_u64+0x190/0x190 [ 2694.899705] ? __kmalloc_track_caller+0x2c6/0x370 [ 2694.900822] ? memcpy+0x39/0x60 [ 2694.901570] parse_opts.part.0+0x1f3/0x340 [ 2694.902521] ? p9_fd_show_options+0x1c0/0x1c0 [ 2694.903537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2694.904774] ? trace_hardirqs_on+0x5b/0x180 [ 2694.905748] ? kfree+0xd7/0x340 [ 2694.906497] p9_fd_create+0x98/0x4a0 [ 2694.907329] ? p9_conn_create+0x510/0x510 [ 2694.908305] ? p9_client_create+0x798/0x1230 [ 2694.909498] ? kfree+0xd7/0x340 [ 2694.910246] ? do_raw_spin_unlock+0x4f/0x220 00:52:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2694.911247] p9_client_create+0x7ff/0x1230 [ 2694.912446] ? p9_client_flush+0x430/0x430 [ 2694.913406] ? trace_hardirqs_on+0x5b/0x180 [ 2694.914393] ? lockdep_init_map_type+0x2c7/0x780 [ 2694.915467] ? __raw_spin_lock_init+0x36/0x110 [ 2694.916545] v9fs_session_init+0x1dd/0x1680 [ 2694.917548] ? lock_release+0x680/0x680 [ 2694.918458] ? kmem_cache_alloc_trace+0x151/0x320 [ 2694.919541] ? v9fs_show_options+0x690/0x690 [ 2694.920578] ? trace_hardirqs_on+0x5b/0x180 [ 2694.921555] ? kasan_unpoison_shadow+0x33/0x50 [ 2694.922590] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.923748] v9fs_mount+0x79/0x8f0 [ 2694.924587] ? v9fs_write_inode+0x60/0x60 [ 2694.925530] legacy_get_tree+0x105/0x220 [ 2694.926445] vfs_get_tree+0x8e/0x300 [ 2694.927288] path_mount+0x1490/0x21e0 [ 2694.928177] ? strncpy_from_user+0x9e/0x470 [ 2694.929147] ? finish_automount+0xa90/0xa90 [ 2694.930123] ? getname_flags.part.0+0x1dd/0x4f0 [ 2694.931172] ? _copy_from_user+0xfb/0x1b0 [ 2694.932147] __x64_sys_mount+0x282/0x300 [ 2694.933055] ? copy_mnt_ns+0xa00/0xa00 [ 2694.933940] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2694.935109] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2694.936294] do_syscall_64+0x33/0x40 [ 2694.937129] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2694.938272] RIP: 0033:0x7f18e28f1b19 00:52:19 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 30) [ 2694.939100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2694.943320] RSP: 002b:00007f18dfe67188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2694.945048] RAX: ffffffffffffffda RBX: 00007f18e2a04f60 RCX: 00007f18e28f1b19 [ 2694.946643] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2694.948252] RBP: 00007f18dfe671d0 R08: 0000000020000280 R09: 0000000000000000 [ 2694.949839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2694.951432] R13: 00007ffdbb8fc63f R14: 00007f18dfe67300 R15: 0000000000022000 [ 2694.957152] 9pnet: Insufficient options for proto=fd 00:52:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x7400, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:20 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x2e, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) (fail_nth: 33) 00:52:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) (fail_nth: 3) 00:52:20 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 32) [ 2695.138247] FAULT_INJECTION: forcing a failure. [ 2695.138247] name failslab, interval 1, probability 0, space 0, times 0 [ 2695.140908] CPU: 1 PID: 11683 Comm: syz-executor.7 Not tainted 5.10.246 #1 [ 2695.142485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2695.144385] Call Trace: [ 2695.144989] dump_stack+0x107/0x167 [ 2695.145820] should_fail.cold+0x5/0xa [ 2695.146689] ? __alloc_skb+0x6d/0x5b0 [ 2695.147541] should_failslab+0x5/0x20 [ 2695.148408] kmem_cache_alloc_node+0x55/0x330 [ 2695.149430] __alloc_skb+0x6d/0x5b0 [ 2695.150261] netlink_sendmsg+0x998/0xe00 [ 2695.151185] ? netlink_unicast+0xa00/0xa00 [ 2695.152162] ? netlink_unicast+0xa00/0xa00 [ 2695.153110] __sock_sendmsg+0x154/0x190 [ 2695.154013] ____sys_sendmsg+0x70d/0x870 [ 2695.154933] ? sock_write_iter+0x3d0/0x3d0 [ 2695.155886] ? do_recvmmsg+0x6d0/0x6d0 [ 2695.156781] ? lock_downgrade+0x6d0/0x6d0 [ 2695.157721] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2695.158910] ___sys_sendmsg+0xf3/0x170 [ 2695.159790] ? sendmsg_copy_msghdr+0x160/0x160 [ 2695.160839] ? __fget_files+0x2cf/0x520 [ 2695.161726] ? lock_downgrade+0x6d0/0x6d0 [ 2695.162654] ? find_held_lock+0x2c/0x110 [ 2695.163585] ? __fget_files+0x2f8/0x520 [ 2695.164498] ? __fget_light+0xea/0x290 [ 2695.165378] __sys_sendmsg+0xe5/0x1b0 [ 2695.166230] ? __sys_sendmsg_sock+0x40/0x40 [ 2695.167203] ? rcu_read_lock_any_held+0x75/0xa0 [ 2695.168273] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2695.169442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2695.170593] ? trace_hardirqs_on+0x5b/0x180 [ 2695.171555] do_syscall_64+0x33/0x40 [ 2695.172396] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2695.173548] RIP: 0033:0x7fa5a13a4b19 [ 2695.174375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2695.178453] RSP: 002b:00007fa59e91a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2695.180155] RAX: ffffffffffffffda RBX: 00007fa5a14b7f60 RCX: 00007fa5a13a4b19 [ 2695.181735] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2695.183311] RBP: 00007fa59e91a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2695.184909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2695.186491] R13: 00007fff1c20acdf R14: 00007fa59e91a300 R15: 0000000000022000 [ 2695.265783] FAULT_INJECTION: forcing a failure. [ 2695.265783] name failslab, interval 1, probability 0, space 0, times 0 [ 2695.268641] CPU: 1 PID: 11682 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2695.270284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2695.272247] Call Trace: [ 2695.272872] dump_stack+0x107/0x167 [ 2695.273721] should_fail.cold+0x5/0xa [ 2695.274615] should_failslab+0x5/0x20 [ 2695.275505] __kmalloc_track_caller+0x79/0x370 [ 2695.276579] ? match_number+0xaf/0x1d0 [ 2695.277487] ? kfree+0xd7/0x340 [ 2695.278253] kmemdup_nul+0x2d/0xa0 [ 2695.279078] match_number+0xaf/0x1d0 00:52:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) (fail_nth: 4) [ 2695.279976] ? match_u64+0x190/0x190 [ 2695.281085] ? __kmalloc_track_caller+0x2c6/0x370 [ 2695.282233] ? memcpy+0x39/0x60 [ 2695.283015] parse_opts.part.0+0x1f3/0x340 [ 2695.284040] ? p9_fd_show_options+0x1c0/0x1c0 [ 2695.285090] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2695.286310] ? trace_hardirqs_on+0x5b/0x180 [ 2695.287335] ? kfree+0xd7/0x340 [ 2695.288126] p9_fd_create+0x98/0x4a0 [ 2695.288996] ? p9_conn_create+0x510/0x510 [ 2695.289956] ? p9_client_create+0x798/0x1230 [ 2695.290979] ? kfree+0xd7/0x340 [ 2695.291742] ? do_raw_spin_unlock+0x4f/0x220 [ 2695.292798] p9_client_create+0x7ff/0x1230 [ 2695.293792] ? p9_client_flush+0x430/0x430 [ 2695.294782] ? trace_hardirqs_on+0x5b/0x180 [ 2695.295793] ? lockdep_init_map_type+0x2c7/0x780 [ 2695.296887] ? __raw_spin_lock_init+0x36/0x110 [ 2695.297954] v9fs_session_init+0x1dd/0x1680 [ 2695.298958] ? lock_release+0x680/0x680 [ 2695.299887] ? kmem_cache_alloc_trace+0x151/0x320 [ 2695.301000] ? v9fs_show_options+0x690/0x690 [ 2695.302023] ? trace_hardirqs_on+0x5b/0x180 [ 2695.303024] ? kasan_unpoison_shadow+0x33/0x50 [ 2695.304091] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2695.305260] v9fs_mount+0x79/0x8f0 [ 2695.306079] ? v9fs_write_inode+0x60/0x60 [ 2695.307038] legacy_get_tree+0x105/0x220 [ 2695.307993] vfs_get_tree+0x8e/0x300 [ 2695.308842] path_mount+0x1490/0x21e0 [ 2695.309725] ? strncpy_from_user+0x9e/0x470 [ 2695.310711] ? finish_automount+0xa90/0xa90 [ 2695.311743] ? getname_flags.part.0+0x1dd/0x4f0 [ 2695.312960] ? _copy_from_user+0xfb/0x1b0 [ 2695.313924] __x64_sys_mount+0x282/0x300 [ 2695.314856] ? copy_mnt_ns+0xa00/0xa00 [ 2695.316021] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2695.317420] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2695.318779] do_syscall_64+0x33/0x40 [ 2695.319788] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2695.321144] RIP: 0033:0x7feccca28b19 [ 2695.322187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2695.327050] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2695.329003] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2695.330930] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2695.332909] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2695.334758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2695.336682] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2695.338921] 9pnet: Insufficient options for proto=fd [ 2695.351987] FAULT_INJECTION: forcing a failure. [ 2695.351987] name failslab, interval 1, probability 0, space 0, times 0 [ 2695.354417] CPU: 0 PID: 11693 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2695.355926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2695.357696] Call Trace: [ 2695.358269] dump_stack+0x107/0x167 [ 2695.359054] should_fail.cold+0x5/0xa [ 2695.359875] ? p9_fd_create+0x161/0x4a0 [ 2695.360732] should_failslab+0x5/0x20 [ 2695.361541] kmem_cache_alloc_trace+0x55/0x320 [ 2695.362513] p9_fd_create+0x161/0x4a0 [ 2695.363315] ? p9_conn_create+0x510/0x510 [ 2695.364192] ? p9_client_create+0x798/0x1230 [ 2695.365119] ? kfree+0xd7/0x340 [ 2695.365814] ? do_raw_spin_unlock+0x4f/0x220 [ 2695.366752] p9_client_create+0x7ff/0x1230 [ 2695.367652] ? p9_client_flush+0x430/0x430 [ 2695.368555] ? trace_hardirqs_on+0x5b/0x180 [ 2695.369468] ? lockdep_init_map_type+0x2c7/0x780 [ 2695.370476] ? __raw_spin_lock_init+0x36/0x110 [ 2695.371452] v9fs_session_init+0x1dd/0x1680 [ 2695.372377] ? lock_release+0x680/0x680 [ 2695.373231] ? kmem_cache_alloc_trace+0x151/0x320 [ 2695.374257] ? v9fs_show_options+0x690/0x690 [ 2695.375207] ? trace_hardirqs_on+0x5b/0x180 [ 2695.376132] ? kasan_unpoison_shadow+0x33/0x50 [ 2695.377093] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2695.378051] 9pnet: Insufficient options for proto=fd [ 2695.378165] v9fs_mount+0x79/0x8f0 [ 2695.380034] ? v9fs_write_inode+0x60/0x60 [ 2695.380907] legacy_get_tree+0x105/0x220 [ 2695.381768] vfs_get_tree+0x8e/0x300 [ 2695.382271] FAULT_INJECTION: forcing a failure. [ 2695.382271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2695.382555] path_mount+0x1490/0x21e0 [ 2695.382579] ? strncpy_from_user+0x9e/0x470 [ 2695.382597] ? finish_automount+0xa90/0xa90 [ 2695.382617] ? getname_flags.part.0+0x1dd/0x4f0 [ 2695.382644] ? _copy_from_user+0xfb/0x1b0 [ 2695.389623] __x64_sys_mount+0x282/0x300 [ 2695.390476] ? copy_mnt_ns+0xa00/0xa00 [ 2695.391303] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2695.392416] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2695.393507] do_syscall_64+0x33/0x40 [ 2695.394294] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2695.395375] RIP: 0033:0x7f49777bbb19 [ 2695.396174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2695.400077] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2695.401691] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2695.403190] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2695.404706] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2695.406208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2695.407715] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2695.409254] CPU: 1 PID: 11692 Comm: syz-executor.3 Not tainted 5.10.246 #1 [ 2695.410792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2695.412618] Call Trace: [ 2695.413206] dump_stack+0x107/0x167 [ 2695.414014] should_fail.cold+0x5/0xa [ 2695.414868] _copy_from_user+0x2e/0x1b0 [ 2695.415758] kstrtouint_from_user+0xbd/0x220 [ 2695.416750] ? kstrtou8_from_user+0x210/0x210 [ 2695.417755] ? lock_acquire+0x197/0x470 [ 2695.418634] ? ksys_write+0x12d/0x260 [ 2695.419490] proc_fail_nth_write+0x78/0x220 [ 2695.420458] ? proc_task_getattr+0x1f0/0x1f0 [ 2695.421644] ? proc_task_getattr+0x1f0/0x1f0 [ 2695.422612] vfs_write+0x29a/0xb10 [ 2695.423401] ksys_write+0x12d/0x260 [ 2695.424226] ? __ia32_sys_read+0xb0/0xb0 [ 2695.425152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2695.426332] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2695.427482] do_syscall_64+0x33/0x40 [ 2695.428378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2695.429746] RIP: 0033:0x7f18e28a45ff [ 2695.430643] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2695.435081] RSP: 002b:00007f18dfe67170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2695.436788] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f18e28a45ff [ 2695.438378] RDX: 0000000000000001 RSI: 00007f18dfe671e0 RDI: 0000000000000005 [ 2695.439975] RBP: 00007f18dfe671d0 R08: 0000000000000000 R09: 0000000000000000 [ 2695.441602] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2695.443220] R13: 00007ffdbb8fc63f R14: 00007f18dfe67300 R15: 0000000000022000 00:52:20 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x48, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:20 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x7a00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:35 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 31) 00:52:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:52:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:52:35 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x4c, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0xedc0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:35 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 33) [ 2710.151435] FAULT_INJECTION: forcing a failure. [ 2710.151435] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.154207] CPU: 0 PID: 11720 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2710.155779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2710.157538] Call Trace: [ 2710.158105] dump_stack+0x107/0x167 [ 2710.158893] should_fail.cold+0x5/0xa [ 2710.159711] ? create_object.isra.0+0x3a/0xa30 [ 2710.160682] should_failslab+0x5/0x20 [ 2710.161488] kmem_cache_alloc+0x5b/0x310 [ 2710.162332] ? p9_fd_show_options+0x1c0/0x1c0 [ 2710.163275] create_object.isra.0+0x3a/0xa30 [ 2710.164205] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2710.165262] kmem_cache_alloc_trace+0x151/0x320 [ 2710.166229] p9_fd_create+0x161/0x4a0 [ 2710.167020] ? p9_conn_create+0x510/0x510 [ 2710.167878] ? p9_client_create+0x798/0x1230 [ 2710.168808] ? kfree+0xd7/0x340 [ 2710.169496] ? do_raw_spin_unlock+0x4f/0x220 [ 2710.170419] p9_client_create+0x7ff/0x1230 [ 2710.171305] ? p9_client_flush+0x430/0x430 [ 2710.172195] ? trace_hardirqs_on+0x5b/0x180 [ 2710.173099] ? lockdep_init_map_type+0x2c7/0x780 [ 2710.174091] ? __raw_spin_lock_init+0x36/0x110 00:52:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2710.175056] v9fs_session_init+0x1dd/0x1680 [ 2710.176109] ? lock_release+0x680/0x680 [ 2710.176963] ? kmem_cache_alloc_trace+0x151/0x320 [ 2710.177960] ? v9fs_show_options+0x690/0x690 [ 2710.178880] ? trace_hardirqs_on+0x5b/0x180 [ 2710.179779] ? kasan_unpoison_shadow+0x33/0x50 [ 2710.180754] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2710.181836] v9fs_mount+0x79/0x8f0 [ 2710.182593] ? v9fs_write_inode+0x60/0x60 [ 2710.183475] legacy_get_tree+0x105/0x220 [ 2710.184351] vfs_get_tree+0x8e/0x300 [ 2710.185149] path_mount+0x1490/0x21e0 [ 2710.185967] ? strncpy_from_user+0x9e/0x470 [ 2710.186892] ? finish_automount+0xa90/0xa90 [ 2710.187811] ? getname_flags.part.0+0x1dd/0x4f0 [ 2710.188825] ? _copy_from_user+0xfb/0x1b0 [ 2710.189726] __x64_sys_mount+0x282/0x300 [ 2710.190596] ? copy_mnt_ns+0xa00/0xa00 [ 2710.191432] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2710.192572] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2710.193680] do_syscall_64+0x33/0x40 [ 2710.194478] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2710.195577] RIP: 0033:0x7f49777bbb19 [ 2710.196384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2710.200374] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2710.202017] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2710.203551] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2710.205090] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2710.206626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2710.208166] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2710.248389] FAULT_INJECTION: forcing a failure. [ 2710.248389] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.251071] CPU: 1 PID: 11725 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2710.252589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2710.254380] Call Trace: [ 2710.254956] dump_stack+0x107/0x167 [ 2710.255746] should_fail.cold+0x5/0xa [ 2710.256583] ? create_object.isra.0+0x3a/0xa30 [ 2710.257563] should_failslab+0x5/0x20 [ 2710.258379] kmem_cache_alloc+0x5b/0x310 [ 2710.259258] create_object.isra.0+0x3a/0xa30 [ 2710.260204] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2710.261365] __kmalloc_track_caller+0x177/0x370 [ 2710.262382] ? match_number+0xaf/0x1d0 [ 2710.263226] kmemdup_nul+0x2d/0xa0 [ 2710.263999] match_number+0xaf/0x1d0 [ 2710.264819] ? match_u64+0x190/0x190 [ 2710.265620] ? __kmalloc_track_caller+0x2c6/0x370 [ 2710.266807] ? memcpy+0x39/0x60 [ 2710.267663] parse_opts.part.0+0x1f3/0x340 [ 2710.268586] ? p9_fd_show_options+0x1c0/0x1c0 [ 2710.269554] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2710.270676] ? trace_hardirqs_on+0x5b/0x180 [ 2710.271608] ? kfree+0xd7/0x340 [ 2710.272332] p9_fd_create+0x98/0x4a0 [ 2710.273139] ? p9_conn_create+0x510/0x510 [ 2710.274243] ? p9_client_create+0x798/0x1230 [ 2710.275232] ? kfree+0xd7/0x340 [ 2710.275948] ? do_raw_spin_unlock+0x4f/0x220 [ 2710.276912] p9_client_create+0x7ff/0x1230 [ 2710.277830] ? p9_client_flush+0x430/0x430 [ 2710.278743] ? trace_hardirqs_on+0x5b/0x180 [ 2710.279681] ? lockdep_init_map_type+0x2c7/0x780 [ 2710.280706] ? __raw_spin_lock_init+0x36/0x110 [ 2710.281691] v9fs_session_init+0x1dd/0x1680 [ 2710.282620] ? lock_release+0x680/0x680 [ 2710.283485] ? kmem_cache_alloc_trace+0x151/0x320 [ 2710.284530] ? v9fs_show_options+0x690/0x690 [ 2710.285489] ? trace_hardirqs_on+0x5b/0x180 [ 2710.286414] ? kasan_unpoison_shadow+0x33/0x50 [ 2710.287402] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2710.288508] v9fs_mount+0x79/0x8f0 [ 2710.289291] ? v9fs_write_inode+0x60/0x60 [ 2710.290184] legacy_get_tree+0x105/0x220 [ 2710.291061] vfs_get_tree+0x8e/0x300 [ 2710.291862] path_mount+0x1490/0x21e0 [ 2710.292692] ? strncpy_from_user+0x9e/0x470 [ 2710.293620] ? finish_automount+0xa90/0xa90 [ 2710.294543] ? getname_flags.part.0+0x1dd/0x4f0 [ 2710.295551] ? _copy_from_user+0xfb/0x1b0 [ 2710.296453] __x64_sys_mount+0x282/0x300 [ 2710.297328] ? copy_mnt_ns+0xa00/0xa00 [ 2710.298164] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2710.299285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2710.300403] do_syscall_64+0x33/0x40 [ 2710.301207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2710.302310] RIP: 0033:0x7feccca28b19 [ 2710.303115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2710.307100] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2710.308744] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2710.310297] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2710.311842] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2710.313389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2710.314918] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:52:35 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0xfeff, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 32) 00:52:49 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x68, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:52:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000001c0), &(0x7f0000000780), 0x2, 0x1) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:52:49 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0xff03, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:49 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 34) 00:52:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2724.159055] FAULT_INJECTION: forcing a failure. [ 2724.159055] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.160475] CPU: 1 PID: 11752 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2724.161272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2724.162231] Call Trace: [ 2724.162540] dump_stack+0x107/0x167 [ 2724.162959] should_fail.cold+0x5/0xa [ 2724.163401] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 2724.164010] should_failslab+0x5/0x20 [ 2724.164461] kmem_cache_alloc+0x5b/0x310 [ 2724.164935] p9_client_prepare_req.part.0+0x3a/0xac0 [ 2724.165520] p9_client_rpc+0x220/0x1370 [ 2724.165984] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2724.166591] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2724.167209] ? pipe_poll+0x21b/0x800 [ 2724.167646] ? p9_fd_close+0x4a0/0x4a0 [ 2724.168097] ? wait_for_partner+0x3c0/0x3c0 [ 2724.168613] ? p9_fd_poll+0x1e0/0x2c0 [ 2724.169051] ? p9_fd_create+0x357/0x4a0 [ 2724.169509] ? p9_conn_create+0x510/0x510 [ 2724.169978] ? p9_client_create+0x798/0x1230 [ 2724.170485] ? kfree+0xd7/0x340 [ 2724.170865] ? do_raw_spin_unlock+0x4f/0x220 [ 2724.171380] p9_client_create+0xa76/0x1230 [ 2724.171875] ? p9_client_flush+0x430/0x430 [ 2724.172380] ? trace_hardirqs_on+0x5b/0x180 [ 2724.172883] ? lockdep_init_map_type+0x2c7/0x780 [ 2724.173430] ? __raw_spin_lock_init+0x36/0x110 [ 2724.173975] v9fs_session_init+0x1dd/0x1680 [ 2724.174474] ? lock_release+0x680/0x680 [ 2724.174935] ? kmem_cache_alloc_trace+0x151/0x320 [ 2724.175490] ? v9fs_show_options+0x690/0x690 [ 2724.176000] ? trace_hardirqs_on+0x5b/0x180 [ 2724.176509] ? kasan_unpoison_shadow+0x33/0x50 [ 2724.177032] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.177618] v9fs_mount+0x79/0x8f0 [ 2724.178037] ? v9fs_write_inode+0x60/0x60 [ 2724.178510] legacy_get_tree+0x105/0x220 [ 2724.178974] vfs_get_tree+0x8e/0x300 [ 2724.179401] path_mount+0x1490/0x21e0 [ 2724.179845] ? strncpy_from_user+0x9e/0x470 [ 2724.180353] ? finish_automount+0xa90/0xa90 [ 2724.180845] ? getname_flags.part.0+0x1dd/0x4f0 [ 2724.181377] ? _copy_from_user+0xfb/0x1b0 [ 2724.181858] __x64_sys_mount+0x282/0x300 [ 2724.182323] ? copy_mnt_ns+0xa00/0xa00 [ 2724.182771] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2724.183372] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2724.183963] do_syscall_64+0x33/0x40 [ 2724.184399] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2724.184983] RIP: 0033:0x7f49777bbb19 [ 2724.185408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.187513] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2724.188394] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2724.189213] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2724.190038] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2724.190864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2724.191809] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:52:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2724.225220] FAULT_INJECTION: forcing a failure. [ 2724.225220] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.226577] CPU: 1 PID: 11750 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2724.227381] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2724.228350] Call Trace: [ 2724.228657] dump_stack+0x107/0x167 [ 2724.229073] should_fail.cold+0x5/0xa [ 2724.229511] should_failslab+0x5/0x20 [ 2724.229947] __kmalloc_track_caller+0x79/0x370 [ 2724.230474] ? match_number+0xaf/0x1d0 [ 2724.230919] ? kfree+0xd7/0x340 [ 2724.231297] kmemdup_nul+0x2d/0xa0 [ 2724.231710] match_number+0xaf/0x1d0 [ 2724.232137] ? match_u64+0x190/0x190 [ 2724.232573] ? __kmalloc_track_caller+0x2c6/0x370 [ 2724.233122] ? memcpy+0x39/0x60 [ 2724.233500] parse_opts.part.0+0x1f3/0x340 [ 2724.233981] ? p9_fd_show_options+0x1c0/0x1c0 [ 2724.234496] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2724.235090] ? trace_hardirqs_on+0x5b/0x180 [ 2724.235581] ? kfree+0xd7/0x340 [ 2724.235962] p9_fd_create+0x98/0x4a0 [ 2724.236396] ? p9_conn_create+0x510/0x510 [ 2724.236872] ? p9_client_create+0x798/0x1230 [ 2724.237378] ? kfree+0xd7/0x340 [ 2724.237755] ? do_raw_spin_unlock+0x4f/0x220 [ 2724.238260] p9_client_create+0x7ff/0x1230 [ 2724.238753] ? p9_client_flush+0x430/0x430 [ 2724.239239] ? trace_hardirqs_on+0x5b/0x180 [ 2724.239734] ? lockdep_init_map_type+0x2c7/0x780 [ 2724.240288] ? __raw_spin_lock_init+0x36/0x110 [ 2724.240816] v9fs_session_init+0x1dd/0x1680 [ 2724.241311] ? lock_release+0x680/0x680 [ 2724.241794] ? kmem_cache_alloc_trace+0x151/0x320 [ 2724.242353] ? v9fs_show_options+0x690/0x690 [ 2724.242859] ? trace_hardirqs_on+0x5b/0x180 [ 2724.243352] ? kasan_unpoison_shadow+0x33/0x50 [ 2724.243875] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.244496] v9fs_mount+0x79/0x8f0 [ 2724.244901] ? v9fs_write_inode+0x60/0x60 [ 2724.245374] legacy_get_tree+0x105/0x220 [ 2724.245838] vfs_get_tree+0x8e/0x300 [ 2724.246262] path_mount+0x1490/0x21e0 [ 2724.246699] ? strncpy_from_user+0x9e/0x470 [ 2724.247382] ? finish_automount+0xa90/0xa90 [ 2724.247873] ? getname_flags.part.0+0x1dd/0x4f0 [ 2724.248546] ? _copy_from_user+0xfb/0x1b0 [ 2724.249026] __x64_sys_mount+0x282/0x300 [ 2724.249598] ? copy_mnt_ns+0xa00/0xa00 [ 2724.250178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2724.250799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2724.251488] do_syscall_64+0x33/0x40 [ 2724.251916] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2724.252663] RIP: 0033:0x7feccca28b19 [ 2724.253200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.255651] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2724.256529] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2724.257475] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2724.258377] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2724.259387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2724.260205] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2724.261230] 9pnet: Insufficient options for proto=fd [ 2724.263414] 9pnet: Insufficient options for proto=fd 00:52:49 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x6c, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:49 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 35) 00:52:49 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0xfffe, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, r0, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@fscache}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rndno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) fsetxattr$security_ima(r4, &(0x7f00000001c0), &(0x7f0000000780)=ANY=[@ANYBLOB="04142c9de8d7503e286da9d97ec22557"], 0x10, 0x2) 00:52:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 33) 00:52:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:52:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2724.452012] FAULT_INJECTION: forcing a failure. [ 2724.452012] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.453584] CPU: 1 PID: 11767 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2724.454509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2724.455598] Call Trace: [ 2724.456003] dump_stack+0x107/0x167 [ 2724.456530] should_fail.cold+0x5/0xa [ 2724.457042] ? create_object.isra.0+0x3a/0xa30 [ 2724.457561] should_failslab+0x5/0x20 [ 2724.458134] kmem_cache_alloc+0x5b/0x310 [ 2724.458665] create_object.isra.0+0x3a/0xa30 [ 2724.459270] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.459920] kmem_cache_alloc+0x159/0x310 [ 2724.460419] p9_client_prepare_req.part.0+0x3a/0xac0 [ 2724.461103] p9_client_rpc+0x220/0x1370 [ 2724.461652] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2724.462419] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2724.463028] ? pipe_poll+0x21b/0x800 [ 2724.463487] ? p9_fd_close+0x4a0/0x4a0 [ 2724.464004] ? wait_for_partner+0x3c0/0x3c0 [ 2724.464641] ? p9_fd_poll+0x1e0/0x2c0 [ 2724.465185] ? p9_fd_create+0x357/0x4a0 [ 2724.465638] ? p9_conn_create+0x510/0x510 [ 2724.466198] ? p9_client_create+0x798/0x1230 [ 2724.466745] ? kfree+0xd7/0x340 [ 2724.467216] ? do_raw_spin_unlock+0x4f/0x220 [ 2724.467830] p9_client_create+0xa76/0x1230 [ 2724.468327] ? p9_client_flush+0x430/0x430 [ 2724.468880] ? trace_hardirqs_on+0x5b/0x180 [ 2724.469438] ? lockdep_init_map_type+0x2c7/0x780 [ 2724.470135] ? __raw_spin_lock_init+0x36/0x110 [ 2724.470742] v9fs_session_init+0x1dd/0x1680 [ 2724.471235] ? lock_release+0x680/0x680 [ 2724.471689] ? kmem_cache_alloc_trace+0x151/0x320 [ 2724.472356] ? v9fs_show_options+0x690/0x690 [ 2724.472941] ? trace_hardirqs_on+0x5b/0x180 [ 2724.473543] ? kasan_unpoison_shadow+0x33/0x50 [ 2724.474151] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.474733] v9fs_mount+0x79/0x8f0 [ 2724.475137] ? v9fs_write_inode+0x60/0x60 [ 2724.475609] legacy_get_tree+0x105/0x220 [ 2724.476186] vfs_get_tree+0x8e/0x300 [ 2724.476623] path_mount+0x1490/0x21e0 [ 2724.477208] ? strncpy_from_user+0x9e/0x470 [ 2724.477816] ? finish_automount+0xa90/0xa90 [ 2724.478308] ? getname_flags.part.0+0x1dd/0x4f0 [ 2724.478842] ? _copy_from_user+0xfb/0x1b0 [ 2724.479318] __x64_sys_mount+0x282/0x300 [ 2724.479785] ? copy_mnt_ns+0xa00/0xa00 [ 2724.480231] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2724.480839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2724.481428] do_syscall_64+0x33/0x40 [ 2724.481854] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2724.482441] RIP: 0033:0x7f49777bbb19 [ 2724.482869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.484975] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2724.485849] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2724.486665] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2724.487481] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2724.488410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2724.489367] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2724.510150] 9pnet: Insufficient options for proto=fd [ 2724.547186] 9pnet: Insufficient options for proto=fd [ 2724.561631] FAULT_INJECTION: forcing a failure. [ 2724.561631] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.563201] CPU: 1 PID: 11780 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2724.564145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2724.565405] Call Trace: [ 2724.565712] dump_stack+0x107/0x167 [ 2724.566130] should_fail.cold+0x5/0xa [ 2724.566585] ? create_object.isra.0+0x3a/0xa30 [ 2724.567217] should_failslab+0x5/0x20 [ 2724.567740] kmem_cache_alloc+0x5b/0x310 [ 2724.568329] ? p9_fd_show_options+0x1c0/0x1c0 [ 