ffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:07 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:07 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fown', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:07 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:07 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:07 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:01:07 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:07 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:07 executing program 3: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) 13:01:07 executing program 3: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) [ 2812.880078] 9pnet: Insufficient options for proto=fd [ 2812.880640] 9pnet: Insufficient options for proto=fd 13:01:07 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 2813.003256] 9pnet: Insufficient options for proto=fd 13:01:21 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fown', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 2827.044542] 9pnet: Insufficient options for proto=fd 13:01:21 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 2827.081731] 9pnet: Insufficient options for proto=fd [ 2827.122630] 9pnet: Insufficient options for proto=fd 13:01:21 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:01:21 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dflt', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2827.187535] 9pnet: Insufficient options for proto=fd 13:01:21 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2827.231032] 9pnet: Insufficient options for proto=fd 13:01:21 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x00000', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 2827.306700] 9pnet: Insufficient options for proto=fd 13:01:21 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fown', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2827.352888] 9pnet: Insufficient options for proto=fd [ 2827.382449] 9pnet: Insufficient options for proto=fd [ 2827.403728] 9pnet: Insufficient options for proto=fd 13:01:21 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dflt', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:21 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2827.536661] 9pnet: Insufficient options for proto=fd [ 2827.544482] 9pnet: Insufficient options for proto=fd 13:01:34 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x00000', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000001b00)='illinois\x00', 0x9) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x2, 0xdb, 0x3f, 0x9, 0x1}) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$packet(0x11, 0x6, 0x300) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x24, r3, 0x31, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0xb}, @void}}}, 0x24}}, 0x0) 13:01:34 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:34 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:34 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:34 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:34 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:34 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dflt', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:34 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:34 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2840.767618] 9pnet: Insufficient options for proto=fd 13:01:35 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:35 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2840.856847] 9pnet: Insufficient options for proto=fd [ 2840.857867] 9pnet: Insufficient options for proto=fd 13:01:35 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:35 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgi', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:35 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x00000', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:35 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:35 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2840.950852] 9pnet: Insufficient options for proto=fd 13:01:48 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgi', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:48 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x35}, {0x6}]}) pwrite64(r0, &(0x7f0000000040)="bc9d17be05f25b", 0x7, 0x1) 13:01:48 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x35}, {0x6}]}) pwrite64(r0, &(0x7f0000000040)="bc9d17be05f25b", 0x7, 0x1) 13:01:48 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:48 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:48 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:48 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevma', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:01:48 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2854.693792] 9pnet: Insufficient options for proto=fd [ 2854.697420] 9pnet: Insufficient options for proto=fd [ 2854.787424] audit: type=1326 audit(1766926909.039:36): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15128 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5acfa22b19 code=0x0 13:02:02 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 1) 13:02:02 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) (fail_nth: 1) 13:02:02 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgi', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:02 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevma', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2868.233224] FAULT_INJECTION: forcing a failure. [ 2868.233224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2868.233306] FAULT_INJECTION: forcing a failure. [ 2868.233306] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.236079] CPU: 0 PID: 15276 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2868.236090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2868.236101] Call Trace: [ 2868.236129] dump_stack+0x107/0x167 [ 2868.243315] should_fail.cold+0x5/0xa [ 2868.244237] _copy_from_user+0x2e/0x1b0 [ 2868.245202] do_seccomp+0xb24/0x2600 [ 2868.246093] ? wait_for_completion_io+0x270/0x270 [ 2868.247248] ? __seccomp_filter+0x1530/0x1530 [ 2868.248330] ? fput_many+0x2f/0x1a0 [ 2868.249201] ? ksys_write+0x1a9/0x260 [ 2868.250114] ? __ia32_sys_read+0xb0/0xb0 [ 2868.251095] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2868.252361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2868.253601] do_syscall_64+0x33/0x40 [ 2868.254495] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2868.255723] RIP: 0033:0x7fb6b1db2b19 [ 2868.256625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2868.261040] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2868.262882] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2868.264616] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2868.266346] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.268071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.269795] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 [ 2868.271530] CPU: 1 PID: 15277 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2868.272452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2868.273517] Call Trace: [ 2868.273861] dump_stack+0x107/0x167 [ 2868.274335] should_fail.cold+0x5/0xa [ 2868.274820] ? kvmalloc_node+0x119/0x170 [ 2868.275338] should_failslab+0x5/0x20 [ 2868.275854] __kmalloc_node+0x76/0x420 [ 2868.276387] ? ns_capable_noaudit+0xe5/0x110 [ 2868.276984] kvmalloc_node+0x119/0x170 [ 2868.277512] proc_sys_call_handler+0x20c/0x5a0 [ 2868.278109] ? proc_sys_lookup+0x590/0x590 [ 2868.278656] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2868.279325] new_sync_write+0x42c/0x660 [ 2868.279845] ? new_sync_read+0x6f0/0x6f0 [ 2868.280391] ? ksys_write+0x12d/0x260 [ 2868.280884] ? lock_release+0x680/0x680 [ 2868.281393] ? avc_policy_seqno+0x9/0x70 [ 2868.281906] ? selinux_file_permission+0x92/0x520 13:02:02 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2868.282526] vfs_write+0x7c0/0xb10 [ 2868.283233] ksys_write+0x12d/0x260 [ 2868.283725] ? __ia32_sys_read+0xb0/0xb0 [ 2868.284276] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2868.284982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2868.285670] do_syscall_64+0x33/0x40 [ 2868.286165] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2868.286848] RIP: 0033:0x7f408a76fb19 [ 2868.287342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2868.289746] RSP: 002b:00007f4087ce5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2868.290774] RAX: ffffffffffffffda RBX: 00007f408a882f60 RCX: 00007f408a76fb19 [ 2868.291731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2868.292639] RBP: 00007f4087ce51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.293543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.294452] R13: 00007ffe02e4bfaf R14: 00007f4087ce5300 R15: 0000000000022000 13:02:02 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:02 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x35}, {0x6}]}) pwrite64(r0, &(0x7f0000000040)="bc9d17be05f25b", 0x7, 0x1) 13:02:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) (fail_nth: 1) [ 2868.319372] FAULT_INJECTION: forcing a failure. [ 2868.319372] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.322105] CPU: 0 PID: 15287 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2868.323762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2868.325778] Call Trace: [ 2868.326424] dump_stack+0x107/0x167 [ 2868.327308] should_fail.cold+0x5/0xa [ 2868.328229] should_failslab+0x5/0x20 [ 2868.329175] __kmalloc_track_caller+0x79/0x370 [ 2868.330273] ? strndup_user+0x74/0xe0 [ 2868.331194] memdup_user+0x22/0xd0 [ 2868.332051] strndup_user+0x74/0xe0 [ 2868.332935] __x64_sys_mount+0x133/0x300 [ 2868.333919] ? copy_mnt_ns+0xa00/0xa00 [ 2868.334865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2868.336132] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2868.337388] do_syscall_64+0x33/0x40 [ 2868.338285] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2868.339516] RIP: 0033:0x7f5acfa22b19 [ 2868.340416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2868.344865] RSP: 002b:00007f5accf98188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2868.346714] RAX: ffffffffffffffda RBX: 00007f5acfb35f60 RCX: 00007f5acfa22b19 [ 2868.348466] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2868.350184] RBP: 00007f5accf981d0 R08: 0000000020000540 R09: 0000000000000000 [ 2868.351901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.353631] R13: 00007fff5658eebf R14: 00007f5accf98300 R15: 0000000000022000 [ 2868.356862] audit: type=1326 audit(1766926922.609:37): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15289 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5793cc3b19 code=0x0 [ 2868.374026] 9pnet: Insufficient options for proto=fd 13:02:02 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 2) 13:02:02 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) (fail_nth: 2) [ 2868.384184] FAULT_INJECTION: forcing a failure. [ 2868.384184] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.385615] CPU: 1 PID: 15293 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2868.386501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2868.387574] Call Trace: [ 2868.387894] dump_stack+0x107/0x167 [ 2868.388345] should_fail.cold+0x5/0xa [ 2868.388795] ? do_seccomp+0x2da/0x2600 [ 2868.389260] should_failslab+0x5/0x20 [ 2868.389710] kmem_cache_alloc_trace+0x55/0x320 [ 2868.390253] do_seccomp+0x2da/0x2600 [ 2868.390699] ? wait_for_completion_io+0x270/0x270 [ 2868.391279] ? __seccomp_filter+0x1530/0x1530 [ 2868.391817] ? fput_many+0x2f/0x1a0 [ 2868.392284] ? ksys_write+0x1a9/0x260 [ 2868.392756] ? __ia32_sys_read+0xb0/0xb0 [ 2868.393264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2868.393889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2868.394494] do_syscall_64+0x33/0x40 [ 2868.394937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2868.395540] RIP: 0033:0x7fb6b1db2b19 [ 2868.395975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2868.398158] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2868.399107] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2868.400002] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2868.400854] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.401694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.402540] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 [ 2868.424166] FAULT_INJECTION: forcing a failure. [ 2868.424166] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.426931] CPU: 0 PID: 15296 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2868.428575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2868.430552] Call Trace: [ 2868.431181] dump_stack+0x107/0x167 [ 2868.432049] should_fail.cold+0x5/0xa [ 2868.432962] ? create_object.isra.0+0x3a/0xa30 [ 2868.434039] should_failslab+0x5/0x20 [ 2868.434949] kmem_cache_alloc+0x5b/0x310 [ 2868.435923] create_object.isra.0+0x3a/0xa30 [ 2868.436976] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2868.438197] __kmalloc_node+0x1ae/0x420 [ 2868.439149] ? ns_capable_noaudit+0xe5/0x110 [ 2868.440194] kvmalloc_node+0x119/0x170 [ 2868.441128] proc_sys_call_handler+0x20c/0x5a0 [ 2868.442215] ? proc_sys_lookup+0x590/0x590 [ 2868.443214] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2868.444479] new_sync_write+0x42c/0x660 [ 2868.445425] ? new_sync_read+0x6f0/0x6f0 [ 2868.446382] ? ksys_write+0x12d/0x260 [ 2868.447303] ? lock_release+0x680/0x680 [ 2868.448244] ? avc_policy_seqno+0x9/0x70 [ 2868.449220] ? selinux_file_permission+0x92/0x520 [ 2868.450380] vfs_write+0x7c0/0xb10 [ 2868.451231] ksys_write+0x12d/0x260 [ 2868.452101] ? __ia32_sys_read+0xb0/0xb0 [ 2868.453077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 13:02:02 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 3) [ 2868.454316] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2868.455765] do_syscall_64+0x33/0x40 [ 2868.456685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2868.457925] RIP: 0033:0x7f408a76fb19 [ 2868.458824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2868.463289] RSP: 002b:00007f4087ce5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2868.465142] RAX: ffffffffffffffda RBX: 00007f408a882f60 RCX: 00007f408a76fb19 [ 2868.466872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2868.468609] RBP: 00007f4087ce51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.469171] FAULT_INJECTION: forcing a failure. [ 2868.469171] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.470335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.470348] R13: 