2724.568947] create_object.isra.0+0x3a/0xa30 [ 2724.569449] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.570036] kmem_cache_alloc_trace+0x151/0x320 [ 2724.570614] p9_fd_create+0x161/0x4a0 [ 2724.571118] ? p9_conn_create+0x510/0x510 [ 2724.571725] ? p9_client_create+0x798/0x1230 [ 2724.572382] ? kfree+0xd7/0x340 [ 2724.572760] ? do_raw_spin_unlock+0x4f/0x220 [ 2724.573265] p9_client_create+0x7ff/0x1230 [ 2724.573751] ? p9_client_flush+0x430/0x430 [ 2724.574231] ? trace_hardirqs_on+0x5b/0x180 [ 2724.574723] ? lockdep_init_map_type+0x2c7/0x780 [ 2724.575266] ? __raw_spin_lock_init+0x36/0x110 [ 2724.575789] v9fs_session_init+0x1dd/0x1680 [ 2724.576291] ? lock_release+0x680/0x680 [ 2724.576750] ? kmem_cache_alloc_trace+0x151/0x320 [ 2724.577296] ? v9fs_show_options+0x690/0x690 [ 2724.577805] ? trace_hardirqs_on+0x5b/0x180 [ 2724.578298] ? kasan_unpoison_shadow+0x33/0x50 [ 2724.578815] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.579396] v9fs_mount+0x79/0x8f0 [ 2724.579802] ? v9fs_write_inode+0x60/0x60 [ 2724.580283] legacy_get_tree+0x105/0x220 [ 2724.580745] vfs_get_tree+0x8e/0x300 [ 2724.581171] path_mount+0x1490/0x21e0 [ 2724.581609] ? strncpy_from_user+0x9e/0x470 [ 2724.582097] ? finish_automount+0xa90/0xa90 [ 2724.582592] ? getname_flags.part.0+0x1dd/0x4f0 [ 2724.583120] ? _copy_from_user+0xfb/0x1b0 [ 2724.583604] __x64_sys_mount+0x282/0x300 [ 2724.584074] ? copy_mnt_ns+0xa00/0xa00 [ 2724.584529] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2724.585126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2724.585715] do_syscall_64+0x33/0x40 [ 2724.586140] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2724.586726] RIP: 0033:0x7feccca28b19 [ 2724.587149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.589260] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2724.590133] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2724.590947] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2724.591760] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2724.592581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2724.593394] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:52:49 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x74, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:52:49 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1514a, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0xb00, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c70726976707b72742c64666c7467696018", @ANYRESHEX=0x0, @ANYBLOB=',loose,msize=0x0000000000000002,privport,access=user,subj_user=rfdno,fowner=', @ANYRESDEC, @ANYBLOB=',smackfshat=*],fowner=', @ANYRESDEC=r5, @ANYBLOB=',dont_hash,\x00']) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:52:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:49 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x7a, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:52:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 34) [ 2724.827879] 9pnet: Insufficient options for proto=fd [ 2724.956303] FAULT_INJECTION: forcing a failure. [ 2724.956303] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.959298] CPU: 0 PID: 11801 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2724.960883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2724.962763] Call Trace: [ 2724.963377] dump_stack+0x107/0x167 [ 2724.964197] should_fail.cold+0x5/0xa [ 2724.965075] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 2724.966267] should_failslab+0x5/0x20 [ 2724.967134] kmem_cache_alloc+0x5b/0x310 [ 2724.968062] p9_client_prepare_req.part.0+0x3a/0xac0 [ 2724.969221] p9_client_rpc+0x220/0x1370 [ 2724.970118] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2724.971311] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2724.972526] ? pipe_poll+0x21b/0x800 [ 2724.973371] ? p9_fd_close+0x4a0/0x4a0 [ 2724.974258] ? wait_for_partner+0x3c0/0x3c0 [ 2724.975233] ? p9_fd_poll+0x1e0/0x2c0 [ 2724.976102] ? p9_fd_create+0x357/0x4a0 [ 2724.977004] ? p9_conn_create+0x510/0x510 [ 2724.977934] ? p9_client_create+0x798/0x1230 [ 2724.978928] ? kfree+0xd7/0x340 [ 2724.979676] ? do_raw_spin_unlock+0x4f/0x220 [ 2724.980684] p9_client_create+0xa76/0x1230 [ 2724.981653] ? p9_client_flush+0x430/0x430 [ 2724.982620] ? trace_hardirqs_on+0x5b/0x180 [ 2724.983606] ? lockdep_init_map_type+0x2c7/0x780 [ 2724.984683] ? __raw_spin_lock_init+0x36/0x110 [ 2724.985739] v9fs_session_init+0x1dd/0x1680 [ 2724.986724] ? lock_release+0x680/0x680 [ 2724.987654] ? kmem_cache_alloc_trace+0x151/0x320 [ 2724.988742] ? v9fs_show_options+0x690/0x690 [ 2724.989744] ? trace_hardirqs_on+0x5b/0x180 [ 2724.990719] ? kasan_unpoison_shadow+0x33/0x50 [ 2724.991782] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2724.992946] v9fs_mount+0x79/0x8f0 [ 2724.993756] ? v9fs_write_inode+0x60/0x60 [ 2724.994695] legacy_get_tree+0x105/0x220 [ 2724.995615] vfs_get_tree+0x8e/0x300 [ 2724.996467] path_mount+0x1490/0x21e0 [ 2724.997338] ? strncpy_from_user+0x9e/0x470 [ 2724.998315] ? finish_automount+0xa90/0xa90 [ 2724.999288] ? getname_flags.part.0+0x1dd/0x4f0 [ 2725.000346] ? _copy_from_user+0xfb/0x1b0 [ 2725.001294] __x64_sys_mount+0x282/0x300 [ 2725.002226] ? copy_mnt_ns+0xa00/0xa00 [ 2725.003112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2725.004319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2725.005484] do_syscall_64+0x33/0x40 [ 2725.006320] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2725.007479] RIP: 0033:0x7feccca28b19 [ 2725.008330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2725.012502] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2725.014230] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2725.015842] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2725.017457] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2725.019088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2725.020716] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:53:02 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 36) 00:53:02 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 35) 00:53:02 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1514b, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) 00:53:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000780)='./file0/../file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000980)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@loose}, {@msize={'msize', 0x3d, 0x1000000081}}, {@privport}, {@access_user}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsroot}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfshat={'smackfshat', 0x3d, 'version=9p2000.L'}}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x7}, 0x80000001) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2cf766646e6f3d", @ANYRESHEX, @ANYBLOB="2c89"]) 00:53:02 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x300, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2737.508204] FAULT_INJECTION: forcing a failure. [ 2737.508204] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.510962] CPU: 1 PID: 11816 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2737.512796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2737.515064] Call Trace: [ 2737.515690] dump_stack+0x107/0x167 [ 2737.516564] should_fail.cold+0x5/0xa [ 2737.517460] ? p9_fcall_init+0x97/0x290 [ 2737.518521] should_failslab+0x5/0x20 [ 2737.519716] __kmalloc+0x72/0x390 [ 2737.520548] p9_fcall_init+0x97/0x290 [ 2737.521441] p9_client_prepare_req.part.0+0x8c/0xac0 [ 2737.522637] p9_client_rpc+0x220/0x1370 [ 2737.523576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2737.524957] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2737.526296] ? pipe_poll+0x21b/0x800 [ 2737.527307] ? p9_fd_close+0x4a0/0x4a0 [ 2737.528288] ? wait_for_partner+0x3c0/0x3c0 [ 2737.529308] ? p9_fd_poll+0x1e0/0x2c0 [ 2737.530212] ? p9_fd_create+0x357/0x4a0 [ 2737.531165] ? p9_conn_create+0x510/0x510 [ 2737.532153] ? p9_client_create+0x798/0x1230 [ 2737.533211] ? kfree+0xd7/0x340 [ 2737.533997] ? do_raw_spin_unlock+0x4f/0x220 [ 2737.535053] p9_client_create+0xa76/0x1230 [ 2737.536070] ? p9_client_flush+0x430/0x430 [ 2737.537095] ? trace_hardirqs_on+0x5b/0x180 [ 2737.538132] ? lockdep_init_map_type+0x2c7/0x780 [ 2737.539271] ? __raw_spin_lock_init+0x36/0x110 [ 2737.540371] v9fs_session_init+0x1dd/0x1680 [ 2737.541427] ? lock_release+0x680/0x680 [ 2737.542393] ? kmem_cache_alloc_trace+0x151/0x320 [ 2737.543547] ? v9fs_show_options+0x690/0x690 [ 2737.544625] ? trace_hardirqs_on+0x5b/0x180 [ 2737.545654] ? kasan_unpoison_shadow+0x33/0x50 [ 2737.546740] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2737.547964] v9fs_mount+0x79/0x8f0 [ 2737.548826] ? v9fs_write_inode+0x60/0x60 [ 2737.549818] legacy_get_tree+0x105/0x220 [ 2737.550796] vfs_get_tree+0x8e/0x300 [ 2737.551683] path_mount+0x1490/0x21e0 [ 2737.552609] ? strncpy_from_user+0x9e/0x470 [ 2737.553628] ? finish_automount+0xa90/0xa90 [ 2737.554685] ? getname_flags.part.0+0x1dd/0x4f0 [ 2737.555780] ? _copy_from_user+0xfb/0x1b0 [ 2737.556775] __x64_sys_mount+0x282/0x300 [ 2737.557750] ? copy_mnt_ns+0xa00/0xa00 [ 2737.558680] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2737.559923] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2737.561160] do_syscall_64+0x33/0x40 [ 2737.562032] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2737.563233] RIP: 0033:0x7f49777bbb19 [ 2737.564112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2737.568483] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2737.570288] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2737.571976] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2737.573678] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2737.575333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2737.576983] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2737.596450] 9pnet: Insufficient options for proto=fd [ 2737.629264] FAULT_INJECTION: forcing a failure. [ 2737.629264] name failslab, interval 1, probability 0, space 0, times 0 [ 2737.632377] CPU: 1 PID: 11821 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2737.633978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2737.636018] Call Trace: [ 2737.636635] dump_stack+0x107/0x167 [ 2737.637589] should_fail.cold+0x5/0xa [ 2737.638671] ? create_object.isra.0+0x3a/0xa30 [ 2737.639765] should_failslab+0x5/0x20 [ 2737.640663] kmem_cache_alloc+0x5b/0x310 [ 2737.641705] create_object.isra.0+0x3a/0xa30 [ 2737.642688] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2737.643957] kmem_cache_alloc+0x159/0x310 [ 2737.645173] p9_client_prepare_req.part.0+0x3a/0xac0 [ 2737.646323] p9_client_rpc+0x220/0x1370 [ 2737.647218] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2737.648390] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2737.649595] ? pipe_poll+0x21b/0x800 [ 2737.650428] ? p9_fd_close+0x4a0/0x4a0 [ 2737.651302] ? wait_for_partner+0x3c0/0x3c0 [ 2737.652258] ? p9_fd_poll+0x1e0/0x2c0 [ 2737.653113] ? p9_fd_create+0x357/0x4a0 [ 2737.653983] ? p9_conn_create+0x510/0x510 [ 2737.654896] ? p9_client_create+0x798/0x1230 [ 2737.656031] ? kfree+0xd7/0x340 [ 2737.656984] ? do_raw_spin_unlock+0x4f/0x220 [ 2737.658212] p9_client_create+0xa76/0x1230 [ 2737.659330] ? p9_client_flush+0x430/0x430 [ 2737.660557] ? trace_hardirqs_on+0x5b/0x180 [ 2737.661611] ? lockdep_init_map_type+0x2c7/0x780 [ 2737.662669] ? __raw_spin_lock_init+0x36/0x110 [ 2737.663692] v9fs_session_init+0x1dd/0x1680 [ 2737.664657] ? lock_release+0x680/0x680 [ 2737.665673] ? kmem_cache_alloc_trace+0x151/0x320 [ 2737.667024] ? v9fs_show_options+0x690/0x690 [ 2737.668244] ? trace_hardirqs_on+0x5b/0x180 [ 2737.669208] ? kasan_unpoison_shadow+0x33/0x50 [ 2737.670209] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2737.671317] v9fs_mount+0x79/0x8f0 [ 2737.672159] ? v9fs_write_inode+0x60/0x60 [ 2737.673336] legacy_get_tree+0x105/0x220 [ 2737.674312] vfs_get_tree+0x8e/0x300 [ 2737.675127] path_mount+0x1490/0x21e0 [ 2737.675965] ? strncpy_from_user+0x9e/0x470 [ 2737.676920] ? finish_automount+0xa90/0xa90 [ 2737.677869] ? getname_flags.part.0+0x1dd/0x4f0 [ 2737.678888] ? _copy_from_user+0xfb/0x1b0 [ 2737.679799] __x64_sys_mount+0x282/0x300 [ 2737.680701] ? copy_mnt_ns+0xa00/0xa00 [ 2737.681555] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2737.682701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2737.683837] do_syscall_64+0x33/0x40 [ 2737.684667] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2737.685906] RIP: 0033:0x7feccca28b19 [ 2737.686718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2737.691169] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2737.693089] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 00:53:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:53:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) [ 2737.694997] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2737.696960] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2737.698752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2737.700755] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:53:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1514c, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',loose,msize=0x0000000000000002,privport,access=user,subj_user=rfdno,fowner=', @ANYRESDEC, @ANYBLOB="2c736d61636b66736861743d2a5d2c666f1ef67f313d", @ANYRESDEC=r5, @ANYBLOB=',dont_hash,\x00']) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000780), &(0x7f00000007c0), 0x2, 0x0) 00:53:15 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 37) 00:53:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:53:15 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 36) 00:53:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) 00:53:15 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x500, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x32e, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2750.891218] 9pnet: Insufficient options for proto=fd [ 2750.917721] FAULT_INJECTION: forcing a failure. [ 2750.917721] name failslab, interval 1, probability 0, space 0, times 0 [ 2750.920237] CPU: 0 PID: 11852 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2750.921737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2750.923508] Call Trace: [ 2750.924086] dump_stack+0x107/0x167 [ 2750.924875] should_fail.cold+0x5/0xa [ 2750.925693] ? create_object.isra.0+0x3a/0xa30 [ 2750.926668] should_failslab+0x5/0x20 [ 2750.927478] kmem_cache_alloc+0x5b/0x310 [ 2750.928345] create_object.isra.0+0x3a/0xa30 [ 2750.929290] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2750.930375] __kmalloc+0x16e/0x390 [ 2750.931136] p9_fcall_init+0x97/0x290 [ 2750.931942] p9_client_prepare_req.part.0+0x8c/0xac0 [ 2750.933041] p9_client_rpc+0x220/0x1370 [ 2750.933889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2750.935022] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2750.936169] ? pipe_poll+0x21b/0x800 [ 2750.936960] ? p9_fd_close+0x4a0/0x4a0 [ 2750.937796] ? wait_for_partner+0x3c0/0x3c0 [ 2750.938713] ? p9_fd_poll+0x1e0/0x2c0 [ 2750.938752] FAULT_INJECTION: forcing a failure. [ 2750.938752] name failslab, interval 1, probability 0, space 0, times 0 [ 2750.939516] ? p9_fd_create+0x357/0x4a0 [ 2750.939533] ? p9_conn_create+0x510/0x510 [ 2750.939547] ? p9_client_create+0x798/0x1230 [ 2750.939564] ? kfree+0xd7/0x340 [ 2750.939578] ? do_raw_spin_unlock+0x4f/0x220 [ 2750.939600] p9_client_create+0xa76/0x1230 [ 2750.939623] ? p9_client_flush+0x430/0x430 [ 2750.939642] ? trace_hardirqs_on+0x5b/0x180 [ 2750.939662] ? lockdep_init_map_type+0x2c7/0x780 [ 2750.939682] ? __raw_spin_lock_init+0x36/0x110 [ 2750.939708] v9fs_session_init+0x1dd/0x1680 [ 2750.951738] ? lock_release+0x680/0x680 [ 2750.952603] ? kmem_cache_alloc_trace+0x151/0x320 [ 2750.953636] ? v9fs_show_options+0x690/0x690 [ 2750.954581] ? trace_hardirqs_on+0x5b/0x180 [ 2750.955492] ? kasan_unpoison_shadow+0x33/0x50 [ 2750.956476] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2750.957571] v9fs_mount+0x79/0x8f0 [ 2750.958323] ? v9fs_write_inode+0x60/0x60 [ 2750.959202] legacy_get_tree+0x105/0x220 [ 2750.960070] vfs_get_tree+0x8e/0x300 [ 2750.960865] path_mount+0x1490/0x21e0 [ 2750.961675] ? strncpy_from_user+0x9e/0x470 [ 2750.962582] ? finish_automount+0xa90/0xa90 [ 2750.963493] ? getname_flags.part.0+0x1dd/0x4f0 [ 2750.964477] ? _copy_from_user+0xfb/0x1b0 [ 2750.965368] __x64_sys_mount+0x282/0x300 [ 2750.966239] ? copy_mnt_ns+0xa00/0xa00 [ 2750.967065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2750.968171] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2750.969268] do_syscall_64+0x33/0x40 [ 2750.970058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2750.971150] RIP: 0033:0x7f49777bbb19 [ 2750.971945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2750.975846] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2750.977478] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2750.978993] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2750.980496] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2750.982021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2750.983541] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2750.985085] CPU: 1 PID: 11854 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2750.986579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2750.988337] Call Trace: [ 2750.988912] dump_stack+0x107/0x167 [ 2750.989707] should_fail.cold+0x5/0xa [ 2750.990530] ? p9_fcall_init+0x97/0x290 [ 2750.991372] should_failslab+0x5/0x20 [ 2750.992183] __kmalloc+0x72/0x390 [ 2750.992934] p9_fcall_init+0x97/0x290 [ 2750.993748] p9_client_prepare_req.part.0+0x8c/0xac0 [ 2750.994834] p9_client_rpc+0x220/0x1370 [ 2750.995828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2750.996958] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2750.998278] ? pipe_poll+0x21b/0x800 [ 2750.999175] ? p9_fd_close+0x4a0/0x4a0 [ 2751.000162] ? wait_for_partner+0x3c0/0x3c0 [ 2751.001101] ? p9_fd_poll+0x1e0/0x2c0 [ 2751.001980] ? p9_fd_create+0x357/0x4a0 [ 2751.003008] ? p9_conn_create+0x510/0x510 [ 2751.004015] ? p9_client_create+0x798/0x1230 [ 2751.005217] ? kfree+0xd7/0x340 [ 2751.005918] ? do_raw_spin_unlock+0x4f/0x220 [ 2751.006975] p9_client_create+0xa76/0x1230 [ 2751.007982] ? p9_client_flush+0x430/0x430 [ 2751.009081] ? trace_hardirqs_on+0x5b/0x180 [ 2751.009996] ? lockdep_init_map_type+0x2c7/0x780 [ 2751.010977] ? __raw_spin_lock_init+0x36/0x110 [ 2751.012109] v9fs_session_init+0x1dd/0x1680 [ 2751.013097] ? lock_release+0x680/0x680 [ 2751.014118] ? kmem_cache_alloc_trace+0x151/0x320 [ 2751.015252] ? v9fs_show_options+0x690/0x690 [ 2751.016199] ? trace_hardirqs_on+0x5b/0x180 [ 2751.017127] ? kasan_unpoison_shadow+0x33/0x50 [ 2751.018286] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2751.019457] v9fs_mount+0x79/0x8f0 [ 2751.020308] ? v9fs_write_inode+0x60/0x60 [ 2751.021338] legacy_get_tree+0x105/0x220 [ 2751.022331] vfs_get_tree+0x8e/0x300 [ 2751.023127] path_mount+0x1490/0x21e0 [ 2751.024113] ? strncpy_from_user+0x9e/0x470 [ 2751.025181] ? finish_automount+0xa90/0xa90 [ 2751.026185] ? getname_flags.part.0+0x1dd/0x4f0 [ 2751.027261] ? _copy_from_user+0xfb/0x1b0 [ 2751.028348] __x64_sys_mount+0x282/0x300 [ 2751.029194] ? copy_mnt_ns+0xa00/0xa00 [ 2751.030120] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2751.031247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2751.032343] do_syscall_64+0x33/0x40 [ 2751.033312] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2751.034486] RIP: 0033:0x7feccca28b19 [ 2751.035255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2751.039165] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2751.040737] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2751.042219] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2751.043722] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2751.045205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2751.046686] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:53:16 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x600, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:53:16 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1514d, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:16 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdjo=', @ANYRESHEX=r2, @ANYBLOB=',cachetag=,version=9p2000.L,version=9p2000.L,noextend,version=9p2000.L,access=any,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="2c63616368657461673d2c76657273696f6e3d3970323030302e4c2c7375626a5f726f6c653d2526267d243a2c27892c6d6561737572652c00"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) [ 2751.386026] 9pnet: Insufficient options for proto=fd 00:53:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0/../file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@debug={'debug', 0x3d, 0x1}}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:53:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1514e, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:27 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x700, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:27 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 38) 00:53:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2e03, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:53:27 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 37) [ 2762.787781] FAULT_INJECTION: forcing a failure. [ 2762.787781] name failslab, interval 1, probability 0, space 0, times 0 [ 2762.789174] CPU: 1 PID: 11892 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2762.789987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2762.790963] Call Trace: [ 2762.791281] dump_stack+0x107/0x167 [ 2762.791711] should_fail.cold+0x5/0xa [ 2762.792164] ? p9_fcall_init+0x97/0x290 [ 2762.792633] should_failslab+0x5/0x20 [ 2762.793099] __kmalloc+0x72/0x390 [ 2762.793509] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2762.794107] p9_fcall_init+0x97/0x290 [ 2762.794557] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2762.795158] p9_client_rpc+0x220/0x1370 [ 2762.795630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2762.796249] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2762.796893] ? pipe_poll+0x21b/0x800 [ 2762.797328] ? p9_fd_close+0x4a0/0x4a0 [ 2762.797783] ? wait_for_partner+0x3c0/0x3c0 [ 2762.798285] ? p9_fd_poll+0x1e0/0x2c0 [ 2762.798735] ? p9_fd_create+0x357/0x4a0 [ 2762.799202] ? p9_conn_create+0x510/0x510 [ 2762.799688] ? p9_client_create+0x798/0x1230 [ 2762.800204] ? kfree+0xd7/0x340 [ 2762.800587] ? do_raw_spin_unlock+0x4f/0x220 [ 2762.801127] p9_client_create+0xa76/0x1230 [ 2762.801626] ? p9_client_flush+0x430/0x430 [ 2762.802125] ? trace_hardirqs_on+0x5b/0x180 [ 2762.802634] ? lockdep_init_map_type+0x2c7/0x780 [ 2762.803191] ? __raw_spin_lock_init+0x36/0x110 [ 2762.803731] v9fs_session_init+0x1dd/0x1680 [ 2762.804246] ? lock_release+0x680/0x680 [ 2762.804720] ? kmem_cache_alloc_trace+0x151/0x320 [ 2762.805295] ? v9fs_show_options+0x690/0x690 [ 2762.805816] ? trace_hardirqs_on+0x5b/0x180 [ 2762.806321] ? kasan_unpoison_shadow+0x33/0x50 [ 2762.806859] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2762.807460] v9fs_mount+0x79/0x8f0 [ 2762.807880] ? v9fs_write_inode+0x60/0x60 [ 2762.808367] legacy_get_tree+0x105/0x220 [ 2762.808854] vfs_get_tree+0x8e/0x300 [ 2762.809291] path_mount+0x1490/0x21e0 [ 2762.809742] ? strncpy_from_user+0x9e/0x470 [ 2762.810250] ? finish_automount+0xa90/0xa90 [ 2762.810757] ? getname_flags.part.0+0x1dd/0x4f0 [ 2762.811306] ? _copy_from_user+0xfb/0x1b0 [ 2762.811796] __x64_sys_mount+0x282/0x300 [ 2762.812275] ? copy_mnt_ns+0xa00/0xa00 [ 2762.812733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2762.813364] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2762.813973] do_syscall_64+0x33/0x40 [ 2762.814410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2762.815010] RIP: 0033:0x7f49777bbb19 [ 2762.815450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2762.817668] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2762.818582] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2762.819432] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2762.820293] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2762.821165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2762.822032] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:53:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf000, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2762.826779] 9pnet: Insufficient options for proto=fd [ 2762.829839] 9pnet: Insufficient options for proto=fd [ 2762.835384] FAULT_INJECTION: forcing a failure. [ 2762.835384] name failslab, interval 1, probability 0, space 0, times 0 [ 2762.836834] CPU: 1 PID: 11889 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2762.837639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2762.838604] Call Trace: [ 2762.838910] dump_stack+0x107/0x167 [ 2762.839330] should_fail.cold+0x5/0xa [ 2762.839767] ? create_object.isra.0+0x3a/0xa30 [ 2762.840291] should_failslab+0x5/0x20 [ 2762.840733] kmem_cache_alloc+0x5b/0x310 [ 2762.841226] create_object.isra.0+0x3a/0xa30 [ 2762.841735] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2762.842314] __kmalloc+0x16e/0x390 [ 2762.842725] p9_fcall_init+0x97/0x290 [ 2762.843163] p9_client_prepare_req.part.0+0x8c/0xac0 [ 2762.843752] p9_client_rpc+0x220/0x1370 [ 2762.844209] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2762.844829] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2762.845445] ? pipe_poll+0x21b/0x800 [ 2762.845873] ? p9_fd_close+0x4a0/0x4a0 [ 2762.846324] ? wait_for_partner+0x3c0/0x3c0 [ 2762.846819] ? p9_fd_poll+0x1e0/0x2c0 [ 2762.847258] ? p9_fd_create+0x357/0x4a0 [ 2762.847718] ? p9_conn_create+0x510/0x510 [ 2762.848195] ? p9_client_create+0x798/0x1230 [ 2762.848702] ? kfree+0xd7/0x340 [ 2762.849089] ? do_raw_spin_unlock+0x4f/0x220 [ 2762.849599] p9_client_create+0xa76/0x1230 [ 2762.850092] ? p9_client_flush+0x430/0x430 [ 2762.850579] ? trace_hardirqs_on+0x5b/0x180 [ 2762.851075] ? lockdep_init_map_type+0x2c7/0x780 [ 2762.851624] ? __raw_spin_lock_init+0x36/0x110 [ 2762.852163] v9fs_session_init+0x1dd/0x1680 [ 2762.852663] ? lock_release+0x680/0x680 [ 2762.853135] ? kmem_cache_alloc_trace+0x151/0x320 [ 2762.853690] ? v9fs_show_options+0x690/0x690 [ 2762.854202] ? trace_hardirqs_on+0x5b/0x180 [ 2762.854702] ? kasan_unpoison_shadow+0x33/0x50 [ 2762.855227] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2762.855814] v9fs_mount+0x79/0x8f0 [ 2762.856226] ? v9fs_write_inode+0x60/0x60 [ 2762.856706] legacy_get_tree+0x105/0x220 [ 2762.857184] vfs_get_tree+0x8e/0x300 [ 2762.857612] path_mount+0x1490/0x21e0 [ 2762.858054] ? strncpy_from_user+0x9e/0x470 [ 2762.858548] ? finish_automount+0xa90/0xa90 [ 2762.859047] ? getname_flags.part.0+0x1dd/0x4f0 [ 2762.859585] ? _copy_from_user+0xfb/0x1b0 [ 2762.860079] __x64_sys_mount+0x282/0x300 [ 2762.860548] ? copy_mnt_ns+0xa00/0xa00 [ 2762.861005] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2762.861615] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2762.862208] do_syscall_64+0x33/0x40 [ 2762.862635] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2762.863222] RIP: 0033:0x7feccca28b19 [ 2762.863654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2762.865793] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2762.866674] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2762.867499] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2762.868322] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2762.869171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2762.869993] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:53:27 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x900, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 00:53:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1514f, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:28 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 39) [ 2763.061922] 9pnet: Insufficient options for proto=fd 00:53:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x80000, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:53:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2763.174579] FAULT_INJECTION: forcing a failure. [ 2763.174579] name failslab, interval 1, probability 0, space 0, times 0 [ 2763.177190] CPU: 0 PID: 11917 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2763.178729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2763.180496] Call Trace: [ 2763.181078] dump_stack+0x107/0x167 [ 2763.181860] should_fail.cold+0x5/0xa [ 2763.182678] ? p9_fcall_init+0x97/0x290 [ 2763.183529] should_failslab+0x5/0x20 [ 2763.184344] __kmalloc+0x72/0x390 [ 2763.185094] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2763.186190] p9_fcall_init+0x97/0x290 [ 2763.187011] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2763.188114] p9_client_rpc+0x220/0x1370 [ 2763.188976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2763.190100] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2763.191246] ? pipe_poll+0x21b/0x800 [ 2763.192036] ? p9_fd_close+0x4a0/0x4a0 [ 2763.192880] ? wait_for_partner+0x3c0/0x3c0 [ 2763.193813] ? p9_fd_poll+0x1e0/0x2c0 [ 2763.194636] ? p9_fd_create+0x357/0x4a0 00:53:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf0ffff, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:53:28 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 38) [ 2763.195490] ? p9_conn_create+0x510/0x510 [ 2763.196557] ? p9_client_create+0x798/0x1230 [ 2763.197516] ? kfree+0xd7/0x340 [ 2763.198228] ? do_raw_spin_unlock+0x4f/0x220 [ 2763.199184] p9_client_create+0xa76/0x1230 [ 2763.200103] ? p9_client_flush+0x430/0x430 [ 2763.201023] ? trace_hardirqs_on+0x5b/0x180 [ 2763.201946] ? lockdep_init_map_type+0x2c7/0x780 [ 2763.202960] ? __raw_spin_lock_init+0x36/0x110 [ 2763.203943] v9fs_session_init+0x1dd/0x1680 [ 2763.204875] ? lock_release+0x680/0x680 [ 2763.205743] ? kmem_cache_alloc_trace+0x151/0x320 [ 2763.206779] ? v9fs_show_options+0x690/0x690 [ 2763.207734] ? trace_hardirqs_on+0x5b/0x180 [ 2763.208663] ? kasan_unpoison_shadow+0x33/0x50 [ 2763.209645] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2763.210730] v9fs_mount+0x79/0x8f0 [ 2763.211494] ? v9fs_write_inode+0x60/0x60 [ 2763.212375] legacy_get_tree+0x105/0x220 [ 2763.213254] vfs_get_tree+0x8e/0x300 [ 2763.214052] path_mount+0x1490/0x21e0 [ 2763.214882] ? strncpy_from_user+0x9e/0x470 [ 2763.215808] ? finish_automount+0xa90/0xa90 [ 2763.216735] ? getname_flags.part.0+0x1dd/0x4f0 [ 2763.217748] ? _copy_from_user+0xfb/0x1b0 [ 2763.218640] __x64_sys_mount+0x282/0x300 [ 2763.219506] ? copy_mnt_ns+0xa00/0xa00 [ 2763.220347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2763.221486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2763.222617] do_syscall_64+0x33/0x40 [ 2763.223422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2763.224531] RIP: 0033:0x7f49777bbb19 [ 2763.225339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2763.229299] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2763.230928] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2763.232461] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2763.234015] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2763.235559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2763.237102] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2763.368334] FAULT_INJECTION: forcing a failure. [ 2763.368334] name failslab, interval 1, probability 0, space 0, times 0 [ 2763.371175] CPU: 0 PID: 11923 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2763.372762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2763.374548] Call Trace: [ 2763.375128] dump_stack+0x107/0x167 [ 2763.375912] should_fail.cold+0x5/0xa [ 2763.376739] ? p9_fcall_init+0x97/0x290 [ 2763.377611] should_failslab+0x5/0x20 [ 2763.378423] __kmalloc+0x72/0x390 [ 2763.379169] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2763.380256] p9_fcall_init+0x97/0x290 [ 2763.381079] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2763.382169] p9_client_rpc+0x220/0x1370 [ 2763.383025] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2763.384154] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2763.385312] ? pipe_poll+0x21b/0x800 [ 2763.386103] ? p9_fd_close+0x4a0/0x4a0 [ 2763.386933] ? wait_for_partner+0x3c0/0x3c0 [ 2763.387852] ? p9_fd_poll+0x1e0/0x2c0 [ 2763.388669] ? p9_fd_create+0x357/0x4a0 [ 2763.389527] ? p9_conn_create+0x510/0x510 [ 2763.390411] ? p9_client_create+0x798/0x1230 [ 2763.391356] ? kfree+0xd7/0x340 [ 2763.392062] ? do_raw_spin_unlock+0x4f/0x220 [ 2763.393016] p9_client_create+0xa76/0x1230 [ 2763.393924] ? p9_client_flush+0x430/0x430 [ 2763.394827] ? trace_hardirqs_on+0x5b/0x180 [ 2763.395754] ? lockdep_init_map_type+0x2c7/0x780 [ 2763.396774] ? __raw_spin_lock_init+0x36/0x110 [ 2763.397761] v9fs_session_init+0x1dd/0x1680 [ 2763.398687] ? lock_release+0x680/0x680 [ 2763.399544] ? kmem_cache_alloc_trace+0x151/0x320 [ 2763.400577] ? v9fs_show_options+0x690/0x690 [ 2763.401532] ? trace_hardirqs_on+0x5b/0x180 [ 2763.402453] ? kasan_unpoison_shadow+0x33/0x50 [ 2763.403426] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2763.404511] v9fs_mount+0x79/0x8f0 [ 2763.405319] ? v9fs_write_inode+0x60/0x60 [ 2763.406208] legacy_get_tree+0x105/0x220 [ 2763.407073] vfs_get_tree+0x8e/0x300 [ 2763.407866] path_mount+0x1490/0x21e0 [ 2763.408687] ? strncpy_from_user+0x9e/0x470 [ 2763.409618] ? finish_automount+0xa90/0xa90 [ 2763.410540] ? getname_flags.part.0+0x1dd/0x4f0 [ 2763.411534] ? _copy_from_user+0xfb/0x1b0 [ 2763.412427] __x64_sys_mount+0x282/0x300 [ 2763.413309] ? copy_mnt_ns+0xa00/0xa00 [ 2763.414145] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2763.415272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2763.416391] do_syscall_64+0x33/0x40 [ 2763.417199] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2763.418298] RIP: 0033:0x7feccca28b19 [ 2763.419097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2763.423075] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2763.424716] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2763.426258] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2763.427796] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2763.429342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2763.430878] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:53:41 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 39) 00:53:41 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0xa00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:41 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 40) 00:53:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15150, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x0, 0x0, 0x5}, 0x0, 0x0, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000a80)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@dfltgid}, {@dfltuid}, {@cachetag}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:53:41 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2776.002064] FAULT_INJECTION: forcing a failure. [ 2776.002064] name failslab, interval 1, probability 0, space 0, times 0 [ 2776.003425] CPU: 0 PID: 11934 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2776.004329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2776.005310] Call Trace: [ 2776.005636] dump_stack+0x107/0x167 [ 2776.006034] should_fail.cold+0x5/0xa [ 2776.006456] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2776.007122] should_failslab+0x5/0x20 [ 2776.007572] kmem_cache_alloc+0x5b/0x310 [ 2776.008045] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2776.008706] idr_get_free+0x4b5/0x8f0 [ 2776.009166] idr_alloc_u32+0x170/0x2d0 [ 2776.009624] ? __fprop_inc_percpu_max+0x130/0x130 [ 2776.010183] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2776.010815] ? lock_release+0x680/0x680 [ 2776.011278] idr_alloc+0xc2/0x130 [ 2776.011667] ? idr_alloc_u32+0x2d0/0x2d0 [ 2776.012137] ? rwlock_bug.part.0+0x90/0x90 [ 2776.012631] p9_client_prepare_req.part.0+0x612/0xac0 [ 2776.013267] p9_client_rpc+0x220/0x1370 [ 2776.013736] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2776.014346] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2776.014968] ? pipe_poll+0x21b/0x800 [ 2776.015373] ? p9_fd_close+0x4a0/0x4a0 [ 2776.015837] ? wait_for_partner+0x3c0/0x3c0 [ 2776.016336] ? p9_fd_poll+0x1e0/0x2c0 [ 2776.016790] ? p9_fd_create+0x357/0x4a0 [ 2776.017258] ? p9_conn_create+0x510/0x510 [ 2776.017713] ? p9_client_create+0x798/0x1230 [ 2776.018219] ? kfree+0xd7/0x340 [ 2776.018590] ? do_raw_spin_unlock+0x4f/0x220 [ 2776.019103] p9_client_create+0xa76/0x1230 [ 2776.019577] ? p9_client_flush+0x430/0x430 [ 2776.020067] ? trace_hardirqs_on+0x5b/0x180 [ 2776.020577] ? lockdep_init_map_type+0x2c7/0x780 [ 2776.021138] ? __raw_spin_lock_init+0x36/0x110 [ 2776.021677] v9fs_session_init+0x1dd/0x1680 [ 2776.022178] ? lock_release+0x680/0x680 [ 2776.022648] ? kmem_cache_alloc_trace+0x151/0x320 [ 2776.023200] ? v9fs_show_options+0x690/0x690 [ 2776.023691] ? trace_hardirqs_on+0x5b/0x180 [ 2776.024193] ? kasan_unpoison_shadow+0x33/0x50 [ 2776.024699] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2776.025315] v9fs_mount+0x79/0x8f0 [ 2776.025719] ? v9fs_write_inode+0x60/0x60 [ 2776.026199] legacy_get_tree+0x105/0x220 [ 2776.026676] vfs_get_tree+0x8e/0x300 [ 2776.027103] path_mount+0x1490/0x21e0 [ 2776.027551] ? strncpy_from_user+0x9e/0x470 [ 2776.028052] ? finish_automount+0xa90/0xa90 [ 2776.028531] ? getname_flags.part.0+0x1dd/0x4f0 [ 2776.029082] ? _copy_from_user+0xfb/0x1b0 [ 2776.029545] __x64_sys_mount+0x282/0x300 [ 2776.030015] ? copy_mnt_ns+0xa00/0xa00 [ 2776.030449] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2776.031060] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2776.031628] do_syscall_64+0x33/0x40 [ 2776.032068] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2776.032631] RIP: 0033:0x7f49777bbb19 [ 2776.033073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2776.035079] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2776.035970] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2776.036802] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2776.037639] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2776.038463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2776.039288] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2776.082009] 9pnet: Insufficient options for proto=fd [ 2776.097394] FAULT_INJECTION: forcing a failure. [ 2776.097394] name failslab, interval 1, probability 0, space 0, times 0 [ 2776.098975] 9pnet: Insufficient options for proto=fd [ 2776.100008] CPU: 1 PID: 11928 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2776.102042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2776.103806] Call Trace: [ 2776.104373] dump_stack+0x107/0x167 [ 2776.105173] should_fail.cold+0x5/0xa [ 2776.105988] ? create_object.isra.0+0x3a/0xa30 [ 2776.106961] should_failslab+0x5/0x20 [ 2776.107774] kmem_cache_alloc+0x5b/0x310 [ 2776.108653] create_object.isra.0+0x3a/0xa30 [ 2776.109599] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2776.110679] __kmalloc+0x16e/0x390 [ 2776.111442] p9_fcall_init+0x97/0x290 [ 2776.112253] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2776.113354] p9_client_rpc+0x220/0x1370 [ 2776.114214] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2776.115336] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2776.116482] ? pipe_poll+0x21b/0x800 [ 2776.117283] ? p9_fd_close+0x4a0/0x4a0 [ 2776.118115] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2776.119232] ? asm_sysvec_call_function_single+0x12/0x20 [ 2776.120390] ? trace_hardirqs_on+0x5b/0x180 [ 2776.121350] p9_client_create+0xa76/0x1230 [ 2776.122261] ? p9_client_flush+0x430/0x430 [ 2776.123164] ? trace_hardirqs_on+0x5b/0x180 [ 2776.124086] ? lockdep_init_map_type+0x2c7/0x780 [ 2776.125110] ? __raw_spin_lock_init+0x36/0x110 [ 2776.126089] v9fs_session_init+0x1dd/0x1680 [ 2776.127008] ? lock_release+0x680/0x680 [ 2776.127864] ? kmem_cache_alloc_trace+0x151/0x320 [ 2776.128885] ? v9fs_show_options+0x690/0x690 [ 2776.129851] ? trace_hardirqs_on+0x5b/0x180 [ 2776.130773] ? kasan_unpoison_shadow+0x33/0x50 [ 2776.131743] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2776.132827] v9fs_mount+0x79/0x8f0 [ 2776.133597] ? v9fs_write_inode+0x60/0x60 [ 2776.134482] legacy_get_tree+0x105/0x220 [ 2776.135340] vfs_get_tree+0x8e/0x300 [ 2776.136135] path_mount+0x1490/0x21e0 [ 2776.136963] ? strncpy_from_user+0x9e/0x470 [ 2776.137879] ? finish_automount+0xa90/0xa90 [ 2776.138802] ? getname_flags.part.0+0x1dd/0x4f0 [ 2776.139797] ? _copy_from_user+0xfb/0x1b0 [ 2776.140691] __x64_sys_mount+0x282/0x300 [ 2776.141566] ? copy_mnt_ns+0xa00/0xa00 [ 2776.142404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2776.143520] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2776.144628] do_syscall_64+0x33/0x40 [ 2776.145424] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2776.146521] RIP: 0033:0x7feccca28b19 [ 2776.147317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2776.151249] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2776.152855] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2776.154378] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2776.155899] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2776.157413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2776.158913] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:53:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2000000, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:53:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}}) 00:53:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) r3 = socket(0x11, 0x800, 0x200) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000080)=0x300000000000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:53:53 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 41) 00:53:53 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0xb00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15151, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 40) 00:53:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2788.804144] 9pnet: Insufficient options for proto=fd [ 2788.812135] 9pnet: Insufficient options for proto=fd [ 2788.829089] FAULT_INJECTION: forcing a failure. [ 2788.829089] name failslab, interval 1, probability 0, space 0, times 0 [ 2788.830604] CPU: 1 PID: 11962 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2788.831490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2788.832570] Call Trace: [ 2788.832863] dump_stack+0x107/0x167 [ 2788.833269] should_fail.cold+0x5/0xa [ 2788.833702] ? create_object.isra.0+0x3a/0xa30 [ 2788.834202] should_failslab+0x5/0x20 [ 2788.834634] kmem_cache_alloc+0x5b/0x310 [ 2788.835077] create_object.isra.0+0x3a/0xa30 [ 2788.835551] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2788.836099] kmem_cache_alloc+0x159/0x310 [ 2788.836555] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2788.837172] idr_get_free+0x4b5/0x8f0 [ 2788.837592] idr_alloc_u32+0x170/0x2d0 [ 2788.838020] ? __fprop_inc_percpu_max+0x130/0x130 [ 2788.838540] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2788.839153] ? lock_release+0x680/0x680 [ 2788.839593] idr_alloc+0xc2/0x130 [ 2788.839987] ? idr_alloc_u32+0x2d0/0x2d0 [ 2788.840437] ? rwlock_bug.part.0+0x90/0x90 [ 2788.840905] p9_client_prepare_req.part.0+0x612/0xac0 [ 2788.841534] p9_client_rpc+0x220/0x1370 [ 2788.842109] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2788.842835] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2788.843668] ? pipe_poll+0x21b/0x800 [ 2788.844210] ? p9_fd_close+0x4a0/0x4a0 [ 2788.844645] ? wait_for_partner+0x3c0/0x3c0 [ 2788.845142] ? p9_fd_poll+0x1e0/0x2c0 [ 2788.845562] ? p9_fd_create+0x357/0x4a0 [ 2788.846010] ? p9_conn_create+0x510/0x510 [ 2788.846459] ? p9_client_create+0x798/0x1230 [ 2788.846954] ? kfree+0xd7/0x340 [ 2788.847315] ? do_raw_spin_unlock+0x4f/0x220 [ 2788.847814] p9_client_create+0xa76/0x1230 [ 2788.848274] ? p9_client_flush+0x430/0x430 [ 2788.848756] ? trace_hardirqs_on+0x5b/0x180 [ 2788.849247] ? lockdep_init_map_type+0x2c7/0x780 [ 2788.849780] ? __raw_spin_lock_init+0x36/0x110 [ 2788.850304] v9fs_session_init+0x1dd/0x1680 [ 2788.850787] ? lock_release+0x680/0x680 [ 2788.851222] ? kmem_cache_alloc_trace+0x151/0x320 [ 2788.851767] ? v9fs_show_options+0x690/0x690 [ 2788.852246] ? trace_hardirqs_on+0x5b/0x180 [ 2788.852734] ? kasan_unpoison_shadow+0x33/0x50 [ 2788.853233] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2788.853784] v9fs_mount+0x79/0x8f0 [ 2788.854171] ? v9fs_write_inode+0x60/0x60 [ 2788.854639] legacy_get_tree+0x105/0x220 [ 2788.855085] vfs_get_tree+0x8e/0x300 [ 2788.855504] path_mount+0x1490/0x21e0 [ 2788.855923] ? strncpy_from_user+0x9e/0x470 [ 2788.856415] ? finish_automount+0xa90/0xa90 [ 2788.856883] ? getname_flags.part.0+0x1dd/0x4f0 [ 2788.857426] ? _copy_from_user+0xfb/0x1b0 [ 2788.857883] __x64_sys_mount+0x282/0x300 [ 2788.858341] ? copy_mnt_ns+0xa00/0xa00 [ 2788.858761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2788.859364] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2788.859929] do_syscall_64+0x33/0x40 [ 2788.860352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2788.860905] RIP: 0033:0x7f49777bbb19 [ 2788.861334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2788.863409] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2788.864238] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2788.865147] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2788.866161] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2788.867021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2788.868017] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:53:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}}) [ 2788.908017] FAULT_INJECTION: forcing a failure. [ 2788.908017] name failslab, interval 1, probability 0, space 0, times 0 [ 2788.909499] CPU: 1 PID: 11964 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2788.910483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2788.911494] Call Trace: [ 2788.911838] dump_stack+0x107/0x167 [ 2788.912349] should_fail.cold+0x5/0xa [ 2788.912910] ? p9_fcall_init+0x97/0x290 [ 2788.913425] should_failslab+0x5/0x20 [ 2788.913856] __kmalloc+0x72/0x390 [ 2788.914270] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2788.914946] p9_fcall_init+0x97/0x290 [ 2788.915541] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2788.916216] p9_client_rpc+0x220/0x1370 [ 2788.916668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2788.917405] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2788.918120] ? pipe_poll+0x21b/0x800 [ 2788.918705] ? p9_fd_close+0x4a0/0x4a0 [ 2788.919161] ? wait_for_partner+0x3c0/0x3c0 [ 2788.919649] ? p9_fd_poll+0x1e0/0x2c0 [ 2788.920183] ? p9_fd_create+0x357/0x4a0 [ 2788.920711] ? p9_conn_create+0x510/0x510 [ 2788.921328] ? p9_client_create+0x798/0x1230 [ 2788.921876] ? kfree+0xd7/0x340 [ 2788.922240] ? do_raw_spin_unlock+0x4f/0x220 [ 2788.922853] p9_client_create+0xa76/0x1230 [ 2788.923435] ? p9_client_flush+0x430/0x430 [ 2788.924059] ? trace_hardirqs_on+0x5b/0x180 [ 2788.924553] ? lockdep_init_map_type+0x2c7/0x780 [ 2788.925097] ? __raw_spin_lock_init+0x36/0x110 [ 2788.925745] v9fs_session_init+0x1dd/0x1680 [ 2788.926354] ? lock_release+0x680/0x680 [ 2788.926938] ? kmem_cache_alloc_trace+0x151/0x320 [ 2788.927484] ? v9fs_show_options+0x690/0x690 [ 2788.927985] ? trace_hardirqs_on+0x5b/0x180 [ 2788.928568] ? kasan_unpoison_shadow+0x33/0x50 [ 2788.929185] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2788.929930] v9fs_mount+0x79/0x8f0 [ 2788.930334] ? v9fs_write_inode+0x60/0x60 [ 2788.930815] legacy_get_tree+0x105/0x220 [ 2788.931396] vfs_get_tree+0x8e/0x300 [ 2788.931882] path_mount+0x1490/0x21e0 [ 2788.932444] ? strncpy_from_user+0x9e/0x470 [ 2788.933009] ? finish_automount+0xa90/0xa90 [ 2788.933490] ? getname_flags.part.0+0x1dd/0x4f0 [ 2788.934029] ? _copy_from_user+0xfb/0x1b0 [ 2788.934606] __x64_sys_mount+0x282/0x300 [ 2788.935064] ? copy_mnt_ns+0xa00/0xa00 [ 2788.935636] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2788.936380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2788.936939] do_syscall_64+0x33/0x40 [ 2788.937365] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2788.938054] RIP: 0033:0x7feccca28b19 [ 2788.938487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2788.940844] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2788.941837] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2788.942785] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2788.943640] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2788.944411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2788.945280] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:53:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3000000, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:53:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15152, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:54 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1020, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:54 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={@mcast2, @rand_addr=' \x01\x00', @private0, 0xffff0001, 0x6, 0x8, 0x400, 0x7d, 0x20}) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x40001, &(0x7f0000000a00)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '9\xaa\xf0\x9c\xb2\xe6\xc8\xee3ET\xc7\xba\xc7#=8O\x01\x01\x00\x00\x00\x00\x00\x00\x00\nJ4\xc1\xd0\xccC\xd1\x1a\xb3n\x04\"o?\xed\a@\x8e\xd4\xd7\xc4\x00\x00\x00\x00Q\xde/d\xb4G\x0fn\xcd\xbeC\xb9w\xfb\x0f\xfc\xd0\xf1\x05\xea\x1d\x0f\x84\x7f%\x95\xc4\x8f\xa7\xadK\x88\xa0\xbd\xad\xf5\x8dzw=\x1c\xf5\xf7`\x8dTs0\xe3\x12W\xae\xf6[\xf5 \xa6R\xe9\x85\xa0\xf7\bc\x9e4\xc9~\xd7\xdf\x17\xc37\xcc\x10\xd5\x1e\x7fE\xfa?\xa7\x04\x8a\x02\x8d\v\xc9\x9e+S\xb9\x12WM\x15d\x8f\x9dP\x06`\x1d\xf5\x90\xbeX\x98\v\x1c\xf1l\xf2`T\x92\x7f\xb81\x89\xf5\x1c\x8b\xe9\xe0\xf5\xcc\xf3BD\xc1_\x98\xc2i\xde\x9dl\xfeg'}}, {@version_L}, {@version_L}, {@noextend}, {@fscache}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) [ 2789.029349] 9pnet: Insufficient options for proto=fd [ 2789.045695] 9pnet: Insufficient options for proto=fd 00:53:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x4000000, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:53:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}}) 00:53:54 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 41) 00:53:54 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 42) 00:53:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@seclabel}]}}) openat(r3, &(0x7f00000001c0)='./file1\x00', 0x4200, 0xc9) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000980)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d2728acf7512514baf7d1b91dc7f8d5f5b1767f02f5f088b18fad7048a37ee7a5ed908e5c8b7c1685334156c692b61b01e5f2bdcdc1fb27ab4f52840496532018dfc1199d45cceb47856b53849b0b76f3ba6c1364851f0242bba076111eed22706053218fb7baa716d1851fe4a1227bf4f9c29bfa0ae58ac68298323f4b6646dcfb1b98de86321a316898e99a0f8eea64ecc239671f4dbc9db81fc1aa9287f2db079894e05b79c7dbe49b96a4ec419a17cd95db320a4a426d482217", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cachetag=,version=9p2000.L,version=9p2000.L,noextend,version=9p2000.L,access=any,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="2c63616368657461673d2c76657273696f6e3d3970323030302e4c2c7375626a5f726f6c653d2526267d243a2c27892c6d6561737572652c00"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:53:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15153, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:54 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x2000, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:53:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf000000, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:53:54 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2789.224850] 9pnet: Insufficient options for proto=fd [ 2789.240136] FAULT_INJECTION: forcing a failure. [ 2789.240136] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.241374] CPU: 1 PID: 11990 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2789.242329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.243455] Call Trace: [ 2789.243749] dump_stack+0x107/0x167 [ 2789.244220] should_fail.cold+0x5/0xa [ 2789.244688] ? ___slab_alloc+0x360/0x700 [ 2789.245261] ? create_object.isra.0+0x3a/0xa30 [ 2789.245775] should_failslab+0x5/0x20 [ 2789.246185] kmem_cache_alloc+0x5b/0x310 [ 2789.246736] create_object.isra.0+0x3a/0xa30 [ 2789.247273] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2789.248035] kmem_cache_alloc+0x159/0x310 [ 2789.248493] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2789.249136] idr_get_free+0x4b5/0x8f0 [ 2789.249579] idr_alloc_u32+0x170/0x2d0 [ 2789.250100] ? __fprop_inc_percpu_max+0x130/0x130 [ 2789.250739] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2789.251500] ? lock_release+0x680/0x680 [ 2789.251939] idr_alloc+0xc2/0x130 [ 2789.252332] ? idr_alloc_u32+0x2d0/0x2d0 [ 2789.252774] ? rwlock_bug.part.0+0x90/0x90 [ 2789.253266] p9_client_prepare_req.part.0+0x612/0xac0 [ 2789.253861] p9_client_rpc+0x220/0x1370 [ 2789.254314] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2789.254887] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2789.255497] ? pipe_poll+0x21b/0x800 [ 2789.255902] ? p9_fd_close+0x4a0/0x4a0 [ 2789.256341] ? wait_for_partner+0x3c0/0x3c0 [ 2789.256807] ? p9_fd_poll+0x1e0/0x2c0 [ 2789.257249] ? p9_fd_create+0x357/0x4a0 [ 2789.257682] ? p9_conn_create+0x510/0x510 [ 2789.258153] ? p9_client_create+0x798/0x1230 [ 2789.258631] ? kfree+0xd7/0x340 [ 2789.259004] ? do_raw_spin_unlock+0x4f/0x220 [ 2789.259487] p9_client_create+0xa76/0x1230 [ 2789.259969] ? p9_client_flush+0x430/0x430 [ 2789.260433] ? trace_hardirqs_on+0x5b/0x180 [ 2789.260936] ? lockdep_init_map_type+0x2c7/0x780 [ 2789.261455] ? __raw_spin_lock_init+0x36/0x110 [ 2789.261951] v9fs_session_init+0x1dd/0x1680 [ 2789.262415] ? lock_release+0x680/0x680 [ 2789.262850] ? kmem_cache_alloc_trace+0x151/0x320 [ 2789.263368] ? v9fs_show_options+0x690/0x690 [ 2789.263851] ? trace_hardirqs_on+0x5b/0x180 [ 2789.264345] ? kasan_unpoison_shadow+0x33/0x50 [ 2789.264936] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2789.265620] v9fs_mount+0x79/0x8f0 [ 2789.266154] ? v9fs_write_inode+0x60/0x60 [ 2789.266625] legacy_get_tree+0x105/0x220 [ 2789.267073] vfs_get_tree+0x8e/0x300 [ 2789.267624] path_mount+0x1490/0x21e0 [ 2789.268132] ? strncpy_from_user+0x9e/0x470 [ 2789.268769] ? finish_automount+0xa90/0xa90 [ 2789.269263] ? getname_flags.part.0+0x1dd/0x4f0 [ 2789.269788] ? _copy_from_user+0xfb/0x1b0 [ 2789.270349] __x64_sys_mount+0x282/0x300 [ 2789.270946] ? copy_mnt_ns+0xa00/0xa00 [ 2789.271490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2789.272071] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2789.272656] do_syscall_64+0x33/0x40 [ 2789.273177] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2789.273896] RIP: 0033:0x7feccca28b19 [ 2789.274420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2789.276527] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2789.277376] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2789.278189] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2789.279014] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2789.279935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2789.281029] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2789.283983] FAULT_INJECTION: forcing a failure. [ 2789.283983] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.285513] CPU: 1 PID: 11992 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2789.286286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.287333] Call Trace: [ 2789.287633] dump_stack+0x107/0x167 [ 2789.288048] should_fail.cold+0x5/0xa [ 2789.288479] ? create_object.isra.0+0x3a/0xa30 [ 2789.289004] should_failslab+0x5/0x20 [ 2789.289438] kmem_cache_alloc+0x5b/0x310 [ 2789.289904] create_object.isra.0+0x3a/0xa30 [ 2789.290401] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2789.290980] kmem_cache_alloc+0x159/0x310 [ 2789.291451] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2789.292084] idr_get_free+0x4b5/0x8f0 [ 2789.292522] idr_alloc_u32+0x170/0x2d0 [ 2789.292952] ? __fprop_inc_percpu_max+0x130/0x130 [ 2789.293501] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2789.294109] ? lock_release+0x680/0x680 [ 2789.294557] idr_alloc+0xc2/0x130 [ 2789.294947] ? idr_alloc_u32+0x2d0/0x2d0 [ 2789.295386] ? rwlock_bug.part.0+0x90/0x90 [ 2789.295866] p9_client_prepare_req.part.0+0x612/0xac0 [ 2789.296451] p9_client_rpc+0x220/0x1370 [ 2789.296897] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2789.297500] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2789.298106] ? pipe_poll+0x21b/0x800 [ 2789.298524] ? p9_fd_close+0x4a0/0x4a0 [ 2789.298943] ? wait_for_partner+0x3c0/0x3c0 [ 2789.299431] ? p9_fd_poll+0x1e0/0x2c0 [ 2789.299851] ? p9_fd_create+0x357/0x4a0 [ 2789.300298] ? p9_conn_create+0x510/0x510 [ 2789.300765] ? p9_client_create+0x798/0x1230 [ 2789.301268] ? kfree+0xd7/0x340 [ 2789.301625] ? do_raw_spin_unlock+0x4f/0x220 [ 2789.302127] p9_client_create+0xa76/0x1230 [ 2789.302611] ? p9_client_flush+0x430/0x430 [ 2789.303096] ? trace_hardirqs_on+0x5b/0x180 [ 2789.303586] ? lockdep_init_map_type+0x2c7/0x780 [ 2789.304122] ? __raw_spin_lock_init+0x36/0x110 [ 2789.304638] v9fs_session_init+0x1dd/0x1680 [ 2789.305109] ? lock_release+0x680/0x680 [ 2789.305563] ? kmem_cache_alloc_trace+0x151/0x320 [ 2789.306106] ? v9fs_show_options+0x690/0x690 [ 2789.306607] ? trace_hardirqs_on+0x5b/0x180 [ 2789.307094] ? kasan_unpoison_shadow+0x33/0x50 [ 2789.307608] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2789.308158] v9fs_mount+0x79/0x8f0 [ 2789.308559] ? v9fs_write_inode+0x60/0x60 [ 2789.309009] legacy_get_tree+0x105/0x220 [ 2789.309472] vfs_get_tree+0x8e/0x300 [ 2789.309892] path_mount+0x1490/0x21e0 [ 2789.310321] ? strncpy_from_user+0x9e/0x470 [ 2789.310791] ? finish_automount+0xa90/0xa90 [ 2789.311274] ? getname_flags.part.0+0x1dd/0x4f0 [ 2789.311783] ? _copy_from_user+0xfb/0x1b0 [ 2789.312253] __x64_sys_mount+0x282/0x300 [ 2789.312709] ? copy_mnt_ns+0xa00/0xa00 [ 2789.313154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2789.313745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2789.314306] do_syscall_64+0x33/0x40 [ 2789.314727] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2789.315287] RIP: 0033:0x7f49777bbb19 [ 2789.315707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2789.317705] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2789.318564] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2789.319367] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2789.320170] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2789.320975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2789.321786] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2789.340938] 9pnet: Insufficient options for proto=fd 00:54:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:54:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:05 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 42) 00:54:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2e030000, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:54:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15154, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:05 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 43) 00:54:05 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x2010, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2800.751866] FAULT_INJECTION: forcing a failure. [ 2800.751866] name failslab, interval 1, probability 0, space 0, times 0 [ 2800.753151] CPU: 1 PID: 12021 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2800.753940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2800.755051] Call Trace: [ 2800.755456] dump_stack+0x107/0x167 [ 2800.755894] should_fail.cold+0x5/0xa [ 2800.756316] ? create_object.isra.0+0x3a/0xa30 [ 2800.756831] should_failslab+0x5/0x20 [ 2800.757313] kmem_cache_alloc+0x5b/0x310 [ 2800.757873] create_object.isra.0+0x3a/0xa30 [ 2800.758370] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2800.759063] kmem_cache_alloc+0x159/0x310 [ 2800.759581] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2800.760305] idr_get_free+0x4b5/0x8f0 [ 2800.760747] idr_alloc_u32+0x170/0x2d0 [ 2800.761193] ? __fprop_inc_percpu_max+0x130/0x130 [ 