00007ffe02e4bfaf R14: 00007f4087ce5300 R15: 0000000000022000 [ 2868.473608] CPU: 1 PID: 15299 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2868.474455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2868.475455] Call Trace: [ 2868.475780] dump_stack+0x107/0x167 [ 2868.476222] should_fail.cold+0x5/0xa [ 2868.476689] ? create_object.isra.0+0x3a/0xa30 [ 2868.477244] should_failslab+0x5/0x20 [ 2868.477702] kmem_cache_alloc+0x5b/0x310 [ 2868.478187] create_object.isra.0+0x3a/0xa30 [ 2868.478722] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2868.479344] kmem_cache_alloc_trace+0x151/0x320 [ 2868.479910] do_seccomp+0x2da/0x2600 [ 2868.480364] ? wait_for_completion_io+0x270/0x270 [ 2868.480941] ? __seccomp_filter+0x1530/0x1530 [ 2868.481475] ? fput_many+0x2f/0x1a0 [ 2868.481910] ? ksys_write+0x1a9/0x260 [ 2868.482364] ? __ia32_sys_read+0xb0/0xb0 [ 2868.482862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2868.483494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2868.484115] do_syscall_64+0x33/0x40 [ 2868.484577] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2868.485199] RIP: 0033:0x7fb6b1db2b19 [ 2868.485640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2868.487851] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2868.488785] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2868.489638] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2868.490500] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.491348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.492198] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 13:02:02 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x8, 0x2, {0x0, 0x1, 0x3b, 0x3, 0x400}, 0x8}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:02 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2868.544952] 9pnet: Insufficient options for proto=fd 13:02:02 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevma', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 1) 13:02:02 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2868.605906] FAULT_INJECTION: forcing a failure. [ 2868.605906] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.607302] CPU: 1 PID: 15310 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2868.608095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2868.609066] Call Trace: [ 2868.609374] dump_stack+0x107/0x167 [ 2868.609794] should_fail.cold+0x5/0xa [ 2868.610235] should_failslab+0x5/0x20 [ 2868.610672] __kmalloc_track_caller+0x79/0x370 [ 2868.611198] ? strndup_user+0x74/0xe0 [ 2868.611641] memdup_user+0x22/0xd0 [ 2868.612046] strndup_user+0x74/0xe0 [ 2868.612485] __x64_sys_mount+0x133/0x300 [ 2868.612953] ? copy_mnt_ns+0xa00/0xa00 [ 2868.613411] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2868.614009] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2868.614629] do_syscall_64+0x33/0x40 [ 2868.615080] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2868.615706] RIP: 0033:0x7f3826f8db19 [ 2868.616170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2868.618316] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2868.619204] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2868.620022] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2868.620860] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2868.621700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.622565] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:02:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) (fail_nth: 2) 13:02:02 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 4) 13:02:02 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) (fail_nth: 3) [ 2868.689944] FAULT_INJECTION: forcing a failure. [ 2868.689944] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.692457] CPU: 0 PID: 15316 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2868.693909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2868.695641] Call Trace: [ 2868.696190] FAULT_INJECTION: forcing a failure. [ 2868.696190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2868.696213] dump_stack+0x107/0x167 [ 2868.696235] should_fail.cold+0x5/0xa [ 2868.699140] ? __get_vm_area_node+0xd4/0x340 [ 2868.700057] should_failslab+0x5/0x20 [ 2868.700873] kmem_cache_alloc_node_trace+0x59/0x340 [ 2868.701922] __get_vm_area_node+0xd4/0x340 [ 2868.702806] __vmalloc_node_range+0x13f/0x9e0 [ 2868.703743] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2868.704754] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2868.705766] ? lock_acquire+0x197/0x470 [ 2868.706595] ? create_object.isra.0+0x3ad/0xa30 [ 2868.707566] ? __vmalloc_node+0x110/0x110 [ 2868.708442] ? lock_release+0x680/0x680 [ 2868.709272] ? find_held_lock+0x2c/0x110 [ 2868.710124] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2868.711123] __vmalloc_node+0xb5/0x110 [ 2868.711938] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2868.712969] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2868.714159] bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2868.715133] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2868.716320] bpf_prog_alloc+0x2c/0x230 [ 2868.717130] ? trace_hardirqs_on+0x5b/0x180 [ 2868.718042] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2868.719226] bpf_prog_create_from_user+0xad/0x2f0 [ 2868.720243] do_seccomp+0x31f/0x2600 [ 2868.721030] ? wait_for_completion_io+0x270/0x270 [ 2868.722038] ? __seccomp_filter+0x1530/0x1530 [ 2868.722978] ? fput_many+0x2f/0x1a0 [ 2868.723736] ? ksys_write+0x1a9/0x260 [ 2868.724540] ? __ia32_sys_read+0xb0/0xb0 [ 2868.725391] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2868.726490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2868.727568] do_syscall_64+0x33/0x40 [ 2868.728353] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2868.729420] RIP: 0033:0x7fb6b1db2b19 [ 2868.730194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2868.734025] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2868.735601] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2868.737097] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2868.738583] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.740083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.741584] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 [ 2868.743098] CPU: 1 PID: 15320 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 2868.743710] syz-executor.6: vmalloc: allocation failure: 4096 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 2868.743962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2868.746309] ,cpuset= [ 2868.747143] Call Trace: [ 2868.747172] dump_stack+0x107/0x167 [ 2868.747673] syz6 [ 2868.747943] should_fail.cold+0x5/0xa [ 2868.747961] _copy_to_user+0x2e/0x180 [ 2868.747978] simple_read_from_buffer+0xcc/0x160 [ 2868.749352] ,mems_allowed=0 [ 2868.749566] proc_fail_nth_read+0x198/0x230 [ 2868.750366] [ 2868.750784] ? proc_sessionid_read+0x230/0x230 [ 2868.753278] ? security_file_permission+0xb1/0xe0 [ 2868.753840] ? proc_sessionid_read+0x230/0x230 [ 2868.754373] vfs_read+0x228/0x620 [ 2868.754777] ksys_read+0x12d/0x260 [ 2868.755192] ? vfs_write+0xb10/0xb10 [ 2868.755629] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2868.756239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2868.756852] do_syscall_64+0x33/0x40 [ 2868.757291] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2868.757885] RIP: 0033:0x7f408a72269c [ 2868.758331] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2868.760470] RSP: 002b:00007f4087ce5170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2868.761368] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f408a72269c [ 2868.762190] RDX: 000000000000000f RSI: 00007f4087ce51e0 RDI: 0000000000000004 [ 2868.763023] RBP: 00007f4087ce51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.763847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.764671] R13: 00007ffe02e4bfaf R14: 00007f4087ce5300 R15: 0000000000022000 [ 2868.765521] CPU: 0 PID: 15316 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2868.766969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2868.768706] Call Trace: [ 2868.769257] dump_stack+0x107/0x167 [ 2868.770037] warn_alloc.cold+0x95/0x18a [ 2868.770878] ? zone_watermark_ok_safe+0x260/0x260 [ 2868.771894] ? __get_vm_area_node+0xd4/0x340 [ 2868.772821] ? __kasan_kmalloc.constprop.0+0xa2/0xd0 [ 2868.773881] ? __get_vm_area_node+0x262/0x340 [ 2868.774824] __vmalloc_node_range+0x58f/0x9e0 [ 2868.775771] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2868.776787] ? lock_acquire+0x197/0x470 [ 2868.777620] ? create_object.isra.0+0x3ad/0xa30 [ 2868.778613] ? __vmalloc_node+0x110/0x110 [ 2868.779477] ? lock_release+0x680/0x680 [ 2868.780319] ? find_held_lock+0x2c/0x110 [ 2868.781178] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2868.782173] __vmalloc_node+0xb5/0x110 [ 2868.782981] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2868.783997] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2868.785185] bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2868.786180] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2868.787367] bpf_prog_alloc+0x2c/0x230 [ 2868.788184] ? trace_hardirqs_on+0x5b/0x180 [ 2868.789087] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2868.790285] bpf_prog_create_from_user+0xad/0x2f0 [ 2868.791321] do_seccomp+0x31f/0x2600 [ 2868.792109] ? wait_for_completion_io+0x270/0x270 [ 2868.793123] ? __seccomp_filter+0x1530/0x1530 [ 2868.794059] ? fput_many+0x2f/0x1a0 [ 2868.794814] ? ksys_write+0x1a9/0x260 [ 2868.795604] ? __ia32_sys_read+0xb0/0xb0 [ 2868.796477] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2868.797578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2868.798667] do_syscall_64+0x33/0x40 [ 2868.799454] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2868.800554] RIP: 0033:0x7fb6b1db2b19 [ 2868.801336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2868.805251] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2868.806868] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2868.808382] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2868.809890] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.811389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.812918] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 [ 2868.814481] Mem-Info: [ 2868.815027] active_anon:72 inactive_anon:40855 isolated_anon:0 [ 2868.815027] active_file:16392 inactive_file:52558 isolated_file:0 [ 2868.815027] unevictable:0 dirty:337 writeback:0 [ 2868.815027] slab_reclaimable:9026 slab_unreclaimable:62204 [ 2868.815027] mapped:81355 shmem:192 pagetables:8110 bounce:0 [ 2868.815027] free:150061 free_pcp:488 free_cma:0 [ 2868.821773] Node 0 active_anon:288kB inactive_anon:163420kB active_file:65568kB inactive_file:210232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:325420kB dirty:1348kB writeback:0kB shmem:768kB writeback_tmp:0kB kernel_stack:11232kB all_unreclaimable? no [ 2868.826771] Node 0 DMA free:15908kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2868.832283] lowmem_reserve[]: 0 1616 1616 1616 [ 2868.833310] Node 0 DMA32 free:583760kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:288kB inactive_anon:163420kB active_file:65568kB inactive_file:210232kB unevictable:0kB writepending:1412kB present:2080640kB managed:1660444kB mlocked:0kB pagetables:32440kB bounce:0kB free_pcp:1876kB local_pcp:1252kB free_cma:0kB 13:02:03 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 2) [ 2868.839798] lowmem_reserve[]: 0 0 0 0 [ 2868.840667] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 2868.843651] Node 0 DMA32: 112*4kB (UME) 45*8kB (UME) 13*16kB (UME) 4*32kB (ME) 5*64kB (UME) 12*128kB (UM) 8*256kB (U) 2*512kB (ME) 2*1024kB (UM) 1*2048kB (U) 140*4096kB (M) = 583608kB [ 2868.847314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2868.849120] 29584 total pagecache pages [ 2868.849988] 0 pages in swap cache [ 2868.850748] Swap cache stats: add 0, delete 0, find 0/0 [ 2868.851904] Free swap = 0kB 13:02:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:02:03 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2868.852569] Total swap = 0kB [ 2868.853292] 524158 pages RAM [ 2868.853926] 0 pages HighMem/MovableOnly [ 2868.854771] 105070 pages reserved [ 2868.867701] FAULT_INJECTION: forcing a failure. [ 2868.867701] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.870138] CPU: 0 PID: 15425 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2868.871607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2868.873319] Call Trace: [ 2868.873875] dump_stack+0x107/0x167 [ 2868.874643] should_fail.cold+0x5/0xa [ 2868.875440] ? create_object.isra.0+0x3a/0xa30 [ 2868.876398] should_failslab+0x5/0x20 [ 2868.877200] kmem_cache_alloc+0x5b/0x310 [ 2868.878058] create_object.isra.0+0x3a/0xa30 [ 2868.878986] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2868.880059] __kmalloc_track_caller+0x177/0x370 [ 2868.881039] ? strndup_user+0x74/0xe0 [ 2868.881843] memdup_user+0x22/0xd0 [ 2868.882561] strndup_user+0x74/0xe0 [ 2868.883338] __x64_sys_mount+0x133/0x300 [ 2868.884192] ? copy_mnt_ns+0xa00/0xa00 [ 2868.885017] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2868.886116] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2868.887203] do_syscall_64+0x33/0x40 [ 2868.887990] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2868.889084] RIP: 0033:0x7f3826f8db19 [ 2868.889865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2868.893720] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2868.895309] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2868.896813] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2868.898325] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2868.899818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.901308] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:02:16 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x35}, {0x6}]}) pwrite64(r0, &(0x7f0000000040)="bc9d17be05f25b", 0x7, 0x1) 13:02:16 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 2881.842729] audit: type=1326 audit(1766926936.095:38): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15434 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5793cc3b19 code=0x0 13:02:16 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:16 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:16 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:02:16 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 5) 13:02:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 3) 13:02:16 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2881.876521] FAULT_INJECTION: forcing a failure. [ 2881.876521] name failslab, interval 1, probability 0, space 0, times 0 [ 2881.878199] CPU: 0 PID: 15446 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2881.879171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2881.880342] Call Trace: [ 2881.880726] dump_stack+0x107/0x167 [ 2881.881237] should_fail.cold+0x5/0xa [ 2881.881776] ? create_object.isra.0+0x3a/0xa30 [ 2881.882423] should_failslab+0x5/0x20 [ 2881.882957] kmem_cache_alloc+0x5b/0x310 [ 2881.883532] create_object.isra.0+0x3a/0xa30 [ 2881.884149] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2881.884874] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2881.885592] __get_vm_area_node+0xd4/0x340 [ 2881.886185] __vmalloc_node_range+0x13f/0x9e0 [ 2881.886810] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2881.887480] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2881.888152] ? lock_acquire+0x197/0x470 [ 2881.888711] ? create_object.isra.0+0x3ad/0xa30 [ 2881.889358] ? __vmalloc_node+0x110/0x110 [ 2881.889934] ? lock_release+0x680/0x680 [ 2881.890488] ? find_held_lock+0x2c/0x110 [ 2881.891051] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2881.891720] __vmalloc_node+0xb5/0x110 [ 2881.892282] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2881.892998] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2881.893654] 9pnet: Insufficient options for proto=fd [ 2881.893781] bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2881.893803] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2881.896344] bpf_prog_alloc+0x2c/0x230 [ 2881.896891] ? trace_hardirqs_on+0x5b/0x180 [ 2881.897486] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2881.898268] bpf_prog_create_from_user+0xad/0x2f0 [ 2881.898934] do_seccomp+0x31f/0x2600 [ 2881.899451] ? wait_for_completion_io+0x270/0x270 [ 2881.900118] ? __seccomp_filter+0x1530/0x1530 [ 2881.900765] ? fput_many+0x2f/0x1a0 [ 2881.901267] ? ksys_write+0x1a9/0x260 [ 2881.901792] ? __ia32_sys_read+0xb0/0xb0 [ 2881.902356] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2881.903085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2881.903799] do_syscall_64+0x33/0x40 [ 2881.904314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2881.905026] RIP: 0033:0x7fb6b1db2b19 [ 2881.905541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2881.908085] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2881.909137] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2881.910101] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2881.911082] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2881.912061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2881.913047] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 13:02:16 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) [ 2881.928980] FAULT_INJECTION: forcing a failure. [ 2881.928980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2881.930620] CPU: 0 PID: 15448 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2881.931566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2881.932676] Call Trace: [ 2881.933050] dump_stack+0x107/0x167 [ 2881.933551] should_fail.cold+0x5/0xa [ 2881.934072] _copy_from_user+0x2e/0x1b0 [ 2881.934613] memdup_user+0x65/0xd0 [ 2881.935094] strndup_user+0x74/0xe0 [ 2881.935589] __x64_sys_mount+0x133/0x300 [ 2881.936140] ? copy_mnt_ns+0xa00/0xa00 [ 2881.936678] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2881.937390] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2881.938093] do_syscall_64+0x33/0x40 [ 2881.938600] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2881.939305] RIP: 0033:0x7f3826f8db19 [ 2881.939808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2881.942310] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2881.943342] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2881.944301] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2881.945274] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2881.946241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2881.947209] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:02:16 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:16 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 2882.012844] 9pnet: Insufficient options for proto=fd 13:02:31 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x35}, {0x6}]}) 13:02:31 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:02:31 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xfdef) 13:02:31 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:31 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:31 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 6) 13:02:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 4) [ 2897.337881] FAULT_INJECTION: forcing a failure. [ 2897.337881] name failslab, interval 1, probability 0, space 0, times 0 [ 2897.340824] CPU: 0 PID: 15680 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2897.342568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2897.344656] Call Trace: [ 2897.345340] dump_stack+0x107/0x167 [ 2897.346251] should_fail.cold+0x5/0xa [ 2897.347078] ? copy_mount_options+0x55/0x180 [ 2897.348005] should_failslab+0x5/0x20 [ 2897.348827] kmem_cache_alloc_trace+0x55/0x320 [ 2897.349794] ? _copy_from_user+0xfb/0x1b0 [ 2897.350685] copy_mount_options+0x55/0x180 [ 2897.351570] __x64_sys_mount+0x1a8/0x300 [ 2897.352406] ? copy_mnt_ns+0xa00/0xa00 [ 2897.353243] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2897.354363] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2897.355468] do_syscall_64+0x33/0x40 [ 2897.356262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2897.357368] RIP: 0033:0x7f3826f8db19 [ 2897.358168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2897.362104] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2897.363726] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2897.365273] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2897.366804] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2897.368325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2897.369864] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 2897.373352] 9pnet: Insufficient options for proto=fd [ 2897.381396] FAULT_INJECTION: forcing a failure. [ 2897.381396] name failslab, interval 1, probability 0, space 0, times 0 [ 2897.384163] CPU: 1 PID: 15697 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2897.385742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2897.387608] Call Trace: [ 2897.388211] dump_stack+0x107/0x167 [ 2897.389047] should_fail.cold+0x5/0xa [ 2897.389904] ? create_object.isra.0+0x3a/0xa30 [ 2897.390918] should_failslab+0x5/0x20 [ 2897.391769] kmem_cache_alloc+0x5b/0x310 [ 2897.392702] create_object.isra.0+0x3a/0xa30 [ 2897.393688] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2897.394850] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2897.396022] __get_vm_area_node+0xd4/0x340 [ 2897.397006] __vmalloc_node_range+0x13f/0x9e0 [ 2897.398035] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2897.399133] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2897.400247] ? lock_acquire+0x197/0x470 [ 2897.401159] ? create_object.isra.0+0x3ad/0xa30 [ 