2800.761756] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2800.762345] ? lock_release+0x680/0x680 [ 2800.762802] idr_alloc+0xc2/0x130 [ 2800.763195] ? idr_alloc_u32+0x2d0/0x2d0 [ 2800.763642] ? rwlock_bug.part.0+0x90/0x90 [ 2800.764130] p9_client_prepare_req.part.0+0x612/0xac0 [ 2800.764723] p9_client_rpc+0x220/0x1370 [ 2800.765158] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2800.765762] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2800.766376] ? pipe_poll+0x21b/0x800 [ 2800.766800] ? p9_fd_close+0x4a0/0x4a0 [ 2800.767247] ? wait_for_partner+0x3c0/0x3c0 [ 2800.767715] ? p9_fd_poll+0x1e0/0x2c0 [ 2800.768153] ? p9_fd_create+0x357/0x4a0 [ 2800.768591] ? p9_conn_create+0x510/0x510 [ 2800.769062] ? p9_client_create+0x798/0x1230 [ 2800.769555] ? kfree+0xd7/0x340 [ 2800.769929] ? do_raw_spin_unlock+0x4f/0x220 [ 2800.770415] p9_client_create+0xa76/0x1230 [ 2800.770908] ? p9_client_flush+0x430/0x430 [ 2800.771395] ? trace_hardirqs_on+0x5b/0x180 [ 2800.771886] ? lockdep_init_map_type+0x2c7/0x780 [ 2800.772108] 9pnet: Insufficient options for proto=fd [ 2800.772407] ? __raw_spin_lock_init+0x36/0x110 [ 2800.774085] v9fs_session_init+0x1dd/0x1680 [ 2800.774587] ? lock_release+0x680/0x680 [ 2800.775044] ? kmem_cache_alloc_trace+0x151/0x320 [ 2800.775715] ? v9fs_show_options+0x690/0x690 [ 2800.776308] ? trace_hardirqs_on+0x5b/0x180 [ 2800.776826] ? kasan_unpoison_shadow+0x33/0x50 [ 2800.777330] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2800.777904] v9fs_mount+0x79/0x8f0 [ 2800.778297] ? v9fs_write_inode+0x60/0x60 [ 2800.778764] legacy_get_tree+0x105/0x220 [ 2800.779210] vfs_get_tree+0x8e/0x300 [ 2800.779635] path_mount+0x1490/0x21e0 [ 2800.780071] ? strncpy_from_user+0x9e/0x470 [ 2800.780559] ? finish_automount+0xa90/0xa90 [ 2800.781053] ? getname_flags.part.0+0x1dd/0x4f0 [ 2800.781593] ? _copy_from_user+0xfb/0x1b0 [ 2800.782055] __x64_sys_mount+0x282/0x300 [ 2800.782511] ? copy_mnt_ns+0xa00/0xa00 [ 2800.782962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2800.783554] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2800.784114] do_syscall_64+0x33/0x40 [ 2800.784541] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2800.785094] RIP: 0033:0x7f49777bbb19 [ 2800.785530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2800.787528] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2800.788349] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2800.789121] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2800.789897] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2800.790666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2800.791438] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:54:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x9effffff, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2800.814088] FAULT_INJECTION: forcing a failure. [ 2800.814088] name failslab, interval 1, probability 0, space 0, times 0 [ 2800.816627] CPU: 0 PID: 12024 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2800.818094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2800.819837] Call Trace: [ 2800.820399] dump_stack+0x107/0x167 [ 2800.821168] should_fail.cold+0x5/0xa [ 2800.821992] ? create_object.isra.0+0x3a/0xa30 [ 2800.823015] should_failslab+0x5/0x20 [ 2800.823977] kmem_cache_alloc+0x5b/0x310 [ 2800.825020] create_object.isra.0+0x3a/0xa30 [ 2800.826129] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2800.827427] __kmalloc+0x16e/0x390 [ 2800.828323] p9_fcall_init+0x97/0x290 [ 2800.829291] p9_client_prepare_req.part.0+0xf4/0xac0 [ 2800.830588] p9_client_rpc+0x220/0x1370 [ 2800.831588] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2800.832897] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2800.834248] ? pipe_poll+0x21b/0x800 [ 2800.835173] ? p9_fd_close+0x4a0/0x4a0 [ 2800.836151] ? wait_for_partner+0x3c0/0x3c0 [ 2800.837244] ? p9_fd_poll+0x1e0/0x2c0 [ 2800.838203] ? p9_fd_create+0x357/0x4a0 [ 2800.839183] ? p9_conn_create+0x510/0x510 [ 2800.840196] ? p9_client_create+0x798/0x1230 [ 2800.841294] ? kfree+0xd7/0x340 [ 2800.842119] ? do_raw_spin_unlock+0x4f/0x220 [ 2800.843218] p9_client_create+0xa76/0x1230 [ 2800.844282] ? p9_client_flush+0x430/0x430 [ 2800.845351] ? trace_hardirqs_on+0x5b/0x180 [ 2800.846442] ? lockdep_init_map_type+0x2c7/0x780 [ 2800.847629] ? __raw_spin_lock_init+0x36/0x110 [ 2800.848797] v9fs_session_init+0x1dd/0x1680 [ 2800.849908] ? kmem_cache_alloc_trace+0x151/0x320 [ 2800.851112] ? v9fs_show_options+0x690/0x690 [ 2800.852217] ? trace_hardirqs_on+0x5b/0x180 [ 2800.853304] ? kasan_unpoison_shadow+0x33/0x50 [ 2800.854440] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2800.855696] v9fs_mount+0x79/0x8f0 [ 2800.856575] ? v9fs_write_inode+0x60/0x60 [ 2800.857658] legacy_get_tree+0x105/0x220 [ 2800.858666] vfs_get_tree+0x8e/0x300 [ 2800.859586] path_mount+0x1490/0x21e0 00:54:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15155, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2800.860529] ? strncpy_from_user+0x9e/0x470 00:54:05 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x2e00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2800.861745] ? finish_automount+0xa90/0xa90 [ 2800.862848] ? getname_flags.part.0+0x1dd/0x4f0 [ 2800.863986] ? _copy_from_user+0xfb/0x1b0 [ 2800.865009] __x64_sys_mount+0x282/0x300 [ 2800.866009] ? copy_mnt_ns+0xa00/0xa00 [ 2800.866971] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2800.868276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2800.869578] do_syscall_64+0x33/0x40 [ 2800.870489] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2800.871741] RIP: 0033:0x7feccca28b19 [ 2800.872640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2800.877132] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2800.878987] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2800.880736] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2800.882484] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2800.884241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2800.885972] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:54:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@fscache}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000001c0)=0x5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:54:05 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 44) 00:54:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:06 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x2010, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2801.069967] 9pnet: Insufficient options for proto=fd [ 2801.106224] FAULT_INJECTION: forcing a failure. [ 2801.106224] name failslab, interval 1, probability 0, space 0, times 0 [ 2801.107572] CPU: 1 PID: 12047 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2801.108313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2801.109253] Call Trace: [ 2801.109555] dump_stack+0x107/0x167 [ 2801.109947] should_fail.cold+0x5/0xa [ 2801.110366] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2801.110985] should_failslab+0x5/0x20 [ 2801.111399] kmem_cache_alloc+0x5b/0x310 [ 2801.111842] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2801.112446] idr_get_free+0x4b5/0x8f0 [ 2801.112868] idr_alloc_u32+0x170/0x2d0 [ 2801.113297] ? __fprop_inc_percpu_max+0x130/0x130 [ 2801.113818] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2801.114423] ? lock_release+0x680/0x680 [ 2801.114858] idr_alloc+0xc2/0x130 [ 2801.115250] ? idr_alloc_u32+0x2d0/0x2d0 [ 2801.115691] ? rwlock_bug.part.0+0x90/0x90 [ 2801.116176] p9_client_prepare_req.part.0+0x612/0xac0 [ 2801.116738] p9_client_rpc+0x220/0x1370 [ 2801.117165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2801.117775] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2801.118356] ? pipe_poll+0x21b/0x800 [ 2801.118758] ? p9_fd_close+0x4a0/0x4a0 [ 2801.119180] ? wait_for_partner+0x3c0/0x3c0 [ 2801.119666] ? p9_fd_poll+0x1e0/0x2c0 [ 2801.120086] ? p9_fd_create+0x357/0x4a0 [ 2801.120537] ? p9_conn_create+0x510/0x510 [ 2801.120986] ? p9_client_create+0x798/0x1230 [ 2801.121472] ? kfree+0xd7/0x340 [ 2801.121826] ? do_raw_spin_unlock+0x4f/0x220 [ 2801.122303] p9_client_create+0xa76/0x1230 [ 2801.122783] ? p9_client_flush+0x430/0x430 [ 2801.123244] ? trace_hardirqs_on+0x5b/0x180 [ 2801.123710] ? lockdep_init_map_type+0x2c7/0x780 [ 2801.124225] ? __raw_spin_lock_init+0x36/0x110 [ 2801.124746] v9fs_session_init+0x1dd/0x1680 [ 2801.125220] ? lock_release+0x680/0x680 [ 2801.125655] ? kmem_cache_alloc_trace+0x151/0x320 [ 2801.126178] ? v9fs_show_options+0x690/0x690 [ 2801.126679] ? trace_hardirqs_on+0x5b/0x180 [ 2801.127148] ? kasan_unpoison_shadow+0x33/0x50 [ 2801.127663] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2801.128217] v9fs_mount+0x79/0x8f0 [ 2801.128620] ? v9fs_write_inode+0x60/0x60 [ 2801.129072] legacy_get_tree+0x105/0x220 [ 2801.129538] vfs_get_tree+0x8e/0x300 [ 2801.129942] path_mount+0x1490/0x21e0 [ 2801.130377] ? strncpy_from_user+0x9e/0x470 [ 2801.130844] ? finish_automount+0xa90/0xa90 [ 2801.131332] ? getname_flags.part.0+0x1dd/0x4f0 [ 2801.131837] ? _copy_from_user+0xfb/0x1b0 [ 2801.132312] __x64_sys_mount+0x282/0x300 [ 2801.132754] ? copy_mnt_ns+0xa00/0xa00 [ 2801.133197] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2801.133777] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2801.134367] do_syscall_64+0x33/0x40 [ 2801.134773] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2801.135353] RIP: 0033:0x7f49777bbb19 [ 2801.135774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2801.137850] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2801.138709] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2801.139513] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2801.140313] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2801.141118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2801.141927] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:54:19 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 45) 00:54:19 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 43) 00:54:19 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:19 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x3f00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15156, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:19 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[], 0x299) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x17401, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r1, 0x0) r4 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616368657461673d2c76657273696f6e3d3970323030302e4c2c766d7273696f6e3d3970800000002e4c2c6e6f657874656e642c76657273696f6e3d397032303030197a964f839559af733d616e792c64666c746769643d", @ANYRESHEX=0x0, @ANYBLOB="2c63616368657461673d2c76657273696f6e3d3970323030302e4c2c7375626a5f726f6c653d2526267d243a2c27892c6d6561737572652c00"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) sendmsg$unix(r6, &(0x7f0000001e80)={&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000980)="e6579517add582cead454d9d61626a54bec61edb7b0f82f84bd5f20f29f08d27a917b2661b0ef73703ea777ff33ea8d44bc7591f62d5a6bc926044c105bc58e878010809559feeff167d00c2d9293591c835c797f376fa88e9a35d1d0c25889dd27af80a9f5a3ecbd028a76f68", 0x6d}, {&(0x7f0000000a00)="e8596f28efc068b5f20a91b8541b33ce9c7bc6ddba5bc68329f3fcc84f483285611a351e2baae14ad21ffbf1a771eb5685a5fb1017f336446aba36a67a620c0d5fc583917ba266c3afe97aef436e2ed24186264d2975bed8eb85f8210c48d35ffe71066caa9df8291cca1f46dc792cc129fb8a022a412fa6f45d8325088d8e8f190d93b0d1def6453ff1b3010b3d119f81845bf81d945b4325cfe81adae963e29026562f796974633e69d89110f268184ad1a5c62a94f872eac6cefaf1447a926dab208ee2459a476c6bf12785234ef2276672abc2fdcf19b091fe52077a5431b68f8ee5b8167fb022894bf16e222071ce331f04137daf8b0a09317d691809e6cb126a08aeaa605af4b5b46fa122c017fcaee7533624e8e424553fa40254edc0327007597ab7a95d50aa9941352d16c35466c9d82e9b66e96e94609b7a371e137b1e7e0166c4fdda92a904ebf37f627cf1bd11be283f0c14018e044e8debcfe3af7b34ef394d490e3357228e99d0d8a49db78a125d87a9cc8d21f5be22c3efb08bdaff9cb5f2320ba7d3f1aca87a3d8d8f41b95ff0e74a757141b6d09770da2bee2885192aeb079fa7480003dcb54f543c764906ad492ced968f16ee2f6628f888e848acf29e2d71598664acf323596bd5d9d4c5710f8bc9379294e937fadd7194905a308185533a4bd3de8cc2afe73b894ca63cbb3ae42df57026ac53d976de37ec0e9a139676fa61fd195b6ef73fb3fe7e798616a6e164456b34a8ae49f60cde56ce4a28dce07b45681744615b3d65c23a795df868b6bfdb516d736a6abedff91cfebc4f28234f8ccbb16cc003d5f18d74291e5ba58fce0239186d1c90774bd661e5007e90f5fe1f9347596ac1ba6c5e7559ef4a00d172012f2071d7cb5639bed2d5b5bd3fd27ceb88129d2f0d19745587ea1690ec369cc5dd7a6b0eb5879d5212d3340256abfa5eec30f93fc5421bb21476ae8fe8c4f325a0690d4caf144dc643e2f3a3a57249b7b6d6f2675b2852f413ea73ed214421cfdcab6d3981b27378688aa5a36855cabbea939f27499a5ff6f08977c4ddc9780933edb87626927761e07c20a5309e2397ce01379fbbf2c0b0ddb2382f0c0961c130f80a9fe889ac5e1e0c5bcbb1ed4dcf3793bacbfc3b1e7251019148f8f6910d43ba1ebeb58df4f4512031737819d8492643dc968bdc8d1318201239feb42e59bd491b85c9eaa003f87cd7c8bcff8383b7a8b98fdda773fabeb41b25677519535e3749ae5782ecdc65ced4a6f35e221d9b71559eee8faaa088ab0350232840104b248dd54e219592d48851da8dc6c846cac96deb7131795b63d1fc740e6bac89633abee50fa8f197e704b0fcd9f7f84a472f03de2554b1045055407b4c72006aad74f9b5570bb42cf3b0a065202cebf5c08854e7770f42b532c77a8deedec60b71bb2a0f017588887b09b363cb7d70c10a37c96ec57bceeeabe62969d21d34b3adbc309ec8b47ba9f989a4d75c7d62e826dceb2ef9535e8632e47e6b567a25e06420cab4a96dd0afcd8183169b324164ebcf7dcea5f117419b8ddb6c58a50f486fd296b50d69137a21b333a8b0f9152c7218b712c47ce81e7c7e937eaa2045efb85f560386e986c9c809dcf806e3ba816aa298a5ebbc452656c2c73d5cb339738a0edcc05dcd88c69f44fa2c7473b40cc1b8e491aa3faf09bcf2e4f66a5bc9015e37e6fd62bd08da40644f8d690d8a3fd1bca4809f7c0767f1d64fb1cd4cf9276ab906ce345f1384da05137f4dc85d897d4ba407cfcb613b170a408c9cbdf2c96f2b97096f1461558967c9d039e93cb33c6bfbf0521d279dff2a999c27bfa2112b18837983124111d19e89cfdc1bd5ea89a0248cc71aa98e946c76c61b7e4d3f9493156de16cccc710d888e7c021350f730348144e0963c038454560e0143b7552a445a3601d53f7bebb330c0b7b3cdd4aa77252a8ce1af12d5ae23fb211ba45247db89f9c71db072bd849446bf8f07c82722b523ea55bd7cb5951d4ee97f0fe3c89604e32e0b0964788363f5635fc5fb666a5679cebe0a1e7b17ef9e0a2cc7255dd3dae7b4b42a78694bba1f6eedf80aa18c7c3a5d6b7c68f5c89b7028361e8771a6afb038c586d36c57c430ff0699499c057f45ddf009b2fde5537a78ed8a9ad0b20f229655e35c469e4cd536503bc92dc17083be86fc52685dcd83ce673a0edfb500a9944b40ea1af2772932009ea402ef6a8ce341791671119d641dd85835f83567b987b479d3e34d297f306730dc8e87b8c7c2422ff8e8a6677c5872da7cb9e134a89d791dfcaeca811dd50d546ac1c130a1e2f0cfedde72505293f2fea997a453a072377137ad1313fbd15f9e1210facb1f3fbf80debaa44a0bf90d8549d4c27d4c00f5429594e70ec0630fcdccdb957063f4a224c2423f58fe5657e6c324d1cb2d1b06502541a5a2ef2f5cf3f8b0cf0022b646abf251a1266c13bdd97e0011b4dac2ba07fcf6b548f9abd04cc8a0fc056b848b3af2ffd02d9f64963f4a37680b5c2e6a59fdf2a0ac9aa5c9a9a61929cca31d86e1a28a85f4f291c6762f478da79c543c3b029751245e5c626445d927cf086a0aca5e5f060f5be8c4774a447fc2b07e1b9f2967a91679f9f6603ce038a2547f9b65ea77ec06e55e6cfe2395ff1eaa1de79ab66585b9f60023a6a12c78f6667b074900a6388d0d08062005e3096961d5f41dd9d67b70220ff2ab88bbe070c54b0b10b80f1984dbd0a548d75377d8d1ec0c208e6739104c2f5a04c58e66175de24cf8d6e9eaf500042a54f81135cb8249241e007572f000b2243c914a49fc580eca1925d375a0d40ac3af3bc43ac8c74066c96986f5e7e5eb2b85f0a0b545af208026bd9204043278bbb4055eb5ef33769defa37663d590ff3a81a5b48de1da0a3878d515e23ea6c76ceef789e401815747ff4afe349563d099d117bbb3b7f4f7c09520db32c15c846ae9d5fc78e7f7cdf0de26b623370e52820e134fc3c5a0a087ce9d0ecb238f57849130eeff6b38aa52f7bc78c4c13d358a362bf50672dd311a49f3042309785d4a2286563d128aa1cbf164031d51cf0da6ba22f55d865cb34f0a8efb73ef8dfa683893be1399f889b4df03f52898c5330181c76f0c4fab140bf51934cea578cef9c6ceb6c30ea4d6f04997917b08ca1d688516c941e7be730901fc82d5c59403a0cdc445adea7e8f7ff1c648f761822398d5c0368f49f876c145740dc101e0f360755ac31df156947315bba4a0d4773236888faadf19d3d59b5021d2cf522bf8e60db6778fab0ce05a6dba7ac8c15e03bb559fc68a06c7d8034a50fc2490b921aa17d139709e8aaf0fcd9be6242c7d2cd1338ad1f1e46c72f8e3de06e3c2ab9491dc458b5b1fe40b0a75c13dbb65c959013aaa5aab9288bf9c0572327db76303abb97da9aca2d7096c1ce154388165eab18ffbae25358c856c2a507a12794a8384e0fea2c80e04684268723801edd9846a9528dc60780983ffaf56f00c0de722313517c68db65d92bec26a9efeb4b59c759af337ad3989bc2000efc02e8800d04d7e781032a3bdb280e2e867f2f7d586af2979b4b6733579a03800efcdc332277c7029380f613604a75facbd2e1d213af83603b0da7be3939d49ffa699a0d8a1873e99b5766162f7e3abd5a4c2d00440257757f073d7b9c7097031202b9ccc21b2f729ca8f41473e916cc146d40a8be4a7aab8868f1fbf0ad5cd6f9fea56a528d0e69240b1356afa629c6a31dc74b1e6263780c37d252a2c83df8ba37c623d263808b49e6c3cf9c0bee6f3a6c7d1880ce4c365316191aa97ae9cf814258515c0c4878c74861cf37d6392d073b110cbcc91a820b26868be8c36df773d5b91455e159b74184799226c8bac281bc1494361585d3a2e495af767dca1c68da87701ffbefbf1205a27db45bd84040d21ed95b78a6063c5a68f570cbd1fde5c4780f23dcf42e78d4eaefcfa58a42d297882f643b943df3587ba8531f9b0946b6296dc2b01c6ecd6cf7f42d3dd24db6aaf63ce3126adf7ebad24d46c09d02eab7a56d3a51de9bcf5eae25729c8cfb92891adc06507832db91487c81874156a9248c4fdfc5a026dd687d5b42210916200645188dba16091615a850b065a947f3993f86da7f3dcbf106e7a15748a3e5a5464da65e88bd7cf3ea53404fd1b0fd3184780f33214b60cd5cffc40aa654a731c4092a1f7045f598e68f29fec613199b4366cb55d98d7338bd25c73b901f81d22a324ea4688cff62fbac058be61fdde95c3344cff2ac606e6c110646384be060f1f0e51b38fbaaa1655d6ad47600e0e16766c611a9889032bc3bae7a9753f57e03a21055cc2f82f58055832ec99afa439375fb53788c10a6cfbd54d3404545f8320283341b5f4fe8a00493b62e4cce4f9f2b0340bafaebe2a8f5ad7655ee24811a34fed82de87ae7369106c0761c9af86ebd3d53ce530cb3d1a4a8c7f6820d298af7a0ff6226db338426b69417c10380bb14d03101a4b2607c2bd8cfea220394209a838831f4bdd22e828411ef4bb6e85e130fc28dfa5925e8ffc62a669ec56b722c365aadcdd4c8bf58ef72667c4da5d62e5cb82dd96900ab3c3ed0288cb736638f842db9529aaa0a0fc78f7989d9b9984d04b224f4d5e625cb49117a565a4a6775b3121b28ff778786bb802f07cd22b8424df264b1c2f3033594410da4081bf37422902c2c93b7b9482471e88ec7cb3718f7f2af8470066e127c4be98b1bb65727ac10d84c2ff43b7e34d19e5cae1f80a2217f24da71548a1eb9ee8f6e8ca16d78867ce7c136464b9e65794853d3e9f92958dbcc5c614fd12661ab4bb9ee31819e2279e70c47642e7af8c863ffc9c353f8b9501bd0f3482b7954f4676478ae77f7f8e39be1226c33ca72996dec0cba398ed5d567cdc31b8154f4209debde40033a1a603ac0d5eb6e64804e6bbd47eaf7c10cfcfad4aa3c451b9b117b7d9c54ebefbc17cf36ef7fa9fceca37970805176e969036b8443a192ab670f335f2e20063fab8c6fa1e7c039661b1ac27788dec277a9d45e7cf65c764c9061d5d638912ce361bd385a49a8822c345b5526404b81becafb1e9f6451dc8084b4906961f1fd86bd607eaee66cb2749e626ac67578e99cf79ebd39ba9b0541c46c1c7ebd9f1066be5a7ace7cd7b1f5f22fee6f50f307348a2f0478f3f381f918fdcd3ed1d78b0a7e240a4e51e1a455542a4645fc81a77cf19a05f8b21621824e380ea8f8fbc5d72dd5af6bb8934cbe2f824036b417da7b38b3dd87c4ca62e141c887926d26ef386603bde1b4faad87146b3c38e44dfd408de8b44673a790172b77d078e6d2e297c16e22d5072e63fcafb2d37ffd5769bb20bdbb81976cab81cbd6c67d04a1ebfa719bf82857712316bd565bea478c3416013987c9c7cfbfff9081b888e3fa0bf9d157a13245b5b466bef7de227c0fc0889b8f96a25bf5e5c1fd5de70c5da3db06ec834db84a6e60a310fd3d6a22fa3e0238e15454940c37fb8618b9c511ddee9cae13c7bcb04221c1c2f374eaa075e25d59230c3dc17f0c463600d4f68a436829c5b65c982fac3ba56b018b950909f083fc2ea97b55c0f421a13eb662fc54a9538ccae734eced945553ed95bcc8789ee75651af21c043b105acbff1ccd7228f60f7207413ce0f69c75b8a1b5b7b67504714325f1f3086200f3360242a6a65ec1fba75f4fbaaa12189df8f769a3c3acb9be8dd3f161e32a7b7f017164c2d744f629ebc9eddeeca371e1a39c2d2383e2fc1cfd968bb44d8c618365b423a", 0x1000}, {&(0x7f0000001a00)="4e763bfa5cb43534404efc3e0072dbbc17f5cb2b4b6e8ad14f783a747a7768fe7d9f6bc6862204f2d16576cd685ed38d440a57079159dc1ac8b3445d6b8b2939ea8fa7833c14cd725216499041a3d45498710d8fbd18278fb22297caad7bcd58441b917d56e544ac41a18b2715420c023225e356c0e90c2dbf59fc6bed86078fade47bdc8fe7073592840c042cdbe6f0a0f14903a1d0f22f58c2706b535cd9df5c42d0202bf97239a4359b2e41c0de571a90fc9868064f0982c528c8ec330772ce6c1f81b101d5", 0xc7}, {&(0x7f00000001c0)="79a521ac11e2ddbabf6da611cc2370c2ed376f950211f8709848f8a96af1d73a314dcb6307ef88157c4463a850ac79e6a2cb30f9277695c48cba", 0x3a}, {&(0x7f0000001b00)="5fdb8372932687278b55362a826d03454d60b71f7525d254737d8618a1337ad28780014cb971d2e1241f3a5aec5ef3cd86bea82bf4d1094acdffe002805f027cf3d81f0f2ea4f7bf3f3a2416704b0bd4cd03d4ced1733cafcd26ef123fd473cd8d4da900ba46bc3c55f4d3b134d84bca05a99e899884b81e12efb5739ca12f4aaf3ebd97678de7c509c88f39d0719c1f03bbaa3dd11609c9839fb3b806b4e3f1b3f14c375a0cc83e36387f4e0de1ab06b86fa40a92b98528081cd0ec94c81542f5748350bdd2f6248a6ffc159ad671f5f67cb3f0dca27556646fa8a1f45a94a522775d58aa00e833e9674a20ba083b5b6f9d", 0xf2}, {&(0x7f0000001c00)="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", 0xfd}], 0x6, &(0x7f0000001e00)=[@rights={{0x28, 0x1, 0x1, [r3, r2, r0, 0xffffffffffffffff, r2, r4]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}], 0x60, 0x80}, 0x4c000) 00:54:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf0ffffff, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2814.255840] 9pnet: Insufficient options for proto=fd 00:54:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffff000, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:54:19 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) recvmsg(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)=""/150, 0x96}, {&(0x7f0000000a40)=""/129, 0x81}], 0x2, &(0x7f0000000b00)=""/4096, 0x1000}, 0x100) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) [ 2814.295336] FAULT_INJECTION: forcing a failure. [ 2814.295336] name failslab, interval 1, probability 0, space 0, times 0 [ 2814.297724] CPU: 0 PID: 12065 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2814.299187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2814.300974] Call Trace: [ 2814.301545] dump_stack+0x107/0x167 [ 2814.302340] should_fail.cold+0x5/0xa [ 2814.303241] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2814.304586] should_failslab+0x5/0x20 [ 2814.305500] kmem_cache_alloc+0x5b/0x310 [ 2814.306435] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2814.307683] idr_get_free+0x4b5/0x8f0 [ 2814.308560] idr_alloc_u32+0x170/0x2d0 00:54:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15157, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2814.309441] ? __fprop_inc_percpu_max+0x130/0x130 [ 2814.310666] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2814.311894] ? lock_release+0x680/0x680 [ 2814.312809] idr_alloc+0xc2/0x130 [ 2814.313612] ? idr_alloc_u32+0x2d0/0x2d0 [ 2814.314515] ? rwlock_bug.part.0+0x90/0x90 [ 2814.315481] p9_client_prepare_req.part.0+0x612/0xac0 [ 2814.316640] p9_client_rpc+0x220/0x1370 [ 2814.317550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 00:54:19 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x4000, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2814.318726] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2814.319966] ? pipe_poll+0x21b/0x800 [ 2814.320795] ? p9_fd_close+0x4a0/0x4a0 [ 2814.321685] ? wait_for_partner+0x3c0/0x3c0 [ 2814.322647] ? p9_fd_poll+0x1e0/0x2c0 [ 2814.323504] ? p9_fd_create+0x357/0x4a0 [ 2814.324388] ? p9_conn_create+0x510/0x510 [ 2814.325307] ? p9_client_create+0x798/0x1230 [ 2814.326296] ? kfree+0xd7/0x340 [ 2814.327028] ? do_raw_spin_unlock+0x4f/0x220 [ 2814.328016] p9_client_create+0xa76/0x1230 [ 2814.328975] ? p9_client_flush+0x430/0x430 [ 2814.329930] ? trace_hardirqs_on+0x5b/0x180 [ 2814.330897] ? lockdep_init_map_type+0x2c7/0x780 [ 2814.331959] ? __raw_spin_lock_init+0x36/0x110 [ 2814.332986] v9fs_session_init+0x1dd/0x1680 [ 2814.333961] ? lock_release+0x680/0x680 [ 2814.334861] ? kmem_cache_alloc_trace+0x151/0x320 [ 2814.335936] ? v9fs_show_options+0x690/0x690 [ 2814.336928] ? trace_hardirqs_on+0x5b/0x180 [ 2814.337901] ? kasan_unpoison_shadow+0x33/0x50 [ 2814.338922] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2814.340060] v9fs_mount+0x79/0x8f0 [ 2814.340855] ? v9fs_write_inode+0x60/0x60 [ 2814.341788] legacy_get_tree+0x105/0x220 [ 2814.342702] vfs_get_tree+0x8e/0x300 [ 2814.343532] path_mount+0x1490/0x21e0 [ 2814.344389] ? strncpy_from_user+0x9e/0x470 [ 2814.345353] ? finish_automount+0xa90/0xa90 [ 2814.346331] ? getname_flags.part.0+0x1dd/0x4f0 [ 2814.347370] ? _copy_from_user+0xfb/0x1b0 [ 2814.348312] __x64_sys_mount+0x282/0x300 [ 2814.349216] ? copy_mnt_ns+0xa00/0xa00 [ 2814.350104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2814.351276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2814.352442] do_syscall_64+0x33/0x40 [ 2814.353274] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2814.354434] RIP: 0033:0x7feccca28b19 [ 2814.355264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2814.359383] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2814.361094] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2814.362699] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2814.364292] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2814.365900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2814.367496] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2814.385210] FAULT_INJECTION: forcing a failure. [ 2814.385210] name failslab, interval 1, probability 0, space 0, times 0 [ 2814.387768] CPU: 0 PID: 12066 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2814.389293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2814.391135] Call Trace: [ 2814.391731] dump_stack+0x107/0x167 [ 2814.392555] should_fail.cold+0x5/0xa [ 2814.393403] ? ___slab_alloc+0x155/0x700 [ 2814.394290] ? create_object.isra.0+0x3a/0xa30 [ 2814.395281] should_failslab+0x5/0x20 [ 2814.396134] kmem_cache_alloc+0x5b/0x310 [ 2814.397035] create_object.isra.0+0x3a/0xa30 [ 2814.398008] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2814.399155] kmem_cache_alloc+0x159/0x310 [ 2814.400099] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2814.401355] idr_get_free+0x4b5/0x8f0 [ 2814.402233] idr_alloc_u32+0x170/0x2d0 [ 2814.403097] ? __fprop_inc_percpu_max+0x130/0x130 [ 2814.404172] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2814.405364] ? lock_release+0x680/0x680 [ 2814.406262] idr_alloc+0xc2/0x130 [ 2814.407036] ? idr_alloc_u32+0x2d0/0x2d0 [ 2814.407934] ? rwlock_bug.part.0+0x90/0x90 [ 2814.408890] p9_client_prepare_req.part.0+0x612/0xac0 [ 2814.410056] p9_client_rpc+0x220/0x1370 [ 2814.410941] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2814.412117] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2814.413308] ? pipe_poll+0x21b/0x800 [ 2814.414138] ? p9_fd_close+0x4a0/0x4a0 [ 2814.415001] ? wait_for_partner+0x3c0/0x3c0 [ 2814.415960] ? p9_fd_poll+0x1e0/0x2c0 [ 2814.416813] ? p9_fd_create+0x357/0x4a0 [ 2814.417709] ? p9_conn_create+0x510/0x510 [ 2814.418634] ? p9_client_create+0x798/0x1230 [ 2814.419615] ? kfree+0xd7/0x340 [ 2814.420352] ? do_raw_spin_unlock+0x4f/0x220 [ 2814.421338] p9_client_create+0xa76/0x1230 [ 2814.422301] ? p9_client_flush+0x430/0x430 [ 2814.423247] ? trace_hardirqs_on+0x5b/0x180 [ 2814.424212] ? lockdep_init_map_type+0x2c7/0x780 [ 2814.425277] ? __raw_spin_lock_init+0x36/0x110 [ 2814.426307] v9fs_session_init+0x1dd/0x1680 [ 2814.427268] ? lock_release+0x680/0x680 [ 2814.428163] ? kmem_cache_alloc_trace+0x151/0x320 [ 2814.429236] ? v9fs_show_options+0x690/0x690 [ 2814.430234] ? trace_hardirqs_on+0x5b/0x180 [ 2814.431203] ? kasan_unpoison_shadow+0x33/0x50 [ 2814.432226] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2814.433364] v9fs_mount+0x79/0x8f0 [ 2814.434164] ? v9fs_write_inode+0x60/0x60 [ 2814.435090] legacy_get_tree+0x105/0x220 [ 2814.436007] vfs_get_tree+0x8e/0x300 [ 2814.436836] path_mount+0x1490/0x21e0 [ 2814.437705] ? strncpy_from_user+0x9e/0x470 [ 2814.438669] ? finish_automount+0xa90/0xa90 [ 2814.439634] ? getname_flags.part.0+0x1dd/0x4f0 [ 2814.440672] ? _copy_from_user+0xfb/0x1b0 [ 2814.441614] __x64_sys_mount+0x282/0x300 [ 2814.442519] ? copy_mnt_ns+0xa00/0xa00 [ 2814.443396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2814.444568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2814.445730] do_syscall_64+0x33/0x40 [ 2814.446564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2814.447711] RIP: 0033:0x7f49777bbb19 [ 2814.448545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2814.452655] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2814.454356] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2814.455943] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2814.457536] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2814.459126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2814.460709] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:54:19 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x4084, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffff7f, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:54:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15158, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15159, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',loose,msize=0x0000000000000002,privport,access=user,subj_user=rfdno,fowner=', @ANYRESDEC, @ANYBLOB="2c736d61636b66736861743d2a5d2c666f1ef67f313d", @ANYRESDEC=r5, @ANYBLOB=',dont_hash,\x00']) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000780), &(0x7f00000007c0), 0x2, 0x0) 00:54:34 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x4800, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:34 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 46) 00:54:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffff9e, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:54:34 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 44) 00:54:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000009c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae935c2f4a399dbcc8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/671], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000080d0a050000000000000000000c00000a08000440000000020900020073797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x200008d5) 00:54:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffff0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2829.114164] FAULT_INJECTION: forcing a failure. [ 2829.114164] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.116666] CPU: 0 PID: 12105 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2829.118154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.119933] Call