2897.402200] ? __vmalloc_node+0x110/0x110 [ 2897.403143] ? lock_release+0x680/0x680 [ 2897.404049] ? find_held_lock+0x2c/0x110 [ 2897.405002] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2897.406073] __vmalloc_node+0xb5/0x110 [ 2897.406947] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2897.408017] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2897.409295] bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2897.410341] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2897.411596] bpf_prog_alloc+0x2c/0x230 [ 2897.412472] ? trace_hardirqs_on+0x5b/0x180 [ 2897.413449] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2897.414838] bpf_prog_create_from_user+0xad/0x2f0 13:02:31 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2897.416072] do_seccomp+0x31f/0x2600 [ 2897.417259] ? wait_for_completion_io+0x270/0x270 [ 2897.418583] ? __seccomp_filter+0x1530/0x1530 [ 2897.419792] ? fput_many+0x2f/0x1a0 [ 2897.420760] ? ksys_write+0x1a9/0x260 [ 2897.421781] ? __ia32_sys_read+0xb0/0xb0 [ 2897.422837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2897.424191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2897.425528] do_syscall_64+0x33/0x40 [ 2897.426493] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2897.427816] RIP: 0033:0x7fb6b1db2b19 [ 2897.428793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2897.433466] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2897.435433] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2897.437293] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2897.439150] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2897.441040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2897.442854] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 [ 2897.452275] audit: type=1326 audit(1766926951.703:39): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15673 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5793cc3b19 code=0x0 [ 2897.480863] 9pnet: Insufficient options for proto=fd 13:02:31 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 13:02:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:02:31 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:31 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x3fffff) 13:02:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 5) 13:02:31 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2897.618728] 9pnet: Insufficient options for proto=fd 13:02:31 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 7) 13:02:31 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) [ 2897.687561] 9pnet: Insufficient options for proto=fd [ 2897.691271] FAULT_INJECTION: forcing a failure. [ 2897.691271] name failslab, interval 1, probability 0, space 0, times 0 [ 2897.694115] CPU: 1 PID: 15838 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2897.695849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2897.697914] Call Trace: [ 2897.698564] dump_stack+0x107/0x167 [ 2897.699439] should_fail.cold+0x5/0xa [ 2897.700367] ? create_object.isra.0+0x3a/0xa30 [ 2897.701478] should_failslab+0x5/0x20 [ 2897.702388] kmem_cache_alloc+0x5b/0x310 [ 2897.703375] create_object.isra.0+0x3a/0xa30 [ 2897.704463] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2897.705746] kmem_cache_alloc_trace+0x151/0x320 [ 2897.706860] copy_mount_options+0x55/0x180 [ 2897.707929] __x64_sys_mount+0x1a8/0x300 [ 2897.708965] ? copy_mnt_ns+0xa00/0xa00 [ 2897.709938] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2897.711246] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2897.712529] do_syscall_64+0x33/0x40 [ 2897.713466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2897.714713] RIP: 0033:0x7f3826f8db19 [ 2897.715633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2897.720292] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2897.722216] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2897.724028] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2897.725830] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2897.727612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2897.729408] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 2897.764873] FAULT_INJECTION: forcing a failure. [ 2897.764873] name failslab, interval 1, probability 0, space 0, times 0 [ 2897.767896] CPU: 1 PID: 15883 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2897.769637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2897.771712] Call Trace: [ 2897.772375] dump_stack+0x107/0x167 [ 2897.773324] should_fail.cold+0x5/0xa [ 2897.774271] ? create_object.isra.0+0x3a/0xa30 [ 2897.775401] should_failslab+0x5/0x20 [ 2897.776356] kmem_cache_alloc+0x5b/0x310 [ 2897.777388] ? bpf_prog_create_from_user+0xad/0x2f0 [ 2897.778649] ? do_seccomp+0x31f/0x2600 [ 2897.779641] create_object.isra.0+0x3a/0xa30 [ 2897.780760] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2897.782023] kmem_cache_alloc_node+0x169/0x330 [ 2897.783175] alloc_vmap_area+0x148/0x1d10 [ 2897.784216] ? kmem_cache_alloc_node_trace+0x16d/0x340 [ 2897.785554] ? lock_downgrade+0x6d0/0x6d0 [ 2897.786607] ? purge_vmap_area_lazy+0xc0/0xc0 [ 2897.787717] ? kasan_unpoison_shadow+0x33/0x50 [ 2897.788866] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2897.790139] __get_vm_area_node+0x127/0x340 [ 2897.791227] __vmalloc_node_range+0x13f/0x9e0 [ 2897.792353] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2897.793551] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2897.794759] ? lock_acquire+0x197/0x470 [ 2897.795748] ? create_object.isra.0+0x3ad/0xa30 [ 2897.796884] ? __vmalloc_node+0x110/0x110 [ 2897.797871] ? lock_release+0x680/0x680 [ 2897.798825] ? find_held_lock+0x2c/0x110 [ 2897.799805] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2897.800991] __vmalloc_node+0xb5/0x110 [ 2897.801936] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2897.803113] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2897.804488] bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2897.805632] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2897.807016] bpf_prog_alloc+0x2c/0x230 [ 2897.807979] ? trace_hardirqs_on+0x5b/0x180 [ 2897.809045] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2897.810432] bpf_prog_create_from_user+0xad/0x2f0 [ 2897.811606] do_seccomp+0x31f/0x2600 [ 2897.812503] ? wait_for_completion_io+0x270/0x270 [ 2897.813688] ? __seccomp_filter+0x1530/0x1530 [ 2897.814766] ? fput_many+0x2f/0x1a0 [ 2897.815633] ? ksys_write+0x1a9/0x260 [ 2897.816556] ? __ia32_sys_read+0xb0/0xb0 [ 2897.817557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2897.818832] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2897.820081] do_syscall_64+0x33/0x40 [ 2897.821003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2897.822244] RIP: 0033:0x7fb6b1db2b19 [ 2897.823150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2897.827609] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2897.829444] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2897.831184] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2897.832919] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2897.834618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2897.836330] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 13:02:45 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 8) 13:02:45 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x1000000) 13:02:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 6) 13:02:45 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:45 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:45 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 13:02:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 2911.110685] FAULT_INJECTION: forcing a failure. [ 2911.110685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2911.112072] CPU: 1 PID: 15920 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2911.112896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2911.113885] Call Trace: [ 2911.114201] dump_stack+0x107/0x167 [ 2911.114636] should_fail.cold+0x5/0xa [ 2911.115101] _copy_from_user+0x2e/0x1b0 [ 2911.115578] copy_mount_options+0x76/0x180 [ 2911.116058] __x64_sys_mount+0x1a8/0x300 [ 2911.116519] ? copy_mnt_ns+0xa00/0xa00 [ 2911.116971] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2911.117570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2911.118151] do_syscall_64+0x33/0x40 [ 2911.118578] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2911.119159] RIP: 0033:0x7f3826f8db19 [ 2911.119608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2911.121831] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2911.122739] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2911.123582] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2911.124386] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2911.125220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2911.126067] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 2911.137412] 9pnet: Insufficient options for proto=fd [ 2911.142972] FAULT_INJECTION: forcing a failure. [ 2911.142972] name failslab, interval 1, probability 0, space 0, times 0 [ 2911.145984] CPU: 0 PID: 15924 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2911.147729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2911.149822] Call Trace: [ 2911.150486] dump_stack+0x107/0x167 [ 2911.151404] should_fail.cold+0x5/0xa [ 2911.152368] ? kmemleak_scan_area+0xa6/0x360 [ 2911.153487] should_failslab+0x5/0x20 [ 2911.154452] kmem_cache_alloc+0x5b/0x310 [ 2911.155468] kmemleak_scan_area+0xa6/0x360 [ 2911.156534] alloc_vmap_area+0x171/0x1d10 [ 2911.157579] ? kmem_cache_alloc_node_trace+0x16d/0x340 [ 2911.158890] ? lock_downgrade+0x6d0/0x6d0 [ 2911.159950] ? purge_vmap_area_lazy+0xc0/0xc0 [ 2911.161085] ? kasan_unpoison_shadow+0x33/0x50 [ 2911.162217] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2911.163489] __get_vm_area_node+0x127/0x340 [ 2911.164574] __vmalloc_node_range+0x13f/0x9e0 [ 2911.165661] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2911.166667] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2911.167684] ? lock_acquire+0x197/0x470 [ 2911.168520] ? create_object.isra.0+0x3ad/0xa30 13:02:45 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2911.169496] ? __vmalloc_node+0x110/0x110 [ 2911.170531] ? lock_release+0x680/0x680 [ 2911.171373] ? find_held_lock+0x2c/0x110 [ 2911.172233] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2911.173255] __vmalloc_node+0xb5/0x110 [ 2911.174085] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2911.174475] 9pnet: Insufficient options for proto=fd [ 2911.175102] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2911.175120] bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2911.175140] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2911.179111] bpf_prog_alloc+0x2c/0x230 [ 2911.179928] ? trace_hardirqs_on+0x5b/0x180 [ 2911.180846] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2911.182076] bpf_prog_create_from_user+0xad/0x2f0 [ 2911.183120] do_seccomp+0x31f/0x2600 [ 2911.183918] ? wait_for_completion_io+0x270/0x270 [ 2911.184952] ? __seccomp_filter+0x1530/0x1530 [ 2911.185917] ? fput_many+0x2f/0x1a0 [ 2911.186684] ? ksys_write+0x1a9/0x260 [ 2911.187505] ? __ia32_sys_read+0xb0/0xb0 [ 2911.188367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2911.189509] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2911.190610] do_syscall_64+0x33/0x40 [ 2911.191402] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2911.192510] RIP: 0033:0x7fb6b1db2b19 13:02:45 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2911.193305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2911.197296] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2911.198947] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2911.200506] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2911.202064] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2911.203575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2911.205143] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 [ 2911.223440] 9pnet: Insufficient options for proto=fd [ 2911.249098] 9pnet: Insufficient options for proto=fd 13:02:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 13:02:45 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffdffff) 13:02:45 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x00000', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:45 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2911.337942] 9pnet: Insufficient options for proto=fd 13:02:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 7) 13:02:58 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xffff3f00) 13:02:58 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x00000', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:58 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:02:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 13:02:58 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dflt', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:58 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:58 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 9) [ 2924.737451] 9pnet: Insufficient options for proto=fd [ 2924.762685] FAULT_INJECTION: forcing a failure. [ 2924.762685] name failslab, interval 1, probability 0, space 0, times 0 [ 2924.765309] CPU: 0 PID: 16070 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2924.766869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2924.768728] Call Trace: [ 2924.769331] dump_stack+0x107/0x167 [ 2924.770155] should_fail.cold+0x5/0xa [ 2924.771012] ? getname_flags.part.0+0x50/0x4f0 [ 2924.772030] should_failslab+0x5/0x20 [ 2924.772894] kmem_cache_alloc+0x5b/0x310 [ 2924.773812] getname_flags.part.0+0x50/0x4f0 [ 2924.774798] ? _copy_from_user+0xfb/0x1b0 [ 2924.775726] user_path_at_empty+0xa1/0x100 [ 2924.776665] __x64_sys_mount+0x1e9/0x300 [ 2924.777573] ? copy_mnt_ns+0xa00/0xa00 [ 2924.778439] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2924.779604] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2924.780745] do_syscall_64+0x33/0x40 [ 2924.781584] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2924.782717] RIP: 0033:0x7f3826f8db19 [ 2924.783541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2924.787616] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2924.789318] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2924.790892] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2924.792465] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2924.794025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2924.795579] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 