Trace: [ 2829.120521] dump_stack+0x107/0x167 [ 2829.121289] should_fail.cold+0x5/0xa [ 2829.122125] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2829.123341] should_failslab+0x5/0x20 [ 2829.124154] kmem_cache_alloc+0x5b/0x310 [ 2829.125053] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2829.126265] idr_get_free+0x4b5/0x8f0 [ 2829.127104] idr_alloc_u32+0x170/0x2d0 [ 2829.127949] ? __fprop_inc_percpu_max+0x130/0x130 [ 2829.129014] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2829.130259] ? lock_release+0x680/0x680 [ 2829.131334] idr_alloc+0xc2/0x130 [ 2829.132272] ? idr_alloc_u32+0x2d0/0x2d0 [ 2829.133367] ? rwlock_bug.part.0+0x90/0x90 [ 2829.134530] p9_client_prepare_req.part.0+0x612/0xac0 [ 2829.135700] p9_client_rpc+0x220/0x1370 [ 2829.136555] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.137700] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2829.138857] ? pipe_poll+0x21b/0x800 [ 2829.139654] ? p9_fd_close+0x4a0/0x4a0 [ 2829.140507] ? wait_for_partner+0x3c0/0x3c0 [ 2829.141425] ? p9_fd_poll+0x1e0/0x2c0 [ 2829.142253] ? p9_fd_create+0x357/0x4a0 [ 2829.143114] ? p9_conn_create+0x510/0x510 [ 2829.143993] ? p9_client_create+0x798/0x1230 [ 2829.144955] ? kfree+0xd7/0x340 [ 2829.145680] ? do_raw_spin_unlock+0x4f/0x220 [ 2829.146662] p9_client_create+0xa76/0x1230 [ 2829.147599] ? p9_client_flush+0x430/0x430 [ 2829.148533] ? trace_hardirqs_on+0x5b/0x180 [ 2829.149473] ? lockdep_init_map_type+0x2c7/0x780 [ 2829.150563] ? __raw_spin_lock_init+0x36/0x110 [ 2829.151582] v9fs_session_init+0x1dd/0x1680 [ 2829.152135] 9pnet: Insufficient options for proto=fd [ 2829.152536] ? lock_release+0x680/0x680 [ 2829.152568] ? kmem_cache_alloc_trace+0x151/0x320 [ 2829.155160] ? v9fs_show_options+0x690/0x690 [ 2829.156142] ? trace_hardirqs_on+0x5b/0x180 [ 2829.157096] ? kasan_unpoison_shadow+0x33/0x50 [ 2829.158120] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.159247] v9fs_mount+0x79/0x8f0 [ 2829.160035] ? v9fs_write_inode+0x60/0x60 [ 2829.160948] legacy_get_tree+0x105/0x220 [ 2829.161881] vfs_get_tree+0x8e/0x300 [ 2829.162714] path_mount+0x1490/0x21e0 [ 2829.163564] ? strncpy_from_user+0x9e/0x470 [ 2829.164519] ? finish_automount+0xa90/0xa90 [ 2829.165472] ? getname_flags.part.0+0x1dd/0x4f0 [ 2829.166533] ? _copy_from_user+0xfb/0x1b0 [ 2829.167444] __x64_sys_mount+0x282/0x300 [ 2829.168311] ? copy_mnt_ns+0xa00/0xa00 [ 2829.169152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.170295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.171432] do_syscall_64+0x33/0x40 [ 2829.172249] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.173352] RIP: 0033:0x7feccca28b19 [ 2829.174170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.178155] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2829.179796] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2829.181316] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2829.182883] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2829.184433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.185988] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2829.212221] FAULT_INJECTION: forcing a failure. [ 2829.212221] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.213677] CPU: 1 PID: 12108 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2829.214547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.215590] Call Trace: [ 2829.215935] dump_stack+0x107/0x167 [ 2829.216407] should_fail.cold+0x5/0xa [ 2829.216887] 9pnet: Insufficient options for proto=fd [ 2829.216898] ? p9pdu_readf+0xadb/0x1d40 [ 2829.216918] should_failslab+0x5/0x20 [ 2829.218984] __kmalloc+0x72/0x390 [ 2829.219408] p9pdu_readf+0xadb/0x1d40 [ 2829.219874] ? pipe_poll+0x21b/0x800 [ 2829.220323] ? p9pdu_writef+0x100/0x100 [ 2829.220802] ? p9_fd_poll+0x1e0/0x2c0 [ 2829.221271] ? p9_fd_create+0x357/0x4a0 [ 2829.221758] ? p9_conn_create+0x510/0x510 [ 2829.222259] ? p9_client_create+0x798/0x1230 [ 2829.222787] ? kfree+0xd7/0x340 [ 2829.223183] ? do_raw_spin_unlock+0x4f/0x220 [ 2829.223718] p9_client_create+0xaee/0x1230 [ 2829.224235] ? p9_client_flush+0x430/0x430 [ 2829.224755] ? trace_hardirqs_on+0x5b/0x180 [ 2829.225277] ? lockdep_init_map_type+0x2c7/0x780 [ 2829.225860] ? __raw_spin_lock_init+0x36/0x110 [ 2829.226417] v9fs_session_init+0x1dd/0x1680 [ 2829.226948] ? lock_release+0x680/0x680 [ 2829.227433] ? kmem_cache_alloc_trace+0x151/0x320 [ 2829.228027] ? v9fs_show_options+0x690/0x690 [ 2829.228560] ? trace_hardirqs_on+0x5b/0x180 [ 2829.229078] ? kasan_unpoison_shadow+0x33/0x50 [ 2829.229636] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.230247] v9fs_mount+0x79/0x8f0 [ 2829.230679] ? v9fs_write_inode+0x60/0x60 [ 2829.231198] legacy_get_tree+0x105/0x220 [ 2829.231692] vfs_get_tree+0x8e/0x300 [ 2829.232146] path_mount+0x1490/0x21e0 [ 2829.232611] ? strncpy_from_user+0x9e/0x470 [ 2829.233133] ? finish_automount+0xa90/0xa90 [ 2829.233663] ? getname_flags.part.0+0x1dd/0x4f0 [ 2829.234229] ? _copy_from_user+0xfb/0x1b0 [ 2829.234740] __x64_sys_mount+0x282/0x300 [ 2829.235231] ? copy_mnt_ns+0xa00/0xa00 [ 2829.235707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.236340] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.236983] do_syscall_64+0x33/0x40 [ 2829.237440] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.238067] RIP: 0033:0x7f49777bbb19 [ 2829.238515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.240777] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2829.241692] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2829.242544] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2829.243396] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2829.244250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.245111] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:54:34 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x4c00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1515a, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:34 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 47) 00:54:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='\f\x00']) 00:54:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffff, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:54:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:34 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 45) [ 2829.464742] FAULT_INJECTION: forcing a failure. [ 2829.464742] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.466240] CPU: 0 PID: 12128 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2829.467031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.467962] Call Trace: [ 2829.468265] dump_stack+0x107/0x167 [ 2829.468688] should_fail.cold+0x5/0xa [ 2829.469116] ? p9pdu_readf+0xadb/0x1d40 [ 2829.469579] should_failslab+0x5/0x20 [ 2829.470012] __kmalloc+0x72/0x390 [ 2829.470419] p9pdu_readf+0xadb/0x1d40 [ 2829.470855] ? pipe_poll+0x21b/0x800 [ 2829.471270] ? p9pdu_writef+0x100/0x100 [ 2829.471729] ? wait_woken+0x250/0x250 [ 2829.472162] ? p9_fd_create+0x357/0x4a0 [ 2829.472627] ? p9_conn_create+0x510/0x510 [ 2829.473091] ? p9_client_create+0x798/0x1230 [ 2829.473734] ? kfree+0xd7/0x340 [ 2829.474102] ? do_raw_spin_unlock+0x4f/0x220 [ 2829.474610] p9_client_create+0xaee/0x1230 [ 2829.475087] ? p9_client_flush+0x430/0x430 [ 2829.475576] ? trace_hardirqs_on+0x5b/0x180 [ 2829.476063] ? lockdep_init_map_type+0x2c7/0x780 [ 2829.476604] ? __raw_spin_lock_init+0x36/0x110 [ 2829.477131] v9fs_session_init+0x1dd/0x1680 [ 2829.477636] ? lock_release+0x680/0x680 [ 2829.478067] ? kmem_cache_alloc_trace+0x151/0x320 [ 2829.478624] ? v9fs_show_options+0x690/0x690 [ 2829.479123] ? trace_hardirqs_on+0x5b/0x180 [ 2829.479615] ? kasan_unpoison_shadow+0x33/0x50 [ 2829.480128] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.480725] v9fs_mount+0x79/0x8f0 [ 2829.481125] ? v9fs_write_inode+0x60/0x60 [ 2829.481590] legacy_get_tree+0x105/0x220 [ 2829.482042] vfs_get_tree+0x8e/0x300 [ 2829.482478] path_mount+0x1490/0x21e0 [ 2829.482888] ? strncpy_from_user+0x9e/0x470 [ 2829.483375] ? finish_automount+0xa90/0xa90 [ 2829.483859] ? getname_flags.part.0+0x1dd/0x4f0 [ 2829.484383] ? _copy_from_user+0xfb/0x1b0 [ 2829.484852] __x64_sys_mount+0x282/0x300 [ 2829.485304] ? copy_mnt_ns+0xa00/0xa00 [ 2829.485756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.486352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.486945] do_syscall_64+0x33/0x40 [ 2829.487377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.487943] RIP: 0033:0x7f49777bbb19 [ 2829.488366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.490453] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2829.491307] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2829.492257] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2829.493244] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2829.494236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.495228] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2829.535412] 9pnet: Insufficient options for proto=fd [ 2829.619243] FAULT_INJECTION: forcing a failure. [ 2829.619243] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.621810] CPU: 0 PID: 12137 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2829.623352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.625205] Call Trace: [ 2829.625813] dump_stack+0x107/0x167 [ 2829.626629] should_fail.cold+0x5/0xa [ 2829.627484] ? create_object.isra.0+0x3a/0xa30 [ 2829.628502] should_failslab+0x5/0x20 [ 2829.629349] kmem_cache_alloc+0x5b/0x310 [ 2829.630274] create_object.isra.0+0x3a/0xa30 [ 2829.631273] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.632424] kmem_cache_alloc+0x159/0x310 [ 2829.633360] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2829.634627] idr_get_free+0x4b5/0x8f0 [ 2829.635491] idr_alloc_u32+0x170/0x2d0 [ 2829.636366] ? __fprop_inc_percpu_max+0x130/0x130 [ 2829.637440] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 2829.638671] ? lock_release+0x680/0x680 [ 2829.639562] idr_alloc+0xc2/0x130 [ 2829.640339] ? idr_alloc_u32+0x2d0/0x2d0 [ 2829.641245] ? rwlock_bug.part.0+0x90/0x90 [ 2829.642210] p9_client_prepare_req.part.0+0x612/0xac0 [ 2829.643372] p9_client_rpc+0x220/0x1370 [ 2829.644261] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.645442] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 2829.646652] ? pipe_poll+0x21b/0x800 [ 2829.647490] ? p9_fd_close+0x4a0/0x4a0 [ 2829.648361] ? wait_for_partner+0x3c0/0x3c0 [ 2829.649333] ? p9_fd_poll+0x1e0/0x2c0 [ 2829.650195] ? p9_fd_create+0x357/0x4a0 [ 2829.651080] ? p9_conn_create+0x510/0x510 [ 2829.652002] ? p9_client_create+0x798/0x1230 [ 2829.652986] ? kfree+0xd7/0x340 [ 2829.653730] ? do_raw_spin_unlock+0x4f/0x220 [ 2829.654733] p9_client_create+0xa76/0x1230 [ 2829.655704] ? p9_client_flush+0x430/0x430 [ 2829.656652] ? trace_hardirqs_on+0x5b/0x180 [ 2829.657636] ? lockdep_init_map_type+0x2c7/0x780 [ 2829.658696] ? __raw_spin_lock_init+0x36/0x110 [ 2829.659731] v9fs_session_init+0x1dd/0x1680 [ 2829.660692] ? lock_release+0x680/0x680 [ 2829.661595] ? kmem_cache_alloc_trace+0x151/0x320 [ 2829.662661] ? v9fs_show_options+0x690/0x690 [ 2829.663655] ? trace_hardirqs_on+0x5b/0x180 [ 2829.664611] ? kasan_unpoison_shadow+0x33/0x50 [ 2829.665643] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2829.666774] v9fs_mount+0x79/0x8f0 [ 2829.667571] ? v9fs_write_inode+0x60/0x60 [ 2829.668499] legacy_get_tree+0x105/0x220 [ 2829.669418] vfs_get_tree+0x8e/0x300 [ 2829.670253] path_mount+0x1490/0x21e0 [ 2829.671116] ? strncpy_from_user+0x9e/0x470 [ 2829.672082] ? finish_automount+0xa90/0xa90 [ 2829.673056] ? getname_flags.part.0+0x1dd/0x4f0 [ 2829.674106] ? _copy_from_user+0xfb/0x1b0 [ 2829.675049] __x64_sys_mount+0x282/0x300 [ 2829.675949] ? copy_mnt_ns+0xa00/0xa00 [ 2829.676824] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.678011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2829.679168] do_syscall_64+0x33/0x40 [ 2829.680012] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2829.681157] RIP: 0033:0x7feccca28b19 [ 2829.682009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.686144] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2829.687866] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2829.689486] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2829.691112] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2829.692725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.694352] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:54:49 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 46) 00:54:49 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x6800, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (fail_nth: 1) 00:54:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0xf, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:54:49 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1515b, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:49 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 48) 00:54:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000980)={0x1, 0x0, {0x7fff, @struct={0xc8a, 0x6}, 0x0, 0x401, 0x892, 0xff, 0x0, 0x6, 0x456, @struct={0xa56, 0x100}, 0x7, 0x8, [0x6, 0x800, 0xffff, 0x3, 0xb800000, 0x80000000]}, {0x2, @usage=0xd222, 0x0, 0x6, 0xfffffffffffffbff, 0xaf, 0x2, 0x8, 0x470, @usage=0x400, 0x7ff, 0x0, [0x8, 0x6, 0xd89, 0x5, 0x3, 0x8]}, {0x5, @struct={0x80000001, 0x6}, 0x0, 0x6, 0xffffffff, 0x10001, 0x2, 0x0, 0x442, @struct={0x1f, 0x1f}, 0x1ff, 0x1000, [0xfffffffffffffffb, 0x88, 0x1, 0x5, 0x0, 0x8]}, {0x101, 0x3ff}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) [ 2844.947201] FAULT_INJECTION: forcing a failure. [ 2844.947201] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.949687] CPU: 0 PID: 12149 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2844.951208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2844.952997] Call Trace: [ 2844.953571] dump_stack+0x107/0x167 [ 2844.954379] should_fail.cold+0x5/0xa [ 2844.955207] should_failslab+0x5/0x20 [ 2844.956034] __kmalloc_track_caller+0x79/0x370 [ 2844.957014] ? kasprintf+0xbb/0xf0 [ 2844.957805] ? __delete_object+0xb3/0x100 [ 2844.958718] kvasprintf+0xb5/0x150 [ 2844.959484] ? bust_spinlocks+0xe0/0xe0 [ 2844.960345] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2844.961492] kasprintf+0xbb/0xf0 [ 2844.962252] ? kvasprintf_const+0x1a0/0x1a0 [ 2844.963184] ? kmem_cache_free+0x249/0x2d0 [ 2844.964110] ? p9_client_create+0xbfa/0x1230 [ 2844.965060] p9_client_create+0xc1b/0x1230 [ 2844.965363] FAULT_INJECTION: forcing a failure. [ 2844.965363] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.966004] ? p9_client_flush+0x430/0x430 [ 2844.966026] ? trace_hardirqs_on+0x5b/0x180 [ 2844.966047] ? lockdep_init_map_type+0x2c7/0x780 [ 2844.966068] ? __raw_spin_lock_init+0x36/0x110 [ 2844.966092] v9fs_session_init+0x1dd/0x1680 [ 2844.966111] ? lock_release+0x680/0x680 [ 2844.966139] ? kmem_cache_alloc_trace+0x151/0x320 [ 2844.966162] ? v9fs_show_options+0x690/0x690 [ 2844.975078] ? trace_hardirqs_on+0x5b/0x180 [ 2844.976005] ? kasan_unpoison_shadow+0x33/0x50 [ 2844.976987] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2844.978109] v9fs_mount+0x79/0x8f0 [ 2844.978880] ? v9fs_write_inode+0x60/0x60 [ 2844.979774] legacy_get_tree+0x105/0x220 [ 2844.980654] vfs_get_tree+0x8e/0x300 [ 2844.981455] path_mount+0x1490/0x21e0 [ 2844.982311] ? strncpy_from_user+0x9e/0x470 [ 2844.983241] ? finish_automount+0xa90/0xa90 [ 2844.984172] ? getname_flags.part.0+0x1dd/0x4f0 [ 2844.985176] ? _copy_from_user+0xfb/0x1b0 [ 2844.986107] __x64_sys_mount+0x282/0x300 [ 2844.986983] ? copy_mnt_ns+0xa00/0xa00 [ 2844.987828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2844.988965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2844.990108] do_syscall_64+0x33/0x40 [ 2844.990913] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2844.992020] RIP: 0033:0x7f49777bbb19 [ 2844.992826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2844.996830] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2844.998490] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2845.000027] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2845.001566] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2845.003125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2845.004656] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2845.006237] CPU: 1 PID: 12148 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2845.007070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2845.008018] Call Trace: [ 2845.008342] dump_stack+0x107/0x167 [ 2845.008775] should_fail.cold+0x5/0xa [ 2845.009249] ? p9pdu_readf+0xadb/0x1d40 [ 2845.009724] should_failslab+0x5/0x20 [ 2845.010192] __kmalloc+0x72/0x390 [ 2845.010615] p9pdu_readf+0xadb/0x1d40 [ 2845.011080] ? pipe_poll+0x21b/0x800 [ 2845.011517] ? p9pdu_writef+0x100/0x100 [ 2845.011996] ? p9_fd_poll+0x1e0/0x2c0 [ 2845.012447] ? p9_fd_create+0x357/0x4a0 [ 2845.012932] ? p9_conn_create+0x510/0x510 [ 2845.013431] ? p9_client_create+0x798/0x1230 [ 2845.013978] ? kfree+0xd7/0x340 [ 2845.014376] ? do_raw_spin_unlock+0x4f/0x220 [ 2845.014912] p9_client_create+0xaee/0x1230 [ 2845.015430] ? p9_client_flush+0x430/0x430 [ 2845.015937] ? trace_hardirqs_on+0x5b/0x180 [ 2845.016450] ? lockdep_init_map_type+0x2c7/0x780 [ 2845.017020] ? __raw_spin_lock_init+0x36/0x110 [ 2845.017563] v9fs_session_init+0x1dd/0x1680 [ 2845.018173] ? lock_release+0x680/0x680 [ 2845.018829] ? kmem_cache_alloc_trace+0x151/0x320 [ 2845.019419] ? v9fs_show_options+0x690/0x690 [ 2845.020190] ? trace_hardirqs_on+0x5b/0x180 00:54:50 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x6c00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2845.020895] ? kasan_unpoison_shadow+0x33/0x50 [ 2845.021648] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2845.022271] v9fs_mount+0x79/0x8f0 [ 2845.022698] ? v9fs_write_inode+0x60/0x60 [ 2845.023189] legacy_get_tree+0x105/0x220 [ 2845.023870] vfs_get_tree+0x8e/0x300 [ 2845.024319] path_mount+0x1490/0x21e0 [ 2845.024875] ? strncpy_from_user+0x9e/0x470 [ 2845.025578] ? finish_automount+0xa90/0xa90 [ 2845.026257] ? getname_flags.part.0+0x1dd/0x4f0 [ 2845.026818] ? _copy_from_user+0xfb/0x1b0 [ 2845.027318] __x64_sys_mount+0x282/0x300 [ 2845.027813] ? copy_mnt_ns+0xa00/0xa00 [ 2845.028549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2845.029474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2845.030365] do_syscall_64+0x33/0x40 [ 2845.030968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2845.031673] RIP: 0033:0x7feccca28b19 [ 2845.032126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2845.034569] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2845.035512] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2845.036700] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2845.037645] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 00:54:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0xc0, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2845.038629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2845.039698] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2845.061932] 9pnet: Insufficient options for proto=fd 00:54:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_enter(0xffffffffffffffff, 0x1fb3, 0x1d00, 0x2, &(0x7f00000001c0)={[0x9]}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002848, &(0x7f0000000980)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@version_9p2000}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:54:50 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 49) 00:54:50 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1515c, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:50 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:54:50 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 47) [ 2845.236978] FAULT_INJECTION: forcing a failure. [ 2845.236978] name failslab, interval 1, probability 0, space 0, times 0 [ 2845.238347] CPU: 1 PID: 12171 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2845.239349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2845.240427] Call Trace: [ 2845.240836] dump_stack+0x107/0x167 [ 2845.241343] should_fail.cold+0x5/0xa [ 2845.241796] ? create_object.isra.0+0x3a/0xa30 [ 2845.242330] should_failslab+0x5/0x20 [ 2845.242771] kmem_cache_alloc+0x5b/0x310 [ 2845.243247] ? vsnprintf+0x4ba/0x1600 [ 2845.243693] create_object.isra.0+0x3a/0xa30 [ 2845.244201] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2845.244784] __kmalloc_track_caller+0x177/0x370 [ 2845.245328] ? kasprintf+0xbb/0xf0 [ 2845.245738] kvasprintf+0xb5/0x150 [ 2845.246160] ? bust_spinlocks+0xe0/0xe0 [ 2845.246625] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2845.247233] kasprintf+0xbb/0xf0 [ 2845.247618] ? kvasprintf_const+0x1a0/0x1a0 [ 2845.248121] ? kmem_cache_free+0x249/0x2d0 [ 2845.248611] ? p9_client_create+0xbfa/0x1230 [ 2845.249127] p9_client_create+0xc1b/0x1230 [ 2845.249615] ? p9_client_flush+0x430/0x430 [ 2845.250116] ? trace_hardirqs_on+0x5b/0x180 [ 2845.250613] ? lockdep_init_map_type+0x2c7/0x780 [ 2845.251165] ? __raw_spin_lock_init+0x36/0x110 [ 2845.251693] v9fs_session_init+0x1dd/0x1680 [ 2845.252195] ? lock_release+0x680/0x680 [ 2845.252656] ? kmem_cache_alloc_trace+0x151/0x320 [ 2845.253225] ? v9fs_show_options+0x690/0x690 [ 2845.253743] ? trace_hardirqs_on+0x5b/0x180 [ 2845.254262] ? kasan_unpoison_shadow+0x33/0x50 [ 2845.254787] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2845.255384] v9fs_mount+0x79/0x8f0 [ 2845.255791] ? v9fs_write_inode+0x60/0x60 [ 2845.256274] legacy_get_tree+0x105/0x220 [ 2845.256796] vfs_get_tree+0x8e/0x300 [ 2845.257361] path_mount+0x1490/0x21e0 [ 2845.257964] ? strncpy_from_user+0x9e/0x470 [ 2845.258617] ? finish_automount+0xa90/0xa90 [ 2845.259200] ? getname_flags.part.0+0x1dd/0x4f0 [ 2845.259735] ? _copy_from_user+0xfb/0x1b0 [ 2845.260333] __x64_sys_mount+0x282/0x300 [ 2845.260818] ? copy_mnt_ns+0xa00/0xa00 [ 2845.261401] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2845.262195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2845.262785] do_syscall_64+0x33/0x40 [ 2845.263347] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2845.264064] RIP: 0033:0x7f49777bbb19 [ 2845.264609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2845.267257] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2845.268200] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2845.269028] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2845.269857] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2845.270677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2845.271498] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:54:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0xec0, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2845.301840] 9pnet: Insufficient options for proto=fd [ 2845.398369] FAULT_INJECTION: forcing a failure. [ 2845.398369] name failslab, interval 1, probability 0, space 0, times 0 [ 2845.400065] CPU: 1 PID: 12180 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2845.401037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2845.402283] Call Trace: [ 2845.402612] dump_stack+0x107/0x167 [ 2845.403066] should_fail.cold+0x5/0xa [ 2845.403517] ? create_object.isra.0+0x3a/0xa30 [ 2845.404054] should_failslab+0x5/0x20 [ 2845.404492] kmem_cache_alloc+0x5b/0x310 [ 2845.404971] create_object.isra.0+0x3a/0xa30 [ 2845.405471] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2845.406076] __kmalloc+0x16e/0x390 [ 2845.406485] p9pdu_readf+0xadb/0x1d40 [ 2845.406931] ? pipe_poll+0x21b/0x800 [ 2845.407362] ? p9pdu_writef+0x100/0x100 [ 2845.407823] ? p9_fd_poll+0x1e0/0x2c0 [ 2845.408270] ? p9_fd_create+0x357/0x4a0 [ 2845.408724] ? p9_conn_create+0x510/0x510 [ 2845.409207] ? p9_client_create+0x798/0x1230 [ 2845.409710] ? kfree+0xd7/0x340 [ 2845.410106] ? do_raw_spin_unlock+0x4f/0x220 [ 2845.410612] p9_client_create+0xaee/0x1230 [ 2845.411113] ? p9_client_flush+0x430/0x430 [ 2845.411595] ? trace_hardirqs_on+0x5b/0x180 [ 2845.412097] ? lockdep_init_map_type+0x2c7/0x780 [ 2845.412643] ? __raw_spin_lock_init+0x36/0x110 [ 2845.413188] v9fs_session_init+0x1dd/0x1680 [ 2845.413688] ? lock_release+0x680/0x680 [ 2845.414196] ? kmem_cache_alloc_trace+0x151/0x320 [ 2845.414748] ? v9fs_show_options+0x690/0x690 [ 2845.415338] ? trace_hardirqs_on+0x5b/0x180 [ 2845.415928] ? kasan_unpoison_shadow+0x33/0x50 [ 2845.416455] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2845.417045] v9fs_mount+0x79/0x8f0 [ 2845.417453] ? v9fs_write_inode+0x60/0x60 [ 2845.417953] legacy_get_tree+0x105/0x220 [ 2845.418421] vfs_get_tree+0x8e/0x300 [ 2845.418849] path_mount+0x1490/0x21e0 [ 2845.419295] ? strncpy_from_user+0x9e/0x470 [ 2845.419789] ? finish_automount+0xa90/0xa90 [ 2845.420298] ? getname_flags.part.0+0x1dd/0x4f0 [ 2845.420838] ? _copy_from_user+0xfb/0x1b0 [ 2845.421326] __x64_sys_mount+0x282/0x300 [ 2845.421800] ? copy_mnt_ns+0xa00/0xa00 [ 2845.422263] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2845.422870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2845.423471] do_syscall_64+0x33/0x40 [ 2845.423896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2845.424494] RIP: 0033:0x7feccca28b19 [ 2845.424928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2845.427073] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2845.427952] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2845.428772] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2845.429594] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2845.430439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2845.431261] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:55:05 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 48) 00:55:05 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x7400, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:05 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 50) 00:55:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000001c40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@access_any}, {@version_u}, {@cachetag={'cachetag', 0x3d, '2\x04 \x03\x14\xdf{:\xd8\xe3W\xcf'}}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@hash}]}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c00)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001bc0)={&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x1, @mcast1, 0x5cee, 0x4}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000980)="d3a85c5f14efc7f7fa2969ef9b6d65dd40115011657351478db29707d7b2adca47497737f36fd5c073f7f28ae33cc0aa320727bf7300a1d8d053b3e04b16c7fd88d83572bee15a23d91f7bb2a5e61af679caad5b8c41905c029d6d25fd96386af8006d886fda4e44b1a9ff5363bd6c11aacd65e7773b9e592772f4ffc4211d0967f7e35eb411eb00a2075c0b1b09a5e5017ca836909c1ef0a56f416c2f83be606d7b0a80e594aa683b631d7260a60d9981f8324697134db843b0f1722f35828826d6f7493dc38b63c27ff3591b87bca9036bcf3b6993a9eeee64d496cf43136c68f6ca4835ea35c06f2e1e48a69e6f0c45afdcd49bcad69657e3b8963a44c0b42fd623d74e8c81e8691c1581a05304cae7e03cf58e0d904653ac32efad2c55589e8806da3fbea8284d558dd150d239fc9390571afb134de3b065f6c82b4e64a46deb003016def76e1e4cc20be3be0ebca41bc6d8d847f8a0536dc5dba3e5b976c17791966e81e5c3512f095bca6fb87bb9833abffe72c686561c03ea7e1e754802896aacd0e374412962cfe02d63d261f5f1dbaffc6ff4e450538e42df52cb2b95fb8b10a0f6c06c3efab2f993805920a39df128d75ddedff9b02106ebeed9556f6f6e0a7c4d0cccbf216287e2656b68ef3c080ee676260d5a816f3022632d91633e06eedbd30dc11fcbd4762a6635caf1b763389af8420c7b2476e5dc2e5cce06025f2e9e2a7382bcc004764450e3344d515ac4559861c0a1e6e4209af614b7e68dc269f5ed690a2362c6ca6c750d7191303c453c4c4d3efcaa39e40cb994603293952c999b5356e2c4e78e7ba5fc3a0071e5cfc929d45a17be311206aea8e164007bdbc8a03ef2cabd5c604909c2f9871288f709c0c87275e836e10d783affc430ba2e2fd4333a7e49a6e7263fc8a8502948dead72bc4594dd421af6f5605a3a2b639a905792ce04cb063429fa4944f5425618513053c309ac20af8fcceb52201125610225a19088f90484c357ff8422d556e5451aa7343eb32027a8ff6ed360d39bbd20d177c815b78c8a39c8482f0e0c75978bf9c4b330613703f9e9c6a345fb3748cd44607d709996d68ceac8ddc63849f742ece3b632ad3333abc7d9090a459a9788e0fc24409540ffa7579f1822b5c92cfc9edc576ff8f8960e80e276685b797230720cbc6c1af3e0827cc6da100e6730f76f31aa399b5a22d23c5a2b112449335b4a113e762c40d1660b788fc1a1f609e858e7929ffcac0a8d9e6260818eecc8b5b2e816c803ba86b44775ce8f1c4bb5417db7e49f7411d2358be33693505a5fbca4e1db9256e826d905b1047600043ce188f7e63cc9a7aa19e2700abc86d8c59936f3a4f21307eb1f4747a5d55bd124d4c9abf8ad8ce383a338a0020d8d8127c9ba5bd0960e944e8a7a6064c53c82972c15b6c71ca3f96cdc05f3de2b9a1c158d4c6503ade35acb84530a6a4037230ea5ac235a2e929f82c5663f384d3442c5454eb8a3d895351599172fc8461253810eaeee56a5afc56363d5e9035629a4a4ff0a5ffb23436e23fc444ad32dcb93136a727e88e1e300cf0fdf4accdc703d065b6af2ed6a3d119f73b670a77d6be89eccbd0ab3255b4cdac77bc25e1d840bebf751630bf466c719809a10f391bed4291502f0e4c002e8c64048a8a7612548e45194d39aa887038d7831c6e4a8791f238891fff89ac369efd582e61605f2dbccdd207bc1a4992af0b3dbdbf81c457ee28561a9698d28f415645a470bd58f8a00f807032a4154740ac26ce0f02c566b2e9a85ffefadd9298b44ebd59b8f29d613eebfe4ba9322d823662549e82081b26d46e10f6fafcd93ea9770a52b7c65982634473dac54321762d9c4ea620da41987e0ec82f757f9bcdd1407eb909ce2d074538577030d3239ff2bac04f70fccc02f9ec4bd905d5a47680dc3e790cf65146158cbf0ef2178ba8cb9d7bd1104266880f23f21259b9e71bd664cc07aec1802717fc9e14a48655bf4326793e514e6b10789d4a9d203edfcd59a6211784e0b30049b22bf5dffb4e26a430723b8b6c8563f54823e0d3503a9d6c9d35dd708f1ad7b6d9ad07625da94cffb4d11a8b8fbfcc425c5b21bbe50a3b78e153c5d86090d33946d78716d47afa85cd928d6272045cb7db0eba39e5327aa96a5a3744086b528d37b61914696000390f5ef4c9b9366b89ce6a620843bcdf105d730066ff9464ba43a850182b7b8b231de157b874d8a6cefdf3fea3938b6ba9b79c6f8ef8fcce3423cbd1905eb484658756bb0cc1f79fc89094d93a7079e16051e8a30922be24e7b04c76b73b726ccbb172d27c8f374ba0d7c261e81c0fa7ff2f9100b4547ecadceabe2f9bad1b30ad59615068d409910206d1f87f90ec8bec91b6bea0fb88bb012e8cfcd167210f919e5363f44e21f9b771aaaa141ff83f24a8ed30029f4ceb1aa4670a94b47a21c8c3a7bda42f1907938784ef5d272b55c4abeac2f2dc3e7f31588d0a781866a23529f09ce1b5a32233585523973550ef0f1048189fb70059660514a942ba1e09fdc5c8a4bee5faa3ebad374fb55af86d585770cf53e776043d918a84abaaf2b80cde0cf4c4beddbccad4da3132977cc1c0c79eaeb0a114e8374f309813eae4278277c6af24e5abd6668412c6bf22e768c322e10fbdaa33268bc6ec4e1b67f2a053c4f07abb14498292f8a73763806a1bd3d6043a98d601aa8014a297a519922d444dd5b1daf5fcfcc9a51a239f376aec712c026b1e85eb5ec9697712db9330ef36bce137ab6d0e82a75d0782d285eda1dbc017606a4584477666709cb19fb8c3dca089fd8269174c1f1cb6b0c47bc0409694cb568f245620f421ac2975b2e67e7c4dea4c016decb70c7bf5bd3947e5b0586641758d94c5ecd45f5e351ed56c052f714bd385251b059199f5e8097d477aa733934923c9bdb17d88a4a99d5e97f82229720c4f13a3b85088b33679b5e67ba960a3e56565920703925bf115bd91f29f6354f120c50ddcc335f96a8d46558d91ecaf0aa79048391e1c9d37201f2320682217aac8f405bcf4f628e481c83712fdc6d5576a4f8903d63b58cf62df1b9d39c52dccaf717cd0988413562b20753bd4e0bd64aad7b421108576aa8243bbd073d7e71f3d0625b3ef6e42a1835574a1312f5fea5a5981f632e3c3bece44e2b9535ea283ef9181351f38d868b8b147b7f36da13e420123f436cd3c525ddfbc7d9a07e5342a98c56827d62a1bca623ed30022fc8b478a28fdd59978c7246a57775ebbca35c3bf8e7d6e7f096245171480ae0cb14e72c21035b9f8a48a9c73af104e4ee147783cc15148f27801c0c8b46c941cec64d88d82e510dd933b5ed0681ba599fd859b0887c56f68c5f33666ac9112e77be4b8211e73d1d7ef3c14ab5053435a815de0a23423d6455c5282288c8b77e8f17b923ef8434e7f7ac49f847043f10acbaa06480c43d8a07c9b66dfa0ec64c873ee6db459a41fd91c37310f57f7b39b8fe24a56be1ab5334c25dd79bc8ef354d7a4b9603cb17acbac5e1985f5d876219a1b0ea3ec24feea2b274f3860c68f67894b69f14c0159c1d07d724aee9bf5c91f8c244efdfd9950f0db89c8cc2da99c72f3ca15e78ed19ee905befb41758ff15a97e8460cc04aed2c4b4d020c3347661c247b57f6f4e3df1bbb020deae121280a33b79a1e2f5260b969066cb445a50995707bce6dc582e52bedb4a73720aa7e58fdc2b5349f61169acc734480b071e71f8b1a50f55c24bd9dd4c8a26bcc025ecaf109d336a00dc7bfe8b96c25f786e6a3a527ae53b1bc8aeef9b12a10aea4e9e5309f35f748cc01b5e47a75f029b494e0210f985f0fe634a18248f8d2304fb9c994a37b811cea1933a97d969cf9e452a63772928fcc37426a7c45009a24a11b0f9098bf2d31a7a3b03e264098f39f4b89045a97a7b25047a98e065ad5aa8bbd2428bcd6c1e4856d180badf786c38ca32dca53e8601e83100b732f45a9300580aba009ffc9d6ed14406c5b33ac82a4efebb4f17a4c4fa40eabfa902fbb6f81e9f9fbc60c8d163dbc37d47c49c5de5ed2665c44eb8e54fc8ec31748b2da5e4d8a4dc0093136959bad00e64ff37a474396f9a077ebb30a38e9ddbf36cacbef6c4c1cd33a98de53db2e2fe2fbdd2319d8b3ad3dc31a18e0a8a2524c6c588c6446782e1be1f8ff9cb4248cbfc26586a4bb914ecdce122b08266f3d14b4d29195b3b21a8b39876dce78ac27e7e8e599e517bbae71b5b1ef52f4c9555854cdf9d05465b096d9b6b6661193a4fc94d18c020d9296a1df80f27ba112685fb2a6948a0e6ae58f4c66eb8062cce3005da7373a72ff9b91ed168ae1bda1a4590b05ff3a5f0c95781102031541cf35e8ecdbc4ac94dd25551046a134a2897259e2410c12b43efafa58dd9f3b29cf35eb2300f63ad71b2553fd021dd6d80e39ba1f5ae5cba76e5e8a9b32d917b5fd6a4cd004e073fab08e07d5e0c0182474b2bfe191790a48ae3ee1e684abfdf755252ab1430e03557860982b219db232f6d921e0d6ce5431d2f764c7e1496b51521b68a9209e317ddbe8a9ea5fbe7281d012416709863123148f1172f2b18c1ec13bb0594593137cd33d34ec3ee3828c0680f08a54b19c43d2bca854ec61fd2aa4b20eb47ac570b6f81ad8352d6872e1009d5626a57030ebf2d325d7c6d9ce7d6706e2c5a2c0492efe9bf527ab76d1c5145f2c092fe776f43c944f1d6e2364fae15b11efa7ffd39d0544081aa0de4a67ac4b8ae9770065b7a47dce143d7848d852c798aa8b44ab6e3d434582008fff82d35d4c45f8bb71f80b33e22abee6a343f019d7a1a61e627ed538a2730b515c27b16089927944e604a66088079fb7bd2c74e10df38e241dea2463206c32d4500c934fc55a7ca28fed4f7436a4b837db6e6acb557ba6b51d36982f3c40464645fa1479541b837eebcbcbabe1db10e55a2f82c66234d140d9d82cb5070d360cea65fc70628b25350f5f99a667ddba82cea0abe97ccdbd6e8a5ff1108fc26ddd1aaf8cf11e6740ef0bf8e503fcc134ca1ca76db06fbbbd5a3bd23ab0914802cf002dba7bcbc5574883fb4979c57c8569ef7dfcfc48119314ff3292be49f10cc1183e5039afefd97844394d9c1dbed116efde0ca8e05c75790e085e464d4f06a9196b40b27a3f3f15430653cc8fac7d80f2bc65d3baf38d332e7183ad10f8b5a0a454e84914ed90e07d7f044d49b47610932b6d9a5d655725e9c33a0b70cea8d45a469eced34effa0d85cd51ecbfdfb6dfe2f428e72d640b7899b12936138b29f0fe9a824eab051725c8b8522ca7f296dfc33546149690c07699c49d371c2ab2909ded242b803bddb8988171eab9bb933f44f9b1731a589288a87c021d1897b6cb5b589cdda539c01a06d5755d8711bd92e7ccae5aa3f05726cd7d18eee4c8fb74bfcb9af176941ee8d50514c3383f98eedc1596ad511687ab557388e55f46007e5e60eed769cc32f58d1ff4b13366309ebcce05efe2aa55a3f4c4425d14b2743f7e07b52cf95dcb66500eb742e1428c516807233781cff884431a248f43b234f56071b91dceadb04276b05c2ba8f1c2aab85b00a38cced647d82b30c57fa82b0884f76f883d465ccdd9e30f81fae46f1bcbd0e27796e939b0f15902aa0cc8dfae0c18c8ec47b81c2af94def4ce202f65e30ff38fc690deb3e121b437a5c5c07595ada3edf3c2bde21c1ffcd1db118a58558ebfe0364627cbb5bdeb377ade600930979f6071ae580915c9fbf6c689b146db2080df398108a938488c83a62", 0x1000}, {&(0x7f00000001c0)="332e62ef12dbde13e2873c36a0f31e9d6cec32be3f8aa1bc6ba15684", 0x1c}, {&(0x7f0000001980)="3f4ea41bbe5fa4667ca5efd905c1", 0xe}, {&(0x7f00000019c0)="881cf7bbb23fb4d8f49e27f1d81038da978ce0ec63f19a153244040f7060543eb65a0db1e7cf018889fb17cbc20e328e2d10c3df8df6573838dbb67c5899502cd42f353a37fffda36ca295fc3c7403458fbcf5fea123531adcb1ed0cb3901729e84e85744f94d73c53bd48e471647505cfd6f7866b873d6a162e22fd72e5d70b756a5377251aeb0443331ffed73c0c3bacb49186d67714c32e57efdfc2be653a10347f1434ae8a7a5461b7da073e5d49ef44d833f25e6f0189adca735764c6e3873161236b265e1a4286d6d2f8918c13073456b9f8af36524cd7b5702cf9ca39517a43f880d35278d77fbf", 0xeb}, {&(0x7f0000001ac0)="83bb8b9117b2f91d43393ddc8b0f3f29d8533800173617f22d0ef8a80df19c77d4ce4325f99df4735abaad6afcae0295a31fa645e683dcba1767934a32e9d86bd4140a514b834506b7d68e9ebe500b5bfd0fa4", 0x53}], 0x5, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x2b8}, 0x0, 0x885, 0x1}, 0xfffffffc) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:55:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1515d, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x33fe0, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:55:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x2, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2860.152028] FAULT_INJECTION: forcing a failure. [ 2860.152028] name failslab, interval 1, probability 0, space 0, times 0 [ 2860.154879] CPU: 0 PID: 12197 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2860.156503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2860.158481] Call Trace: [ 2860.159105] dump_stack+0x107/0x167 [ 2860.159965] should_fail.cold+0x5/0xa [ 2860.160857] should_failslab+0x5/0x20 [ 2860.161753] __kmalloc_track_caller+0x79/0x370 [ 2860.162831] ? kstrdup_const+0x53/0x80 [ 2860.163766] ? kasprintf+0xbb/0xf0 [ 2860.164597] kstrdup+0x36/0x70 [ 2860.165348] kstrdup_const+0x53/0x80 [ 2860.166237] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2860.167400] p9_client_create+0xc6a/0x1230 [ 2860.168396] ? p9_client_flush+0x430/0x430 [ 2860.169386] ? trace_hardirqs_on+0x5b/0x180 [ 2860.170426] ? lockdep_init_map_type+0x2c7/0x780 [ 2860.171569] ? __raw_spin_lock_init+0x36/0x110 [ 2860.172801] v9fs_session_init+0x1dd/0x1680 [ 2860.173831] ? lock_release+0x680/0x680 [ 2860.174795] ? kmem_cache_alloc_trace+0x151/0x320 [ 2860.175940] ? v9fs_show_options+0x690/0x690 [ 2860.177084] ? trace_hardirqs_on+0x5b/0x180 [ 2860.178326] ? kasan_unpoison_shadow+0x33/0x50 [ 2860.179630] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2860.181092] v9fs_mount+0x79/0x8f0 [ 2860.182127] ? v9fs_write_inode+0x60/0x60 [ 2860.183326] legacy_get_tree+0x105/0x220 [ 2860.184502] vfs_get_tree+0x8e/0x300 [ 2860.185556] path_mount+0x1490/0x21e0 [ 2860.186681] ? strncpy_from_user+0x9e/0x470 [ 2860.187901] ? finish_automount+0xa90/0xa90 [ 2860.189133] ? getname_flags.part.0+0x1dd/0x4f0 [ 2860.190481] ? _copy_from_user+0xfb/0x1b0 [ 2860.191694] __x64_sys_mount+0x282/0x300 [ 2860.192848] ? copy_mnt_ns+0xa00/0xa00 [ 2860.193976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2860.195489] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2860.196976] do_syscall_64+0x33/0x40 [ 2860.198050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2860.199505] RIP: 0033:0x7f49777bbb19 [ 2860.200576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2860.205770] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2860.206806] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2860.207581] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2860.208355] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2860.209134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2860.209909] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2860.210902] kmem_cache_create(9p-fcall-cache-1486) failed with error -12 [ 2860.211660] CPU: 0 PID: 12197 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2860.212409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2860.213448] Call Trace: [ 2860.213738] dump_stack+0x107/0x167 [ 2860.214149] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2860.214729] p9_client_create+0xc6a/0x1230 [ 2860.215186] ? p9_client_flush+0x430/0x430 [ 2860.215640] ? trace_hardirqs_on+0x5b/0x180 [ 2860.216104] ? lockdep_init_map_type+0x2c7/0x780 [ 2860.216614] ? __raw_spin_lock_init+0x36/0x110 [ 2860.217107] v9fs_session_init+0x1dd/0x1680 [ 2860.217571] ? lock_release+0x680/0x680 [ 2860.218010] ? kmem_cache_alloc_trace+0x151/0x320 [ 2860.218573] ? v9fs_show_options+0x690/0x690 [ 2860.219275] ? trace_hardirqs_on+0x5b/0x180 [ 2860.219745] ? kasan_unpoison_shadow+0x33/0x50 [ 2860.220234] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2860.220783] v9fs_mount+0x79/0x8f0 [ 2860.221165] ? v9fs_write_inode+0x60/0x60 [ 2860.221612] legacy_get_tree+0x105/0x220 [ 2860.222060] vfs_get_tree+0x8e/0x300 [ 2860.222459] path_mount+0x1490/0x21e0 [ 2860.222879] ? strncpy_from_user+0x9e/0x470 [ 2860.223342] ? finish_automount+0xa90/0xa90 [ 2860.223808] ? getname_flags.part.0+0x1dd/0x4f0 [ 2860.224308] ? _copy_from_user+0xfb/0x1b0 [ 2860.224763] __x64_sys_mount+0x282/0x300 [ 2860.225197] ? copy_mnt_ns+0xa00/0xa00 [ 2860.225619] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2860.226191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2860.226791] do_syscall_64+0x33/0x40 [ 2860.227198] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2860.227747] RIP: 0033:0x7f49777bbb19 [ 2860.228147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2860.230132] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2860.230957] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2860.231728] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2860.232494] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2860.233260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2860.234033] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:55:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1515e, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x200020d4, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:55:05 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x7a00, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2860.256645] FAULT_INJECTION: forcing a failure. [ 2860.256645] name failslab, interval 1, probability 0, space 0, times 0 [ 2860.258141] CPU: 0 PID: 12196 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2860.258985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2860.259978] Call Trace: [ 2860.260279] dump_stack+0x107/0x167 [ 2860.260699] should_fail.cold+0x5/0xa [ 2860.261135] should_failslab+0x5/0x20 [ 2860.261570] __kmalloc_track_caller+0x79/0x370 [ 2860.262098] ? kasprintf+0xbb/0xf0 [ 2860.262504] ? __delete_object+0xb3/0x100 [ 2860.262962] kvasprintf+0xb5/0x150 [ 2860.263372] ? bust_spinlocks+0xe0/0xe0 [ 2860.263831] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2860.264408] kasprintf+0xbb/0xf0 [ 2860.264773] ? kvasprintf_const+0x1a0/0x1a0 [ 2860.265239] ? kmem_cache_free+0x249/0x2d0 [ 2860.265734] ? p9_client_create+0xbfa/0x1230 [ 2860.266234] p9_client_create+0xc1b/0x1230 [ 2860.266740] ? p9_client_flush+0x430/0x430 [ 2860.267212] ? trace_hardirqs_on+0x5b/0x180 [ 2860.267716] ? lockdep_init_map_type+0x2c7/0x780 [ 2860.268236] ? __raw_spin_lock_init+0x36/0x110 [ 2860.268765] v9fs_session_init+0x1dd/0x1680 [ 2860.269241] ? lock_release+0x680/0x680 [ 2860.269664] 9pnet: Insufficient options for proto=fd [ 2860.269717] ? kmem_cache_alloc_trace+0x151/0x320 [ 2860.271361] ? v9fs_show_options+0x690/0x690 [ 2860.271853] ? trace_hardirqs_on+0x5b/0x180 [ 2860.272351] ? kasan_unpoison_shadow+0x33/0x50 [ 2860.272844] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2860.273430] v9fs_mount+0x79/0x8f0 [ 2860.273820] ? v9fs_write_inode+0x60/0x60 [ 2860.274300] legacy_get_tree+0x105/0x220 [ 2860.274756] vfs_get_tree+0x8e/0x300 [ 2860.275164] path_mount+0x1490/0x21e0 [ 2860.275579] ? strncpy_from_user+0x9e/0x470 [ 2860.276045] ? finish_automount+0xa90/0xa90 [ 2860.276512] ? getname_flags.part.0+0x1dd/0x4f0 [ 2860.277049] ? _copy_from_user+0xfb/0x1b0 [ 2860.277504] __x64_sys_mount+0x282/0x300 [ 2860.277980] ? copy_mnt_ns+0xa00/0xa00 [ 2860.278406] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2860.279020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2860.279588] do_syscall_64+0x33/0x40 [ 2860.280017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2860.280581] RIP: 0033:0x7feccca28b19 [ 2860.281011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2860.283980] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2860.285498] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2860.286951] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2860.288382] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2860.289804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2860.291257] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:55:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) io_uring_enter(r3, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:55:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x3, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2860.542220] 9pnet: Insufficient options for proto=fd 00:55:18 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1515f, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x4, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) mq_timedsend(0xffffffffffffffff, &(0x7f0000000780)="516fef3771f212914291733fd0d6ecce3faea7333650c4eeb199a12c5f13a9aff0f83020f2b4dc36e107d9e9066754bc2715a13cb2b97255c6708bda7f750072891a09fe7ce069a78382032bcc27ca6f35d9e447e6a2c1511e0aeafef2a518", 0x5f, 0x9, &(0x7f00000001c0)={0x77359400}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB='0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 51) 00:55:18 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 49) 00:55:18 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x7ffff000, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:55:18 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0xedc0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x5, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2873.927942] FAULT_INJECTION: forcing a failure. [ 2873.927942] name failslab, interval 1, probability 0, space 0, times 0 [ 2873.929305] CPU: 1 PID: 12239 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2873.930086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2873.931134] Call Trace: [ 2873.931461] dump_stack+0x107/0x167 [ 2873.931900] should_fail.cold+0x5/0xa [ 2873.932461] should_failslab+0x5/0x20 [ 2873.932912] __kmalloc_track_caller+0x79/0x370 [ 2873.933440] ? kstrdup_const+0x53/0x80 [ 2873.933887] ? kasprintf+0xbb/0xf0 [ 2873.934306] kstrdup+0x36/0x70 [ 2873.934674] kstrdup_const+0x53/0x80 [ 2873.935104] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2873.935680] p9_client_create+0xc6a/0x1230 [ 2873.936178] ? p9_client_flush+0x430/0x430 [ 2873.936674] ? trace_hardirqs_on+0x5b/0x180 [ 2873.937172] ? lockdep_init_map_type+0x2c7/0x780 [ 2873.937714] ? __raw_spin_lock_init+0x36/0x110 [ 2873.938246] v9fs_session_init+0x1dd/0x1680 [ 2873.938742] ? lock_release+0x680/0x680 [ 2873.939203] ? kmem_cache_alloc_trace+0x151/0x320 [ 2873.939750] ? v9fs_show_options+0x690/0x690 [ 2873.940262] ? trace_hardirqs_on+0x5b/0x180 [ 2873.940757] ? kasan_unpoison_shadow+0x33/0x50 [ 2873.941275] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2873.941863] v9fs_mount+0x79/0x8f0 [ 2873.942282] ? v9fs_write_inode+0x60/0x60 [ 2873.942754] legacy_get_tree+0x105/0x220 [ 2873.943226] vfs_get_tree+0x8e/0x300 [ 2873.943654] path_mount+0x1490/0x21e0 [ 2873.944093] ? strncpy_from_user+0x9e/0x470 [ 2873.944587] ? finish_automount+0xa90/0xa90 [ 2873.945085] ? getname_flags.part.0+0x1dd/0x4f0 [ 2873.945611] ? _copy_from_user+0xfb/0x1b0 [ 2873.946091] __x64_sys_mount+0x282/0x300 [ 2873.946566] ? copy_mnt_ns+0xa00/0xa00 [ 2873.947011] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2873.947613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2873.948203] do_syscall_64+0x33/0x40 [ 2873.948625] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2873.949206] RIP: 0033:0x7f49777bbb19 [ 2873.949631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2873.951746] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2873.952615] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2873.953429] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2873.954253] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2873.955073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2873.955887] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2873.956750] kmem_cache_create(9p-fcall-cache-1489) failed with error -12 [ 2873.957563] CPU: 1 PID: 12239 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2873.958355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2873.959305] Call Trace: [ 2873.959615] dump_stack+0x107/0x167 [ 2873.960040] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2873.960635] p9_client_create+0xc6a/0x1230 [ 2873.961115] ? p9_client_flush+0x430/0x430 [ 2873.961604] ? trace_hardirqs_on+0x5b/0x180 [ 2873.962094] ? lockdep_init_map_type+0x2c7/0x780 [ 2873.962645] ? __raw_spin_lock_init+0x36/0x110 [ 2873.963299] v9fs_session_init+0x1dd/0x1680 [ 2873.963797] ? lock_release+0x680/0x680 [ 2873.964287] ? kmem_cache_alloc_trace+0x151/0x320 [ 2873.964918] ? v9fs_show_options+0x690/0x690 [ 2873.965576] ? trace_hardirqs_on+0x5b/0x180 [ 2873.966150] ? kasan_unpoison_shadow+0x33/0x50 [ 2873.966678] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2873.967259] v9fs_mount+0x79/0x8f0 [ 2873.967690] ? v9fs_write_inode+0x60/0x60 [ 2873.968250] legacy_get_tree+0x105/0x220 [ 2873.968784] vfs_get_tree+0x8e/0x300 [ 2873.969252] path_mount+0x1490/0x21e0 [ 2873.969829] ? strncpy_from_user+0x9e/0x470 [ 2873.970418] ? finish_automount+0xa90/0xa90 [ 2873.970921] ? getname_flags.part.0+0x1dd/0x4f0 [ 2873.971485] ? _copy_from_user+0xfb/0x1b0 [ 2873.972049] __x64_sys_mount+0x282/0x300 [ 2873.972519] ? copy_mnt_ns+0xa00/0xa00 [ 2873.972969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2873.973572] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2873.974172] do_syscall_64+0x33/0x40 [ 2873.974618] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2873.975304] RIP: 0033:0x7f49777bbb19 [ 2873.975804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2873.978174] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2873.979241] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2873.980088] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2873.981026] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2873.982059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2873.982976] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:55:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0xfffffdef, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2873.992736] FAULT_INJECTION: forcing a failure. [ 2873.992736] name failslab, interval 1, probability 0, space 0, times 0 [ 2873.994282] CPU: 1 PID: 12236 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2873.995202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2873.996196] Call Trace: [ 2873.996564] dump_stack+0x107/0x167 [ 2873.996998] should_fail.cold+0x5/0xa [ 2873.997493] ? create_object.isra.0+0x3a/0xa30 [ 2873.998129] should_failslab+0x5/0x20 [ 2873.998624] kmem_cache_alloc+0x5b/0x310 [ 2873.999116] ? vsnprintf+0x4ba/0x1600 [ 2873.999647] create_object.isra.0+0x3a/0xa30 [ 2874.000210] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 00:55:19 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0xfeff, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2874.000868] __kmalloc_track_caller+0x177/0x370 [ 2874.001543] ? kasprintf+0xbb/0xf0 [ 2874.002014] kvasprintf+0xb5/0x150 [ 2874.002437] ? bust_spinlocks+0xe0/0xe0 [ 2874.002898] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2874.003606] kasprintf+0xbb/0xf0 [ 2874.004016] ? kvasprintf_const+0x1a0/0x1a0 [ 2874.004631] ? kmem_cache_free+0x249/0x2d0 [ 2874.005194] ? p9_client_create+0xbfa/0x1230 [ 2874.005706] p9_client_create+0xc1b/0x1230 [ 2874.006304] ? p9_client_flush+0x430/0x430 [ 2874.006793] ? trace_hardirqs_on+0x5b/0x180 [ 2874.007359] ? lockdep_init_map_type+0x2c7/0x780 [ 2874.007978] ? __raw_spin_lock_init+0x36/0x110 [ 2874.008555] v9fs_session_init+0x1dd/0x1680 [ 2874.009074] ? lock_release+0x680/0x680 [ 2874.009534] ? kmem_cache_alloc_trace+0x151/0x320 [ 2874.010188] ? v9fs_show_options+0x690/0x690 [ 2874.010772] ? trace_hardirqs_on+0x5b/0x180 [ 2874.011355] ? kasan_unpoison_shadow+0x33/0x50 [ 2874.011940] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2874.012610] v9fs_mount+0x79/0x8f0 [ 2874.013023] ? v9fs_write_inode+0x60/0x60 [ 2874.013571] legacy_get_tree+0x105/0x220 [ 2874.014118] vfs_get_tree+0x8e/0x300 [ 2874.014595] path_mount+0x1490/0x21e0 [ 2874.015041] ? strncpy_from_user+0x9e/0x470 [ 2874.015618] ? finish_automount+0xa90/0xa90 [ 2874.016128] ? getname_flags.part.0+0x1dd/0x4f0 [ 2874.016775] ? _copy_from_user+0xfb/0x1b0 [ 2874.017341] __x64_sys_mount+0x282/0x300 [ 2874.017815] ? copy_mnt_ns+0xa00/0xa00 [ 2874.018279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2874.018891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2874.019568] do_syscall_64+0x33/0x40 [ 2874.019999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2874.020722] RIP: 0033:0x7feccca28b19 [ 2874.021239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2874.023403] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2874.024419] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2874.025343] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2874.026225] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2874.027044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2874.027864] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2874.030149] 9pnet: Insufficient options for proto=fd 00:55:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15160, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:19 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:19 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000980)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\xdc\xd8\xa5+u|TM\xfcs\xb79\x96\xc3k\xc0\x1b\b\xa7\x8b\xef\x86\b\x02\x03\x8a\x89\x85i\xf5[\xcc\xbd\x95\xfa\x15\"|\xf7\xba\xda\xf8\xa5cQB\xf3\xf9\xe8\x7fVa9\xaf\xc5\x9f\v,\xe4\x90\x11\x9a\xef\x9d\xcdn\xe0\xa8 p\x11\x13g\x8e\xb4\xa4l>0}\xdao,\xf4\xa2\xf4\x13\xd0\xed \xc5\x9b5/\x90\x9f\xd8h\xc3+\x7f\xfa={\xbe\x85{J :\x97\xe6\x92r2_\xe0\xf7\xabqY\xe6@\t\x85Z(\xcf\xa8b\xc7\x1d\xd7^ZH(\xf0E\x05\x8a\x97U\x8f>,8\xafh\xc4\xb8\xec\xa78\xcb\x81M\x81\n-y\x1f\xac$\x8aw\xc1Y\xc6\xf4K\xea\xd0\r=\x9bwY\x83\x8d\xb7!\x93{\t\x12\x8b\xa4\x03t\xdf\xda\xd9\xf7\x98qQWO\xbf\xc3)2\xff'}}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) [ 2874.200940] 9pnet: Insufficient options for proto=fd 00:55:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x6, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15161, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:32 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0xff03, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0xf, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:55:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 50) 00:55:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0xffffff72) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, r1], 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:55:32 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 52) 00:55:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2887.804844] FAULT_INJECTION: forcing a failure. [ 2887.804844] name failslab, interval 1, probability 0, space 0, times 0 [ 2887.807281] CPU: 0 PID: 12279 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2887.808743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2887.810504] Call Trace: [ 2887.811069] dump_stack+0x107/0x167 [ 2887.811846] should_fail.cold+0x5/0xa [ 2887.812656] ? create_object.isra.0+0x3a/0xa30 [ 2887.813625] should_failslab+0x5/0x20 [ 2887.814443] kmem_cache_alloc+0x5b/0x310 [ 2887.815304] create_object.isra.0+0x3a/0xa30 [ 2887.816228] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2887.817298] kmem_cache_alloc+0x159/0x310 [ 2887.818183] kmem_cache_create_usercopy+0x190/0x2f0 [ 2887.819254] p9_client_create+0xc6a/0x1230 [ 2887.820160] ? p9_client_flush+0x430/0x430 [ 2887.821057] ? trace_hardirqs_on+0x5b/0x180 [ 2887.822087] ? lockdep_init_map_type+0x2c7/0x780 00:55:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15162, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2887.823104] ? __raw_spin_lock_init+0x36/0x110 [ 2887.824217] v9fs_session_init+0x1dd/0x1680 [ 2887.825126] ? lock_release+0x680/0x680 [ 2887.825971] ? kmem_cache_alloc_trace+0x151/0x320 [ 2887.827004] ? v9fs_show_options+0x690/0x690 [ 2887.827947] ? trace_hardirqs_on+0x5b/0x180 [ 2887.828858] ? kasan_unpoison_shadow+0x33/0x50 [ 2887.829823] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2887.830898] v9fs_mount+0x79/0x8f0 [ 2887.831656] ? v9fs_write_inode+0x60/0x60 [ 2887.832524] legacy_get_tree+0x105/0x220 [ 2887.833389] vfs_get_tree+0x8e/0x300 [ 2887.834170] path_mount+0x1490/0x21e0 [ 2887.834990] ? strncpy_from_user+0x9e/0x470 [ 2887.835909] ? finish_automount+0xa90/0xa90 [ 2887.836821] ? getname_flags.part.0+0x1dd/0x4f0 [ 2887.837811] ? _copy_from_user+0xfb/0x1b0 [ 2887.838705] __x64_sys_mount+0x282/0x300 [ 2887.839567] ? copy_mnt_ns+0xa00/0xa00 [ 2887.840395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2887.841503] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2887.842609] do_syscall_64+0x33/0x40 [ 2887.843408] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2887.844498] RIP: 0033:0x7f49777bbb19 [ 2887.845288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2887.849200] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2887.850827] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2887.852341] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 00:55:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x7, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2887.853856] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2887.855473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2887.856979] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2887.871834] FAULT_INJECTION: forcing a failure. [ 2887.871834] name failslab, interval 1, probability 0, space 0, times 0 [ 2887.874407] CPU: 1 PID: 12278 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2887.875869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2887.877630] Call Trace: [ 2887.878189] dump_stack+0x107/0x167 [ 2887.878979] should_fail.cold+0x5/0xa [ 2887.879796] should_failslab+0x5/0x20 [ 2887.880602] __kmalloc_track_caller+0x79/0x370 [ 2887.881564] ? kstrdup_const+0x53/0x80 [ 2887.882403] kstrdup+0x36/0x70 [ 2887.883074] kstrdup_const+0x53/0x80 [ 2887.883856] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2887.884908] p9_client_create+0xc6a/0x1230 [ 2887.885800] ? p9_client_flush+0x430/0x430 [ 2887.886699] ? trace_hardirqs_on+0x5b/0x180 [ 2887.887617] ? lockdep_init_map_type+0x2c7/0x780 [ 2887.888622] ? __raw_spin_lock_init+0x36/0x110 [ 2887.889590] v9fs_session_init+0x1dd/0x1680 [ 2887.890198] 9pnet: Insufficient options for proto=fd [ 2887.890506] ? lock_release+0x680/0x680 [ 2887.892458] ? kmem_cache_alloc_trace+0x151/0x320 [ 2887.893488] ? v9fs_show_options+0x690/0x690 [ 2887.894444] ? trace_hardirqs_on+0x5b/0x180 [ 2887.895369] ? kasan_unpoison_shadow+0x33/0x50 [ 2887.896337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2887.897415] v9fs_mount+0x79/0x8f0 [ 2887.898164] ? v9fs_write_inode+0x60/0x60 [ 2887.899053] legacy_get_tree+0x105/0x220 [ 2887.899913] vfs_get_tree+0x8e/0x300 [ 2887.900705] path_mount+0x1490/0x21e0 [ 2887.901517] ? strncpy_from_user+0x9e/0x470 [ 2887.902447] ? finish_automount+0xa90/0xa90 [ 2887.903365] ? getname_flags.part.0+0x1dd/0x4f0 [ 2887.904351] ? _copy_from_user+0xfb/0x1b0 [ 2887.905240] __x64_sys_mount+0x282/0x300 [ 2887.906098] ? copy_mnt_ns+0xa00/0xa00 [ 2887.906936] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2887.908049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2887.909157] do_syscall_64+0x33/0x40 [ 2887.909946] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2887.911050] RIP: 0033:0x7feccca28b19 [ 2887.911843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2887.915754] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2887.917368] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2887.918898] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2887.920406] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2887.922097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2887.923844] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2887.925778] kmem_cache_create(9p-fcall-cache-1492) failed with error -12 [ 2887.927607] CPU: 1 PID: 12278 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2887.929115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2887.931102] Call Trace: [ 2887.931811] dump_stack+0x107/0x167 [ 2887.932612] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2887.933822] p9_client_create+0xc6a/0x1230 [ 2887.934869] ? p9_client_flush+0x430/0x430 [ 2887.935882] ? trace_hardirqs_on+0x5b/0x180 [ 2887.936955] ? lockdep_init_map_type+0x2c7/0x780 [ 2887.938058] ? __raw_spin_lock_init+0x36/0x110 [ 2887.939257] v9fs_session_init+0x1dd/0x1680 [ 2887.940285] ? lock_release+0x680/0x680 [ 2887.941206] ? kmem_cache_alloc_trace+0x151/0x320 [ 2887.942341] ? v9fs_show_options+0x690/0x690 [ 2887.943471] ? trace_hardirqs_on+0x5b/0x180 [ 2887.944434] ? kasan_unpoison_shadow+0x33/0x50 [ 2887.945634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2887.946929] v9fs_mount+0x79/0x8f0 [ 2887.947782] ? v9fs_write_inode+0x60/0x60 [ 2887.948713] legacy_get_tree+0x105/0x220 [ 2887.949744] vfs_get_tree+0x8e/0x300 [ 2887.950552] path_mount+0x1490/0x21e0 [ 2887.951450] ? strncpy_from_user+0x9e/0x470 [ 2887.952356] ? finish_automount+0xa90/0xa90 [ 2887.953446] ? getname_flags.part.0+0x1dd/0x4f0 [ 2887.954538] ? _copy_from_user+0xfb/0x1b0 [ 2887.955513] __x64_sys_mount+0x282/0x300 [ 2887.956489] ? copy_mnt_ns+0xa00/0xa00 [ 2887.957398] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2887.958608] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2887.959930] do_syscall_64+0x33/0x40 [ 2887.960720] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2887.961881] RIP: 0033:0x7feccca28b19 [ 2887.962674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2887.967183] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2887.968903] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2887.970417] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2887.971920] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2887.973659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2887.975272] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:55:33 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0xfffe, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:33 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 53) 00:55:33 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) pipe(&(0x7f00000001c0)) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x42801, &(0x7f0000000740)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@privport}, {@version_L}, {@fscache}, {@noextend}, {@aname={'aname', 0x3d, '\xb0-'}}, {@cache_none}, {@dfltgid}, {@cache_mmap}, {@mmap}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno}', @ANYRESHEX, @ANYBLOB=',\x00']) [ 2888.194691] FAULT_INJECTION: forcing a failure. [ 2888.194691] name failslab, interval 1, probability 0, space 0, times 0 [ 2888.197538] CPU: 1 PID: 12298 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2888.199271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2888.201268] Call Trace: [ 2888.201854] dump_stack+0x107/0x167 [ 2888.202802] should_fail.cold+0x5/0xa [ 2888.203765] ? __kmem_cache_create+0x10e/0x520 [ 2888.204856] should_failslab+0x5/0x20 [ 2888.205814] kmem_cache_alloc_node+0x55/0x330 [ 2888.206950] __kmem_cache_create+0x10e/0x520 [ 2888.207891] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2888.209135] p9_client_create+0xc6a/0x1230 [ 2888.210173] ? p9_client_flush+0x430/0x430 [ 2888.211163] ? trace_hardirqs_on+0x5b/0x180 [ 2888.212119] ? lockdep_init_map_type+0x2c7/0x780 [ 2888.213271] ? __raw_spin_lock_init+0x36/0x110 [ 2888.214461] v9fs_session_init+0x1dd/0x1680 [ 2888.215365] ? lock_release+0x680/0x680 [ 2888.216195] ? kmem_cache_alloc_trace+0x151/0x320 [ 2888.217370] ? v9fs_show_options+0x690/0x690 [ 2888.218485] ? trace_hardirqs_on+0x5b/0x180 [ 2888.219513] ? kasan_unpoison_shadow+0x33/0x50 [ 2888.220459] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2888.221507] v9fs_mount+0x79/0x8f0 [ 2888.222248] ? v9fs_write_inode+0x60/0x60 [ 2888.223109] legacy_get_tree+0x105/0x220 [ 2888.223945] vfs_get_tree+0x8e/0x300 [ 2888.224709] path_mount+0x1490/0x21e0 [ 2888.225497] ? strncpy_from_user+0x9e/0x470 [ 2888.226392] ? finish_automount+0xa90/0xa90 [ 2888.227299] ? getname_flags.part.0+0x1dd/0x4f0 [ 2888.228266] ? _copy_from_user+0xfb/0x1b0 [ 2888.229139] __x64_sys_mount+0x282/0x300 [ 2888.230157] ? copy_mnt_ns+0xa00/0xa00 [ 2888.231232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2888.232347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2888.233553] do_syscall_64+0x33/0x40 [ 2888.234607] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2888.235668] RIP: 0033:0x7f49777bbb19 [ 2888.236485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2888.240951] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2888.242759] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2888.244244] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2888.245722] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2888.247224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2888.248863] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2888.250802] kmem_cache_create(9p-fcall-cache-1493) failed with error -22 [ 2888.252241] CPU: 1 PID: 12298 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2888.253674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2888.255384] Call Trace: [ 2888.255928] dump_stack+0x107/0x167 [ 2888.256086] 9pnet: Insufficient options for proto=fd [ 2888.256677] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2888.256701] p9_client_create+0xc6a/0x1230 [ 2888.256726] ? p9_client_flush+0x430/0x430 [ 2888.256744] ? trace_hardirqs_on+0x5b/0x180 [ 2888.256765] ? lockdep_init_map_type+0x2c7/0x780 [ 2888.256784] ? __raw_spin_lock_init+0x36/0x110 [ 2888.256808] v9fs_session_init+0x1dd/0x1680 [ 2888.256827] ? lock_release+0x680/0x680 [ 2888.256853] ? kmem_cache_alloc_trace+0x151/0x320 [ 2888.256871] ? v9fs_show_options+0x690/0x690 [ 2888.256897] ? trace_hardirqs_on+0x5b/0x180 [ 2888.256928] ? kasan_unpoison_shadow+0x33/0x50 [ 2888.268848] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2888.269885] v9fs_mount+0x79/0x8f0 [ 2888.270617] ? v9fs_write_inode+0x60/0x60 [ 2888.271461] legacy_get_tree+0x105/0x220 [ 2888.272293] vfs_get_tree+0x8e/0x300 [ 2888.273056] path_mount+0x1490/0x21e0 [ 2888.273837] ? strncpy_from_user+0x9e/0x470 [ 2888.274729] ? finish_automount+0xa90/0xa90 [ 2888.275613] ? getname_flags.part.0+0x1dd/0x4f0 [ 2888.276568] ? _copy_from_user+0xfb/0x1b0 [ 2888.277420] __x64_sys_mount+0x282/0x300 [ 2888.278248] ? copy_mnt_ns+0xa00/0xa00 [ 2888.279052] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2888.280112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2888.281164] do_syscall_64+0x33/0x40 [ 2888.281922] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2888.282970] RIP: 0033:0x7f49777bbb19 [ 2888.283732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2888.287481] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2888.289019] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2888.290486] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2888.291927] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2888.293373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2888.294826] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:55:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15163, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:33 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 51) 00:55:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x2, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:55:33 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x8, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:33 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15cdb, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0/../file0\x00'}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) [ 2888.568871] FAULT_INJECTION: forcing a failure. [ 2888.568871] name failslab, interval 1, probability 0, space 0, times 0 [ 2888.571372] CPU: 1 PID: 12312 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2888.572747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2888.574149] Call Trace: [ 2888.574618] dump_stack+0x107/0x167 [ 2888.575244] should_fail.cold+0x5/0xa [ 2888.575892] ? create_object.isra.0+0x3a/0xa30 [ 2888.576680] should_failslab+0x5/0x20 [ 2888.577321] kmem_cache_alloc+0x5b/0x310 [ 2888.578005] ? lock_acquire+0x197/0x470 [ 2888.578690] create_object.isra.0+0x3a/0xa30 [ 2888.579431] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2888.580319] __kmalloc_track_caller+0x177/0x370 [ 2888.581101] ? kstrdup_const+0x53/0x80 [ 2888.581762] ? kasprintf+0xbb/0xf0 [ 2888.582372] kstrdup+0x36/0x70 [ 2888.582912] kstrdup_const+0x53/0x80 [ 2888.583543] kmem_cache_create_usercopy+0x12f/0x2f0 [ 2888.584391] p9_client_create+0xc6a/0x1230 [ 2888.585100] ? p9_client_flush+0x430/0x430 [ 2888.585805] ? trace_hardirqs_on+0x5b/0x180 [ 2888.586540] ? lockdep_init_map_type+0x2c7/0x780 [ 2888.587351] ? __raw_spin_lock_init+0x36/0x110 [ 2888.588119] v9fs_session_init+0x1dd/0x1680 [ 2888.588846] ? lock_release+0x680/0x680 [ 2888.589525] ? kmem_cache_alloc_trace+0x151/0x320 [ 2888.590335] ? v9fs_show_options+0x690/0x690 [ 2888.591073] ? trace_hardirqs_on+0x5b/0x180 [ 2888.591791] ? kasan_unpoison_shadow+0x33/0x50 [ 2888.592550] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2888.593403] v9fs_mount+0x79/0x8f0 [ 2888.593994] ? v9fs_write_inode+0x60/0x60 [ 2888.594725] legacy_get_tree+0x105/0x220 [ 2888.595411] vfs_get_tree+0x8e/0x300 [ 2888.596031] path_mount+0x1490/0x21e0 [ 2888.596681] ? strncpy_from_user+0x9e/0x470 [ 2888.597401] ? finish_automount+0xa90/0xa90 [ 2888.598125] ? getname_flags.part.0+0x1dd/0x4f0 [ 2888.598907] ? _copy_from_user+0xfb/0x1b0 [ 2888.599610] __x64_sys_mount+0x282/0x300 [ 2888.600290] ? copy_mnt_ns+0xa00/0xa00 [ 2888.600956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2888.601842] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2888.602703] do_syscall_64+0x33/0x40 [ 2888.603319] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2888.604180] RIP: 0033:0x7feccca28b19 [ 2888.604796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2888.607909] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2888.609181] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2888.610378] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2888.611567] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2888.612930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2888.614126] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2888.672391] 9pnet: Insufficient options for proto=fd 00:55:50 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 54) 00:55:50 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 52) 00:55:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x3, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:55:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000980)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, '\x8f/\xd6\xf8\x05'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x3, &(0x7f00000001c0)={0x77359400}, 0x1, 0x1, 0x1}, 0x7) 00:55:50 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15cdc, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:50 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:50 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15164, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:55:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x9, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2905.286701] FAULT_INJECTION: forcing a failure. [ 2905.286701] name failslab, interval 1, probability 0, space 0, times 0 [ 2905.289133] CPU: 0 PID: 12341 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2905.290631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2905.292408] Call Trace: [ 2905.292972] dump_stack+0x107/0x167 [ 2905.293750] should_fail.cold+0x5/0xa [ 2905.294577] ? create_object.isra.0+0x3a/0xa30 [ 2905.295576] should_failslab+0x5/0x20 [ 2905.296476] kmem_cache_alloc+0x5b/0x310 [ 2905.297384] create_object.isra.0+0x3a/0xa30 [ 2905.298425] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2905.299542] kmem_cache_alloc_node+0x169/0x330 [ 2905.300533] __kmem_cache_create+0x10e/0x520 [ 2905.301303] 9pnet: Insufficient options for proto=fd [ 2905.301477] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2905.301502] p9_client_create+0xc6a/0x1230 [ 2905.301530] ? p9_client_flush+0x430/0x430 [ 2905.301557] ? trace_hardirqs_on+0x5b/0x180 [ 2905.306316] ? lockdep_init_map_type+0x2c7/0x780 [ 2905.307340] ? __raw_spin_lock_init+0x36/0x110 [ 2905.308321] v9fs_session_init+0x1dd/0x1680 [ 2905.309241] ? lock_release+0x680/0x680 [ 2905.310101] ? kmem_cache_alloc_trace+0x151/0x320 [ 2905.311140] ? v9fs_show_options+0x690/0x690 [ 2905.312085] ? trace_hardirqs_on+0x5b/0x180 [ 2905.313004] ? kasan_unpoison_shadow+0x33/0x50 [ 2905.313972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2905.315065] v9fs_mount+0x79/0x8f0 [ 2905.315820] ? v9fs_write_inode+0x60/0x60 [ 2905.316697] legacy_get_tree+0x105/0x220 00:55:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x4, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2905.317625] vfs_get_tree+0x8e/0x300 [ 2905.318422] path_mount+0x1490/0x21e0 [ 2905.319245] ? strncpy_from_user+0x9e/0x470 [ 2905.320160] ? finish_automount+0xa90/0xa90 [ 2905.321077] ? getname_flags.part.0+0x1dd/0x4f0 [ 2905.322069] ? _copy_from_user+0xfb/0x1b0 [ 2905.322974] __x64_sys_mount+0x282/0x300 [ 2905.323840] ? copy_mnt_ns+0xa00/0xa00 [ 2905.324672] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2905.325793] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2905.326911] do_syscall_64+0x33/0x40 [ 2905.327705] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2905.328794] RIP: 0033:0x7f49777bbb19 [ 2905.329586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2905.333531] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2905.335174] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2905.336701] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2905.338225] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 00:55:50 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15cdd, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2905.339751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2905.341335] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2905.385172] FAULT_INJECTION: forcing a failure. [ 2905.385172] name failslab, interval 1, probability 0, space 0, times 0 [ 2905.387652] CPU: 0 PID: 12338 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2905.389232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2905.390976] Call Trace: [ 2905.391525] dump_stack+0x107/0x167 [ 2905.392297] should_fail.cold+0x5/0xa [ 2905.393103] ? create_object.isra.0+0x3a/0xa30 [ 2905.394049] should_failslab+0x5/0x20 [ 2905.394842] kmem_cache_alloc+0x5b/0x310 [ 2905.395683] create_object.isra.0+0x3a/0xa30 [ 2905.396600] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2905.397652] kmem_cache_alloc+0x159/0x310 [ 2905.398526] kmem_cache_create_usercopy+0x190/0x2f0 [ 2905.399558] p9_client_create+0xc6a/0x1230 [ 2905.400435] ? p9_client_flush+0x430/0x430 [ 2905.401307] ? trace_hardirqs_on+0x5b/0x180 [ 2905.402198] ? lockdep_init_map_type+0x2c7/0x780 [ 2905.403187] ? __raw_spin_lock_init+0x36/0x110 [ 2905.404138] v9fs_session_init+0x1dd/0x1680 [ 2905.405020] ? lock_release+0x680/0x680 [ 2905.405850] ? kmem_cache_alloc_trace+0x151/0x320 [ 2905.406855] ? v9fs_show_options+0x690/0x690 [ 2905.407782] ? trace_hardirqs_on+0x5b/0x180 [ 2905.408736] ? kasan_unpoison_shadow+0x33/0x50 [ 2905.409749] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2905.410912] v9fs_mount+0x79/0x8f0 [ 2905.411704] ? v9fs_write_inode+0x60/0x60 [ 2905.412637] legacy_get_tree+0x105/0x220 [ 2905.413566] vfs_get_tree+0x8e/0x300 [ 2905.414392] path_mount+0x1490/0x21e0 [ 2905.415255] ? strncpy_from_user+0x9e/0x470 [ 2905.416221] ? finish_automount+0xa90/0xa90 [ 2905.417213] ? getname_flags.part.0+0x1dd/0x4f0 [ 2905.418249] ? _copy_from_user+0xfb/0x1b0 [ 2905.419196] __x64_sys_mount+0x282/0x300 [ 2905.420127] ? copy_mnt_ns+0xa00/0xa00 [ 2905.420996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2905.422176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2905.423343] do_syscall_64+0x33/0x40 [ 2905.424178] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2905.425337] RIP: 0033:0x7feccca28b19 [ 2905.426178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2905.430304] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2905.432018] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2905.433622] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2905.435243] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2905.436860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2905.438471] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:55:50 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15165, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 53) 00:56:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0xa, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15166, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x8, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:56:03 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15cde, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:03 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 55) 00:56:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000700)='wfdno\xd2\xae\x7f\x02A\x01\bK\x00\x8a\xf8}\xa5\xa2\xb7w\xbfKG\xfd\x19=\xe6\xda&\r\xf1r\x8a\xdd\xb5?\xb3^\xd9\xc7\x98\xf0\x17\xce\x8aP\xb4\xf1\xc4m6\x9d\x86\x96\x97lS\x88\x9f\xf1\xe2\x11\x15\x9d.\xee\x1f\xa42bB\xf5\x9b)2\xae07\x0e\xe6\x1c\xb3\t\xd7\xa4;\xcb\xa4\xc2$;\xd8', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005b640)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "0ede9c9310618d"}) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d26f9c3b18138fdea8d5aa768eaf9590692c48062db82d6861a2b06008121152faa16f6a1a017e3c118a5d9be978d6dccedafe90800000000000000901600c362b6ce0047c09b68ddf97f19415283dca38f26fd90a4b30411aed666937f9fe1a4d44b19e79b85130682da940795ef29c3d659cff0a1d7", @ANYRESHEX, @ANYBLOB=',privport,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',lokse,msize=0x0000000000000012,privport,access=user,subj_user=rfdno,fowner=', @ANYRESDEC, @ANYBLOB=',smackfshat=*],fowner=', @ANYRESDEC=r7, @ANYBLOB=',dont_hash,\x00']) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x2813808, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC, @ANYBLOB='fdn/=\x00\x00', @ANYRESHEX=r2, @ANYRES64=r4]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x254068, &(0x7f0000000280)) 00:56:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0xf, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2918.091435] FAULT_INJECTION: forcing a failure. [ 2918.091435] name failslab, interval 1, probability 0, space 0, times 0 [ 2918.092918] CPU: 1 PID: 12375 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2918.093728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2918.094696] Call Trace: [ 2918.095018] dump_stack+0x107/0x167 [ 2918.095438] should_fail.cold+0x5/0xa [ 2918.095886] ? create_object.isra.0+0x3a/0xa30 [ 2918.096545] should_failslab+0x5/0x20 [ 2918.097059] kmem_cache_alloc+0x5b/0x310 [ 2918.097637] create_object.isra.0+0x3a/0xa30 [ 2918.098225] kmemleak_alloc_percpu+0xa0/0x100 [ 2918.098751] pcpu_alloc+0x4e2/0x1240 [ 2918.099321] __kmem_cache_create+0x35a/0x520 [ 2918.099823] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2918.100424] p9_client_create+0xc6a/0x1230 [ 2918.101057] ? p9_client_flush+0x430/0x430 [ 2918.101637] ? trace_hardirqs_on+0x5b/0x180 [ 2918.102131] ? lockdep_init_map_type+0x2c7/0x780 [ 2918.102817] ? __raw_spin_lock_init+0x36/0x110 [ 2918.103482] v9fs_session_init+0x1dd/0x1680 [ 2918.104118] ? lock_release+0x680/0x680 [ 2918.104577] ? kmem_cache_alloc_trace+0x151/0x320 [ 2918.105239] ? v9fs_show_options+0x690/0x690 [ 2918.105794] ? trace_hardirqs_on+0x5b/0x180 [ 2918.106487] ? kasan_unpoison_shadow+0x33/0x50 [ 2918.107112] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2918.107731] v9fs_mount+0x79/0x8f0 [ 2918.108220] ? v9fs_write_inode+0x60/0x60 [ 2918.108785] legacy_get_tree+0x105/0x220 [ 2918.109369] vfs_get_tree+0x8e/0x300 [ 2918.109830] path_mount+0x1490/0x21e0 [ 2918.110285] ? strncpy_from_user+0x9e/0x470 [ 2918.110929] ? finish_automount+0xa90/0xa90 [ 2918.111554] ? getname_flags.part.0+0x1dd/0x4f0 [ 2918.112252] ? _copy_from_user+0xfb/0x1b0 [ 2918.112729] __x64_sys_mount+0x282/0x300 [ 2918.113323] ? copy_mnt_ns+0xa00/0xa00 [ 2918.113853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2918.114669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2918.115255] do_syscall_64+0x33/0x40 [ 2918.115712] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2918.116415] RIP: 0033:0x7f49777bbb19 [ 2918.116838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2918.119201] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2918.120125] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2918.121102] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2918.121919] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2918.122946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2918.123825] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2918.161152] FAULT_INJECTION: forcing a failure. [ 2918.161152] name failslab, interval 1, probability 0, space 0, times 0 [ 2918.162872] CPU: 1 PID: 12371 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2918.163672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2918.164660] Call Trace: [ 2918.165078] dump_stack+0x107/0x167 [ 2918.165507] should_fail.cold+0x5/0xa [ 2918.166099] ? __kmem_cache_create+0x10e/0x520 [ 2918.166837] should_failslab+0x5/0x20 [ 2918.167271] kmem_cache_alloc_node+0x55/0x330 [ 2918.167779] __kmem_cache_create+0x10e/0x520 [ 2918.168294] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2918.168864] p9_client_create+0xc6a/0x1230 [ 2918.169419] ? p9_client_flush+0x430/0x430 [ 2918.169999] ? trace_hardirqs_on+0x5b/0x180 [ 2918.170636] ? lockdep_init_map_type+0x2c7/0x780 [ 2918.171371] ? __raw_spin_lock_init+0x36/0x110 [ 2918.171994] v9fs_session_init+0x1dd/0x1680 [ 2918.172482] ? lock_release+0x680/0x680 [ 2918.172941] ? kmem_cache_alloc_trace+0x151/0x320 [ 2918.173537] ? v9fs_show_options+0x690/0x690 [ 2918.174141] ? trace_hardirqs_on+0x5b/0x180 [ 2918.174811] ? kasan_unpoison_shadow+0x33/0x50 [ 2918.175499] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2918.176087] v9fs_mount+0x79/0x8f0 [ 2918.176491] ? v9fs_write_inode+0x60/0x60 [ 2918.176960] legacy_get_tree+0x105/0x220 [ 2918.177423] vfs_get_tree+0x8e/0x300 [ 2918.177845] path_mount+0x1490/0x21e0 [ 2918.178279] ? strncpy_from_user+0x9e/0x470 [ 2918.178774] ? finish_automount+0xa90/0xa90 [ 2918.179265] ? getname_flags.part.0+0x1dd/0x4f0 [ 2918.179800] ? _copy_from_user+0xfb/0x1b0 [ 2918.180276] __x64_sys_mount+0x282/0x300 [ 2918.180735] ? copy_mnt_ns+0xa00/0xa00 [ 2918.181187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2918.181780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2918.182372] do_syscall_64+0x33/0x40 [ 2918.182801] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2918.183387] RIP: 0033:0x7feccca28b19 [ 2918.183809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2918.185911] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2918.186789] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2918.187605] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2918.188425] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2918.189236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2918.190044] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2918.191220] kmem_cache_create(9p-fcall-cache-1498) failed with error -22 [ 2918.192038] CPU: 1 PID: 12371 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2918.192824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2918.193761] Call Trace: [ 2918.194065] dump_stack+0x107/0x167 [ 2918.194480] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2918.195088] p9_client_create+0xc6a/0x1230 [ 2918.195580] ? p9_client_flush+0x430/0x430 [ 2918.196067] ? trace_hardirqs_on+0x5b/0x180 [ 2918.196559] ? lockdep_init_map_type+0x2c7/0x780 [ 2918.197092] ? __raw_spin_lock_init+0x36/0x110 [ 2918.197616] v9fs_session_init+0x1dd/0x1680 [ 2918.198101] ? lock_release+0x680/0x680 [ 2918.198553] ? kmem_cache_alloc_trace+0x151/0x320 [ 2918.199101] ? v9fs_show_options+0x690/0x690 [ 2918.199608] ? trace_hardirqs_on+0x5b/0x180 [ 2918.200100] ? kasan_unpoison_shadow+0x33/0x50 [ 2918.200613] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2918.201183] v9fs_mount+0x79/0x8f0 [ 2918.201582] ? v9fs_write_inode+0x60/0x60 [ 2918.202060] legacy_get_tree+0x105/0x220 [ 2918.202533] vfs_get_tree+0x8e/0x300 [ 2918.202965] path_mount+0x1490/0x21e0 [ 2918.203412] ? strncpy_from_user+0x9e/0x470 [ 2918.203908] ? finish_automount+0xa90/0xa90 [ 2918.204402] ? getname_flags.part.0+0x1dd/0x4f0 [ 2918.204930] ? _copy_from_user+0xfb/0x1b0 [ 2918.205411] __x64_sys_mount+0x282/0x300 [ 2918.205866] ? copy_mnt_ns+0xa00/0xa00 [ 2918.206315] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2918.206914] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2918.207506] do_syscall_64+0x33/0x40 [ 2918.207924] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2918.208507] RIP: 0033:0x7feccca28b19 [ 2918.208927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2918.211032] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2918.211903] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2918.212722] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2918.213536] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2918.214345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2918.215168] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:56:03 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15cdf, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0xf0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:56:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) 00:56:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15167, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000780)=0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0400616e73446264646e6f3d000000feef5b51f3ea41caf2ee0dbf25c8622ea449", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 00:56:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0xb, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:03 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 56) 00:56:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 54) 00:56:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15168, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x300, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:56:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x10, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2918.539734] FAULT_INJECTION: forcing a failure. [ 2918.539734] name failslab, interval 1, probability 0, space 0, times 0 [ 2918.541180] CPU: 1 PID: 12407 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2918.541974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2918.542935] Call Trace: [ 2918.543244] dump_stack+0x107/0x167 [ 2918.543662] should_fail.cold+0x5/0xa [ 2918.544104] ? create_object.isra.0+0x3a/0xa30 [ 2918.544622] should_failslab+0x5/0x20 [ 2918.545057] kmem_cache_alloc+0x5b/0x310 [ 2918.545524] create_object.isra.0+0x3a/0xa30 [ 2918.546025] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2918.546608] kmem_cache_alloc_node+0x169/0x330 [ 2918.547137] __kmem_cache_create+0x10e/0x520 [ 2918.547643] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2918.548213] p9_client_create+0xc6a/0x1230 [ 2918.548705] ? p9_client_flush+0x430/0x430 [ 2918.549186] ? trace_hardirqs_on+0x5b/0x180 [ 2918.549676] ? lockdep_init_map_type+0x2c7/0x780 [ 2918.550216] ? __raw_spin_lock_init+0x36/0x110 [ 2918.550758] v9fs_session_init+0x1dd/0x1680 [ 2918.551250] ? lock_release+0x680/0x680 [ 2918.551714] ? kmem_cache_alloc_trace+0x151/0x320 [ 2918.552263] ? v9fs_show_options+0x690/0x690 [ 2918.552788] ? trace_hardirqs_on+0x5b/0x180 [ 2918.553283] ? kasan_unpoison_shadow+0x33/0x50 [ 2918.553803] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2918.554382] v9fs_mount+0x79/0x8f0 [ 2918.554797] ? v9fs_write_inode+0x60/0x60 [ 2918.555270] legacy_get_tree+0x105/0x220 [ 2918.555740] vfs_get_tree+0x8e/0x300 [ 2918.556163] path_mount+0x1490/0x21e0 [ 2918.556603] ? strncpy_from_user+0x9e/0x470 [ 2918.557093] ? finish_automount+0xa90/0xa90 [ 2918.557584] ? getname_flags.part.0+0x1dd/0x4f0 [ 2918.558115] ? _copy_from_user+0xfb/0x1b0 [ 2918.558593] __x64_sys_mount+0x282/0x300 [ 2918.559062] ? copy_mnt_ns+0xa00/0xa00 [ 2918.559511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2918.560112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2918.560706] do_syscall_64+0x33/0x40 [ 2918.561134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2918.561717] RIP: 0033:0x7feccca28b19 [ 2918.562145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2918.564263] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2918.565135] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2918.565947] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2918.566764] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2918.567577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2918.568388] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 [ 2918.610912] FAULT_INJECTION: forcing a failure. [ 2918.610912] name failslab, interval 1, probability 0, space 0, times 0 [ 2918.612403] CPU: 1 PID: 12405 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2918.613191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2918.614145] Call Trace: [ 2918.614453] dump_stack+0x107/0x167 [ 2918.614885] should_fail.cold+0x5/0xa [ 2918.615319] ? create_object.isra.0+0x3a/0xa30 [ 2918.615850] should_failslab+0x5/0x20 [ 2918.616284] kmem_cache_alloc+0x5b/0x310 [ 2918.616757] ? mark_held_locks+0x9e/0xe0 [ 2918.617220] create_object.isra.0+0x3a/0xa30 [ 2918.617725] kmemleak_alloc_percpu+0xa0/0x100 [ 2918.618245] pcpu_alloc+0x4e2/0x1240 [ 2918.618687] __kmem_cache_create+0x35a/0x520 [ 2918.619192] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2918.619771] p9_client_create+0xc6a/0x1230 [ 2918.620257] ? p9_client_flush+0x430/0x430 [ 2918.620745] ? trace_hardirqs_on+0x5b/0x180 [ 2918.621238] ? lockdep_init_map_type+0x2c7/0x780 [ 2918.621781] ? __raw_spin_lock_init+0x36/0x110 [ 2918.622306] v9fs_session_init+0x1dd/0x1680 [ 2918.622806] ? lock_release+0x680/0x680 [ 2918.623265] ? kmem_cache_alloc_trace+0x151/0x320 [ 2918.623816] ? v9fs_show_options+0x690/0x690 [ 2918.624323] ? trace_hardirqs_on+0x5b/0x180 [ 2918.624816] ? kasan_unpoison_shadow+0x33/0x50 [ 2918.625337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2918.625925] v9fs_mount+0x79/0x8f0 [ 2918.626328] ? v9fs_write_inode+0x60/0x60 [ 2918.626806] legacy_get_tree+0x105/0x220 [ 2918.627273] vfs_get_tree+0x8e/0x300 [ 2918.627698] path_mount+0x1490/0x21e0 [ 2918.628138] ? strncpy_from_user+0x9e/0x470 [ 2918.628628] ? finish_automount+0xa90/0xa90 [ 2918.629118] ? getname_flags.part.0+0x1dd/0x4f0 [ 2918.629648] ? _copy_from_user+0xfb/0x1b0 [ 2918.630125] __x64_sys_mount+0x282/0x300 [ 2918.630587] ? copy_mnt_ns+0xa00/0xa00 [ 2918.631049] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2918.631648] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2918.632242] do_syscall_64+0x33/0x40 [ 2918.632666] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2918.633247] RIP: 0033:0x7f49777bbb19 [ 2918.633676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2918.635789] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2918.636657] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2918.637469] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2918.638284] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2918.639109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2918.639927] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:56:15 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 57) 00:56:15 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15ce0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) 00:56:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x2e, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x32e, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:56:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15169, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:15 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 55) 00:56:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000780), 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0x2ae0, 0x202a, 0x2, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="2c6c6f6f73652c6d73697a653d0b6b93777c7a303030303030303030303030303030322c70726976706f72742c6163636573733d757365722c7375626a7b757365723d7266646e6f00666f77", @ANYRESDEC, @ANYBLOB=',smackfshat=*],fowner=', @ANYRESDEC=r5, @ANYBLOB=',dont_hash,\x00']) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB='o=\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="2c63616368657461673d2c76657240bcc36a7873696f6e3d397032303037d14c0376657273696f6e3d3970323030302e4c2c6e6f657874656e642c76657273696f6e3d3970792c64666c", @ANYRESHEX=0x0, @ANYBLOB="2c63616368657461673d2c76657273696f6e3d3970323030302e4c2c7375626a5f726f6c653d2526267d243a2c27892c6d6561737572652c00"]) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) [ 2930.570961] 9pnet: Insufficient options for proto=fd [ 2930.580879] FAULT_INJECTION: forcing a failure. [ 2930.580879] name failslab, interval 1, probability 0, space 0, times 0 [ 2930.582589] CPU: 1 PID: 12432 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2930.583583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2930.584742] Call Trace: [ 2930.585129] dump_stack+0x107/0x167 [ 2930.585644] should_fail.cold+0x5/0xa [ 2930.586169] should_failslab+0x5/0x20 [ 2930.586714] __kmalloc_track_caller+0x79/0x370 [ 2930.587353] ? kstrdup_const+0x53/0x80 [ 2930.587902] kstrdup+0x36/0x70 [ 2930.588345] kstrdup_const+0x53/0x80 [ 2930.588858] kvasprintf_const+0x10c/0x1a0 [ 2930.589438] kobject_set_name_vargs+0x56/0x150 [ 2930.590072] kobject_init_and_add+0xc9/0x160 [ 2930.590681] ? kobject_create_and_add+0xb0/0xb0 [ 2930.591336] ? wait_for_completion_io+0x270/0x270 [ 2930.592012] ? kernfs_name_hash+0xe7/0x110 [ 2930.592603] ? kernfs_find_ns+0x256/0x380 [ 2930.593180] sysfs_slab_add+0x172/0x200 [ 2930.593737] __kmem_cache_create+0x3db/0x520 [ 2930.594349] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2930.595050] p9_client_create+0xc6a/0x1230 [ 2930.595646] ? p9_client_flush+0x430/0x430 [ 2930.596233] ? trace_hardirqs_on+0x5b/0x180 [ 2930.596833] ? lockdep_init_map_type+0x2c7/0x780 [ 2930.597494] ? __raw_spin_lock_init+0x36/0x110 [ 2930.598133] v9fs_session_init+0x1dd/0x1680 [ 2930.598725] ? lock_release+0x680/0x680 [ 2930.599295] ? kmem_cache_alloc_trace+0x151/0x320 [ 2930.599969] ? v9fs_show_options+0x690/0x690 [ 2930.600587] ? trace_hardirqs_on+0x5b/0x180 [ 2930.601187] ? kasan_unpoison_shadow+0x33/0x50 [ 2930.601812] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2930.602526] v9fs_mount+0x79/0x8f0 [ 2930.603024] ? v9fs_write_inode+0x60/0x60 [ 2930.603597] legacy_get_tree+0x105/0x220 [ 2930.604159] vfs_get_tree+0x8e/0x300 [ 2930.604685] path_mount+0x1490/0x21e0 [ 2930.605220] ? strncpy_from_user+0x9e/0x470 [ 2930.605815] ? finish_automount+0xa90/0xa90 [ 2930.606423] ? getname_flags.part.0+0x1dd/0x4f0 [ 2930.607076] ? _copy_from_user+0xfb/0x1b0 [ 2930.607655] __x64_sys_mount+0x282/0x300 [ 2930.608215] ? copy_mnt_ns+0xa00/0xa00 [ 2930.608767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2930.609511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2930.610224] do_syscall_64+0x33/0x40 [ 2930.610738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2930.611462] RIP: 0033:0x7f49777bbb19 [ 2930.611980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2930.614540] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2930.615603] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2930.616602] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2930.617595] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2930.618587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2930.619596] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2930.620680] kobject: can not set name properly! [ 2930.621378] kmem_cache_create(9p-fcall-cache-1501) failed with error -12 [ 2930.622349] CPU: 1 PID: 12432 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2930.623320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2930.624463] Call Trace: [ 2930.624827] dump_stack+0x107/0x167 [ 2930.625334] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2930.626062] p9_client_create+0xc6a/0x1230 [ 2930.626648] ? p9_client_flush+0x430/0x430 [ 2930.627240] ? trace_hardirqs_on+0x5b/0x180 [ 2930.627839] ? lockdep_init_map_type+0x2c7/0x780 [ 2930.628492] ? __raw_spin_lock_init+0x36/0x110 [ 2930.629131] v9fs_session_init+0x1dd/0x1680 [ 2930.629724] ? lock_release+0x680/0x680 [ 2930.630281] ? kmem_cache_alloc_trace+0x151/0x320 [ 2930.630959] ? v9fs_show_options+0x690/0x690 [ 2930.631571] ? trace_hardirqs_on+0x5b/0x180 [ 2930.632167] ? kasan_unpoison_shadow+0x33/0x50 [ 2930.632792] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2930.633495] v9fs_mount+0x79/0x8f0 [ 2930.633983] ? v9fs_write_inode+0x60/0x60 [ 2930.634550] legacy_get_tree+0x105/0x220 [ 2930.635116] vfs_get_tree+0x8e/0x300 [ 2930.635631] path_mount+0x1490/0x21e0 [ 2930.636161] ? strncpy_from_user+0x9e/0x470 [ 2930.636755] ? finish_automount+0xa90/0xa90 [ 2930.637341] ? getname_flags.part.0+0x1dd/0x4f0 [ 2930.637975] ? _copy_from_user+0xfb/0x1b0 [ 2930.638546] __x64_sys_mount+0x282/0x300 [ 2930.639104] ? copy_mnt_ns+0xa00/0xa00 [ 2930.639637] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2930.640354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2930.641060] do_syscall_64+0x33/0x40 [ 2930.641570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2930.642269] RIP: 0033:0x7f49777bbb19 [ 2930.642778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2930.645303] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2930.646350] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2930.647333] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2930.648308] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2930.649276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2930.650251] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2930.667359] FAULT_INJECTION: forcing a failure. [ 2930.667359] name failslab, interval 1, probability 0, space 0, times 0 [ 2930.673308] CPU: 0 PID: 12430 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2930.674755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2930.676466] Call Trace: [ 2930.677016] dump_stack+0x107/0x167 [ 2930.677776] should_fail.cold+0x5/0xa [ 2930.678574] ? create_object.isra.0+0x3a/0xa30 [ 2930.679528] should_failslab+0x5/0x20 [ 2930.680312] kmem_cache_alloc+0x5b/0x310 [ 2930.681168] create_object.isra.0+0x3a/0xa30 [ 2930.682104] kmemleak_alloc_percpu+0xa0/0x100 [ 2930.683035] pcpu_alloc+0x4e2/0x1240 [ 2930.683969] __kmem_cache_create+0x35a/0x520 [ 2930.684904] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2930.685948] p9_client_create+0xc6a/0x1230 [ 2930.686837] ? p9_client_flush+0x430/0x430 [ 2930.687746] ? trace_hardirqs_on+0x5b/0x180 [ 2930.688863] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2930.690269] ? lockdep_init_map_type+0x2c7/0x780 [ 2930.691501] ? __raw_spin_lock_init+0x36/0x110 [ 2930.692512] v9fs_session_init+0x1dd/0x1680 [ 2930.693408] ? lock_release+0x680/0x680 [ 2930.694239] ? kmem_cache_alloc_trace+0x151/0x320 [ 2930.695242] ? v9fs_show_options+0x690/0x690 [ 2930.696163] ? trace_hardirqs_on+0x5b/0x180 [ 2930.697056] ? kasan_unpoison_shadow+0x33/0x50 [ 2930.698009] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2930.699066] v9fs_mount+0x79/0x8f0 [ 2930.699808] ? v9fs_write_inode+0x60/0x60 [ 2930.700659] legacy_get_tree+0x105/0x220 [ 2930.701507] vfs_get_tree+0x8e/0x300 [ 2930.702275] path_mount+0x1490/0x21e0 [ 2930.703078] ? strncpy_from_user+0x9e/0x470 [ 2930.703976] ? finish_automount+0xa90/0xa90 [ 2930.704865] ? getname_flags.part.0+0x1dd/0x4f0 [ 2930.705828] ? _copy_from_user+0xfb/0x1b0 [ 2930.706687] __x64_sys_mount+0x282/0x300 [ 2930.707563] ? copy_mnt_ns+0xa00/0xa00 [ 2930.708374] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2930.709463] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2930.710550] do_syscall_64+0x33/0x40 [ 2930.711525] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2930.712851] RIP: 0033:0x7feccca28b19 [ 2930.713823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2930.718582] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2930.720535] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2930.722367] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2930.724219] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2930.726063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2930.727917] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:56:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0xf00, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:56:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:56:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) 00:56:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1516a, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x48, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:15 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15ce1, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:15 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 58) 00:56:15 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 56) [ 2930.948788] 9pnet: Insufficient options for proto=fd [ 2930.980294] FAULT_INJECTION: forcing a failure. [ 2930.980294] name failslab, interval 1, probability 0, space 0, times 0 [ 2930.983129] CPU: 0 PID: 12456 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2930.984918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2930.987087] Call Trace: [ 2930.987779] dump_stack+0x107/0x167 [ 2930.988725] should_fail.cold+0x5/0xa [ 2930.989705] ? create_object.isra.0+0x3a/0xa30 [ 2930.990903] should_failslab+0x5/0x20 [ 2930.991895] kmem_cache_alloc+0x5b/0x310 [ 2930.992941] ? lock_release+0x680/0x680 [ 2930.993985] create_object.isra.0+0x3a/0xa30 [ 2930.995140] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2930.996466] __kmalloc_track_caller+0x177/0x370 [ 2930.997660] ? kstrdup_const+0x53/0x80 [ 2930.998564] kstrdup+0x36/0x70 [ 2930.999406] kstrdup_const+0x53/0x80 [ 2931.000367] kvasprintf_const+0x10c/0x1a0 [ 2931.001443] kobject_set_name_vargs+0x56/0x150 [ 2931.002638] kobject_init_and_add+0xc9/0x160 [ 2931.003791] ? kobject_create_and_add+0xb0/0xb0 [ 2931.004990] ? wait_for_completion_io+0x270/0x270 [ 2931.006230] ? kernfs_name_hash+0xe7/0x110 [ 2931.007344] ? kernfs_find_ns+0x256/0x380 [ 2931.008436] sysfs_slab_add+0x172/0x200 [ 2931.009474] __kmem_cache_create+0x3db/0x520 [ 2931.010430] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2931.011566] p9_client_create+0xc6a/0x1230 [ 2931.012447] ? p9_client_flush+0x430/0x430 [ 2931.013318] ? trace_hardirqs_on+0x5b/0x180 [ 2931.014208] ? lockdep_init_map_type+0x2c7/0x780 [ 2931.015194] ? __raw_spin_lock_init+0x36/0x110 [ 2931.016135] v9fs_session_init+0x1dd/0x1680 [ 2931.017025] ? lock_release+0x680/0x680 [ 2931.017853] ? kmem_cache_alloc_trace+0x151/0x320 [ 2931.018860] ? v9fs_show_options+0x690/0x690 [ 2931.019783] ? trace_hardirqs_on+0x5b/0x180 [ 2931.020678] ? kasan_unpoison_shadow+0x33/0x50 [ 2931.021626] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2931.022668] v9fs_mount+0x79/0x8f0 [ 2931.023415] ? v9fs_write_inode+0x60/0x60 [ 2931.024275] legacy_get_tree+0x105/0x220 [ 2931.025139] vfs_get_tree+0x8e/0x300 [ 2931.025908] path_mount+0x1490/0x21e0 [ 2931.026700] ? strncpy_from_user+0x9e/0x470 [ 2931.027589] ? finish_automount+0xa90/0xa90 [ 2931.028473] ? getname_flags.part.0+0x1dd/0x4f0 [ 2931.029428] ? _copy_from_user+0xfb/0x1b0 [ 2931.030297] __x64_sys_mount+0x282/0x300 [ 2931.031377] ? copy_mnt_ns+0xa00/0xa00 [ 2931.032191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2931.033298] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2931.034390] do_syscall_64+0x33/0x40 [ 2931.035204] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2931.036291] RIP: 0033:0x7f49777bbb19 [ 2931.037078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2931.040994] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2931.042604] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2931.044132] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2931.045646] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2931.047159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2931.048663] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 00:56:16 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) [ 2931.140312] FAULT_INJECTION: forcing a failure. [ 2931.140312] name failslab, interval 1, probability 0, space 0, times 0 [ 2931.141878] CPU: 1 PID: 12457 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2931.142703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2931.143706] Call Trace: [ 2931.144030] dump_stack+0x107/0x167 [ 2931.144467] should_fail.cold+0x5/0xa [ 2931.144928] ? create_object.isra.0+0x3a/0xa30 [ 2931.145609] should_failslab+0x5/0x20 [ 2931.146126] kmem_cache_alloc+0x5b/0x310 [ 2931.146781] ? mark_held_locks+0x9e/0xe0 [ 2931.147454] create_object.isra.0+0x3a/0xa30 [ 2931.147989] kmemleak_alloc_percpu+0xa0/0x100 [ 2931.148529] pcpu_alloc+0x4e2/0x1240 [ 2931.149047] __kmem_cache_create+0x35a/0x520 [ 2931.149652] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2931.150482] p9_client_create+0xc6a/0x1230 [ 2931.151092] ? p9_client_flush+0x430/0x430 [ 2931.151600] ? trace_hardirqs_on+0x5b/0x180 [ 2931.152121] ? lockdep_init_map_type+0x2c7/0x780 [ 2931.152689] ? __raw_spin_lock_init+0x36/0x110 [ 2931.153251] v9fs_session_init+0x1dd/0x1680 [ 2931.153776] ? lock_release+0x680/0x680 [ 2931.154261] ? kmem_cache_alloc_trace+0x151/0x320 [ 2931.154847] ? v9fs_show_options+0x690/0x690 [ 2931.155437] ? trace_hardirqs_on+0x5b/0x180 [ 2931.156036] ? kasan_unpoison_shadow+0x33/0x50 [ 2931.156779] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2931.157476] v9fs_mount+0x79/0x8f0 [ 2931.157902] ? v9fs_write_inode+0x60/0x60 [ 2931.158407] legacy_get_tree+0x105/0x220 [ 2931.158907] vfs_get_tree+0x8e/0x300 [ 2931.159361] path_mount+0x1490/0x21e0 [ 2931.159819] ? strncpy_from_user+0x9e/0x470 [ 2931.160335] ? finish_automount+0xa90/0xa90 [ 2931.160847] ? getname_flags.part.0+0x1dd/0x4f0 [ 2931.161398] ? _copy_from_user+0xfb/0x1b0 [ 2931.161906] __x64_sys_mount+0x282/0x300 [ 2931.162395] ? copy_mnt_ns+0xa00/0xa00 [ 2931.162875] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2931.163503] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2931.164129] do_syscall_64+0x33/0x40 [ 2931.164575] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2931.165191] RIP: 0033:0x7feccca28b19 [ 2931.165632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2931.166928] 9pnet: Insufficient options for proto=fd [ 2931.167818] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2931.167830] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2931.167837] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2931.167844] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2931.167850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2931.167856] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:56:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x2e03, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 00:56:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:29 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) r1 = mq_open(0x0, 0x0, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (fail_nth: 57) 00:56:29 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15ce2, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x4c, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:29 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1518c, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, r3) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:56:29 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(0x0, 0x2, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x299) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xae2, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 59) [ 2944.923865] FAULT_INJECTION: forcing a failure. [ 2944.923865] name failslab, interval 1, probability 0, space 0, times 0 [ 2944.925861] CPU: 1 PID: 12480 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2944.927068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2944.928475] Call Trace: [ 2944.928929] dump_stack+0x107/0x167 [ 2944.929549] should_fail.cold+0x5/0xa [ 2944.930199] should_failslab+0x5/0x20 [ 2944.930845] __kmalloc_track_caller+0x79/0x370 [ 2944.931621] ? kstrdup_const+0x53/0x80 [ 2944.932283] kstrdup+0x36/0x70 [ 2944.932825] kstrdup_const+0x53/0x80 [ 2944.933460] __kernfs_new_node+0x9d/0x860 [ 2944.934164] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2944.934982] ? lock_acquire+0x197/0x470 [ 2944.935656] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2944.936552] ? lock_release+0x680/0x680 [ 2944.937200] ? find_held_lock+0x2c/0x110 [ 2944.937892] kernfs_new_node+0x18d/0x250 [ 2944.938586] kernfs_create_dir_ns+0x49/0x160 [ 2944.939337] sysfs_create_dir_ns+0x127/0x290 [ 2944.940079] ? sysfs_create_mount_point+0xb0/0xb0 [ 2944.941157] ? rwlock_bug.part.0+0x90/0x90 [ 2944.942059] ? do_raw_spin_unlock+0x4f/0x220 [ 2944.942816] kobject_add_internal+0x25e/0xa30 [ 2944.943721] kobject_init_and_add+0x101/0x160 [ 2944.944686] ? kobject_create_and_add+0xb0/0xb0 [ 2944.945575] ? wait_for_completion_io+0x270/0x270 [ 2944.946391] ? kernfs_name_hash+0xe7/0x110 [ 2944.947227] ? kernfs_find_ns+0x256/0x380 [ 2944.948105] sysfs_slab_add+0x172/0x200 [ 2944.948891] __kmem_cache_create+0x3db/0x520 [ 2944.949703] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2944.950690] p9_client_create+0xc6a/0x1230 [ 2944.951587] ? p9_client_flush+0x430/0x430 [ 2944.952308] ? trace_hardirqs_on+0x5b/0x180 [ 2944.953133] ? lockdep_init_map_type+0x2c7/0x780 [ 2944.954171] ? __raw_spin_lock_init+0x36/0x110 [ 2944.954981] v9fs_session_init+0x1dd/0x1680 [ 2944.955817] ? lock_release+0x680/0x680 [ 2944.956691] ? kmem_cache_alloc_trace+0x151/0x320 [ 2944.957587] ? v9fs_show_options+0x690/0x690 [ 2944.958442] ? trace_hardirqs_on+0x5b/0x180 [ 2944.959315] ? kasan_unpoison_shadow+0x33/0x50 [ 2944.960239] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2944.961171] v9fs_mount+0x79/0x8f0 [ 2944.961817] ? v9fs_write_inode+0x60/0x60 [ 2944.962680] legacy_get_tree+0x105/0x220 [ 2944.963440] vfs_get_tree+0x8e/0x300 [ 2944.964086] path_mount+0x1490/0x21e0 [ 2944.964803] ? strncpy_from_user+0x9e/0x470 [ 2944.965725] ? finish_automount+0xa90/0xa90 [ 2944.966529] ? getname_flags.part.0+0x1dd/0x4f0 [ 2944.967309] ? _copy_from_user+0xfb/0x1b0 [ 2944.968140] __x64_sys_mount+0x282/0x300 [ 2944.968922] ? copy_mnt_ns+0xa00/0xa00 [ 2944.969748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2944.970635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2944.971526] do_syscall_64+0x33/0x40 [ 2944.972205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2944.973224] RIP: 0033:0x7f49777bbb19 [ 2944.973992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2944.977185] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2944.978478] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2944.979693] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2944.980908] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2944.982110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2944.983308] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2944.984609] kobject_add_internal failed for 9p-fcall-cache-1505 (error: -12 parent: slab) [ 2944.986065] kmem_cache_create(9p-fcall-cache-1505) failed with error -12 [ 2944.987251] CPU: 1 PID: 12480 Comm: syz-executor.2 Not tainted 5.10.246 #1 [ 2944.988406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2944.989796] Call Trace: [ 2944.990238] dump_stack+0x107/0x167 [ 2944.990859] kmem_cache_create_usercopy.cold+0x17/0x65 [ 2944.991748] p9_client_create+0xc6a/0x1230 [ 2944.992466] ? p9_client_flush+0x430/0x430 [ 2944.993186] ? trace_hardirqs_on+0x5b/0x180 00:56:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0xf000, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2944.993920] ? lockdep_init_map_type+0x2c7/0x780 [ 2944.994941] ? __raw_spin_lock_init+0x36/0x110 [ 2944.995718] v9fs_session_init+0x1dd/0x1680 [ 2944.996445] ? lock_release+0x680/0x680 [ 2944.997117] ? kmem_cache_alloc_trace+0x151/0x320 [ 2944.997921] ? v9fs_show_options+0x690/0x690 [ 2944.998669] ? trace_hardirqs_on+0x5b/0x180 [ 2944.999399] ? kasan_unpoison_shadow+0x33/0x50 [ 2945.000161] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2945.001011] v9fs_mount+0x79/0x8f0 [ 2945.001603] ? v9fs_write_inode+0x60/0x60 [ 2945.002289] legacy_get_tree+0x105/0x220 [ 2945.002983] vfs_get_tree+0x8e/0x300 [ 2945.003600] path_mount+0x1490/0x21e0 [ 2945.004381] ? strncpy_from_user+0x9e/0x470 [ 2945.005224] ? finish_automount+0xa90/0xa90 [ 2945.006013] ? getname_flags.part.0+0x1dd/0x4f0 [ 2945.006797] ? _copy_from_user+0xfb/0x1b0 [ 2945.007504] __x64_sys_mount+0x282/0x300 [ 2945.008186] ? copy_mnt_ns+0xa00/0xa00 [ 2945.008845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2945.009724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2945.010685] do_syscall_64+0x33/0x40 [ 2945.011311] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2945.012240] RIP: 0033:0x7f49777bbb19 [ 2945.012953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2945.016400] RSP: 002b:00007f4974d31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2945.017981] RAX: ffffffffffffffda RBX: 00007f49778cef60 RCX: 00007f49777bbb19 [ 2945.019189] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2945.020498] RBP: 00007f4974d311d0 R08: 0000000020000280 R09: 0000000000000000 [ 2945.021846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2945.023187] R13: 00007ffce468076f R14: 00007f4974d31300 R15: 0000000000022000 [ 2945.035086] 9pnet: Insufficient options for proto=fd [ 2945.049085] FAULT_INJECTION: forcing a failure. [ 2945.049085] name failslab, interval 1, probability 0, space 0, times 0 [ 2945.052122] CPU: 0 PID: 12474 Comm: syz-executor.5 Not tainted 5.10.246 #1 [ 2945.053808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.055812] Call Trace: [ 2945.056285] 9pnet: Insufficient options for proto=fd [ 2945.056472] dump_stack+0x107/0x167 [ 2945.058160] should_fail.cold+0x5/0xa [ 2945.059092] ? create_object.isra.0+0x3a/0xa30 [ 2945.060186] should_failslab+0x5/0x20 [ 2945.061111] kmem_cache_alloc+0x5b/0x310 [ 2945.062090] ? mark_held_locks+0x9e/0xe0 [ 2945.063079] create_object.isra.0+0x3a/0xa30 [ 2945.064145] kmemleak_alloc_percpu+0xa0/0x100 [ 2945.065235] pcpu_alloc+0x4e2/0x1240 [ 2945.066148] __kmem_cache_create+0x35a/0x520 [ 2945.067243] kmem_cache_create_usercopy+0x1db/0x2f0 [ 2945.068459] p9_client_create+0xc6a/0x1230 [ 2945.069512] ? p9_client_flush+0x430/0x430 [ 2945.070557] ? trace_hardirqs_on+0x5b/0x180 [ 2945.071638] ? lockdep_init_map_type+0x2c7/0x780 [ 2945.072773] ? __raw_spin_lock_init+0x36/0x110 [ 2945.073884] v9fs_session_init+0x1dd/0x1680 [ 2945.074919] ? lock_release+0x680/0x680 [ 2945.075895] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2945.077182] ? trace_hardirqs_on+0x5b/0x180 [ 2945.078225] ? v9fs_show_options+0x690/0x690 [ 2945.079307] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 2945.080531] ? kasan_unpoison_shadow+0x33/0x50 [ 2945.081632] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2945.082849] v9fs_mount+0x79/0x8f0 [ 2945.083719] ? v9fs_write_inode+0x60/0x60 [ 2945.084711] legacy_get_tree+0x105/0x220 [ 2945.085690] vfs_get_tree+0x8e/0x300 [ 2945.086587] path_mount+0x1490/0x21e0 [ 2945.087521] ? strncpy_from_user+0x9e/0x470 [ 2945.088558] ? finish_automount+0xa90/0xa90 [ 2945.089608] ? getname_flags.part.0+0x1dd/0x4f0 [ 2945.090723] ? _copy_from_user+0xfb/0x1b0 [ 2945.091736] __x64_sys_mount+0x282/0x300 [ 2945.092706] ? copy_mnt_ns+0xa00/0xa00 [ 2945.093658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2945.094918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2945.096165] do_syscall_64+0x33/0x40 [ 2945.097059] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2945.098290] RIP: 0033:0x7feccca28b19 [ 2945.099206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2945.103620] RSP: 002b:00007fecc9f9e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2945.105436] RAX: ffffffffffffffda RBX: 00007fecccb3bf60 RCX: 00007feccca28b19 [ 2945.107162] RDX: 00000000200000c0 RSI: 0000000020000380 RDI: 0000000000000000 [ 2945.108862] RBP: 00007fecc9f9e1d0 R08: 0000000020000280 R09: 0000000000000000 [ 2945.110576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2945.112290] R13: 00007fffc5f9b7df R14: 00007fecc9f9e300 R15: 0000000000022000 00:56:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000780)) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup2(r3, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r4, 0x550c, 0x20000000) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)) 00:56:30 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x15ce3, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:30 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x1518d, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x68, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:30 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x2, 0x1a5, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) io_uring_enter(r1, 0xae2, 0xa51c, 0x3, &(0x7f00000002c0)={[0x7]}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x20, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@privport}, {@dfltgid}, {@loose}, {@msize={'msize', 0x3d, 0x2}}, {@privport}, {@access_user}], [{@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '*]'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@dont_hash}]}}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3002808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@version_L}, {@version_L}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '%&&}$:,\'\x89'}}, {@measure}]}}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}}) 00:56:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000020c0)={0x14, 0x1f, 0xc21, 0x80000, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2945.299265] 9pnet: Insufficient options for proto=fd [ 2945.303915] 9pnet: Insufficient options for proto=fd [ 2957.152942] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88800c8f6dc0 (size 32): comm "syz-executor.2", pid 12480, jiffies 4297611815 (age 19.725s) hex dump (first 32 bytes): 39 70 2d 66 63 61 6c 6c 2d 63 61 63 68 65 2d 31 9p-fcall-cache-1 35 30 35 00 80 88 ff ff 00 00 00 00 00 00 00 00 505............. backtrace: [<00000000ddf82202>] kstrdup+0x36/0x70 [<000000002e2adaaf>] kstrdup_const+0x53/0x80 [<00000000798237ff>] kvasprintf_const+0x10c/0x1a0 [<000000008280fb05>] kobject_set_name_vargs+0x56/0x150 [<00000000b7fb487e>] kobject_init_and_add+0xc9/0x160 [<00000000001b7f12>] sysfs_slab_add+0x172/0x200 [<000000008700cce2>] __kmem_cache_create+0x3db/0x520 [<0000000066852eed>] kmem_cache_create_usercopy+0x1db/0x2f0 [<0000000088026873>] p9_client_create+0xc6a/0x1230 [<000000007cee6f23>] v9fs_session_init+0x1dd/0x1680 [<00000000dfc89639>] v9fs_mount+0x79/0x8f0 [<000000004a37e5d6>] legacy_get_tree+0x105/0x220 [<00000000ccb9cf6c>] vfs_get_tree+0x8e/0x300 [<0000000028ca6210>] path_mount+0x1490/0x21e0 [<000000004ce0d29a>] __x64_sys_mount+0x282/0x300 [<000000003e644f1b>] do_syscall_64+0x33/0x40 BUG: leak checking failed VM DIAGNOSIS: 00:56:50 Registers: info registers vcpu 0 RAX=ffffffff83e9ba40 RBX=0000000000000000 RCX=ffffffff83e836ac RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e9c208 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff8567acc8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e9ba4e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3d65247400 CR3=000000001741e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=652e29646e616d6d6f632a282e637069 XMM03=00000000000000000000000000000000 XMM04=7064755f3674656e692474656b636f73 XMM05=3030663778302826202c273030785c30 XMM06=202c307830202c293063303030303030 XMM07=30383230303030303030663778302826 XMM08=202c272c64663d736e617274277b3d29 XMM09=202c64337830202c276f6e646672277b XMM10=646677277b202c63327830202c7d3072 XMM11=297d7d3172202c64337830202c276f6e XMM12=0a293935203a68746e5f6c6961662820 XMM13=49434f49444948246c74636f690a2930 XMM14=7830202c31722854524f50455254494e XMM15=30303030303030327830202c63303535 info registers vcpu 1 RAX=ffffffff83e9ba40 RBX=0000000000000001 RCX=ffffffff83e836ac RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e9c208 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff8567acc8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e9ba4e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff50593ce8 CR3=000000001741e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004183eb0b00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000