2924.810037] FAULT_INJECTION: forcing a failure. [ 2924.810037] name failslab, interval 1, probability 0, space 0, times 0 [ 2924.812536] CPU: 0 PID: 16083 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2924.813909] 9pnet: Insufficient options for proto=fd 13:02:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 13:02:59 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2924.814051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2924.814062] Call Trace: [ 2924.817281] dump_stack+0x107/0x167 [ 2924.818082] should_fail.cold+0x5/0xa [ 2924.818916] ? __vmalloc_node_range+0x7a2/0x9e0 [ 2924.819925] should_failslab+0x5/0x20 [ 2924.820754] __kmalloc_node+0x76/0x420 [ 2924.821616] __vmalloc_node_range+0x7a2/0x9e0 [ 2924.822598] ? create_object.isra.0+0x3ad/0xa30 [ 2924.823607] ? __vmalloc_node+0x110/0x110 [ 2924.824511] ? lock_release+0x680/0x680 [ 2924.825381] ? find_held_lock+0x2c/0x110 [ 2924.826255] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2924.827287] __vmalloc_node+0xb5/0x110 [ 2924.828122] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2924.829171] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2924.830386] bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2924.831385] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2924.832595] bpf_prog_alloc+0x2c/0x230 [ 2924.833433] ? trace_hardirqs_on+0x5b/0x180 [ 2924.834360] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2924.835579] bpf_prog_create_from_user+0xad/0x2f0 [ 2924.836615] do_seccomp+0x31f/0x2600 [ 2924.837420] ? wait_for_completion_io+0x270/0x270 [ 2924.838454] ? __seccomp_filter+0x1530/0x1530 [ 2924.839415] ? fput_many+0x2f/0x1a0 [ 2924.840191] ? ksys_write+0x1a9/0x260 [ 2924.841017] ? __ia32_sys_read+0xb0/0xb0 [ 2924.842020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2924.843350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2924.844660] do_syscall_64+0x33/0x40 [ 2924.845612] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2924.846912] RIP: 0033:0x7fb6b1db2b19 [ 2924.847865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2924.852527] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2924.854461] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2924.856265] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2924.858069] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2924.859861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2924.861660] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 13:02:59 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:59 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dflt', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2924.889123] 9pnet: Insufficient options for proto=fd 13:02:59 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xfffffdef) 13:02:59 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:59 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x35}]}) [ 2924.974838] 9pnet: Insufficient options for proto=fd 13:02:59 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dflt', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:02:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 8) 13:02:59 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xffffff7f) [ 2925.048385] FAULT_INJECTION: forcing a failure. [ 2925.048385] name failslab, interval 1, probability 0, space 0, times 0 [ 2925.049751] CPU: 1 PID: 16207 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2925.050525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2925.051443] Call Trace: [ 2925.051746] dump_stack+0x107/0x167 [ 2925.052156] should_fail.cold+0x5/0xa [ 2925.052585] ? create_object.isra.0+0x3a/0xa30 [ 2925.053113] should_failslab+0x5/0x20 [ 2925.053541] kmem_cache_alloc+0x5b/0x310 [ 2925.054001] create_object.isra.0+0x3a/0xa30 [ 2925.054495] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2925.055062] kmem_cache_alloc+0x159/0x310 [ 2925.055533] getname_flags.part.0+0x50/0x4f0 [ 2925.056038] ? _copy_from_user+0xfb/0x1b0 [ 2925.056505] user_path_at_empty+0xa1/0x100 [ 2925.056992] __x64_sys_mount+0x1e9/0x300 [ 2925.057450] ? copy_mnt_ns+0xa00/0xa00 [ 2925.057893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2925.058483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2925.059073] do_syscall_64+0x33/0x40 [ 2925.059493] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2925.060070] RIP: 0033:0x7f3826f8db19 [ 2925.060485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2925.062547] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2925.063407] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2925.064201] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2925.065005] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2925.065798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2925.066596] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:03:11 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x7ffffffff000) 13:03:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 9) 13:03:11 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:03:11 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 10) 13:03:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x35}]}) 13:03:11 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x00000', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:11 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgi', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:11 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2937.657181] 9pnet: Insufficient options for proto=fd [ 2937.660170] FAULT_INJECTION: forcing a failure. [ 2937.660170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2937.662490] CPU: 0 PID: 16225 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2937.663648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2937.665055] Call Trace: [ 2937.665506] dump_stack+0x107/0x167 [ 2937.666121] should_fail.cold+0x5/0xa [ 2937.666767] strncpy_from_user+0x34/0x470 [ 2937.667473] getname_flags.part.0+0x95/0x4f0 [ 2937.668207] ? _copy_from_user+0xfb/0x1b0 [ 2937.668898] user_path_at_empty+0xa1/0x100 [ 2937.669614] __x64_sys_mount+0x1e9/0x300 [ 2937.670301] ? copy_mnt_ns+0xa00/0xa00 [ 2937.670953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2937.671823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2937.672676] do_syscall_64+0x33/0x40 [ 2937.673307] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2937.674167] RIP: 0033:0x7f3826f8db19 [ 2937.674786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2937.677848] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2937.679119] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2937.680311] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2937.681489] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2937.682666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2937.683860] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 2937.692188] FAULT_INJECTION: forcing a failure. [ 2937.692188] name failslab, interval 1, probability 0, space 0, times 0 [ 2937.693474] CPU: 1 PID: 16295 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2937.694221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2937.695106] Call Trace: [ 2937.695397] dump_stack+0x107/0x167 [ 2937.695800] should_fail.cold+0x5/0xa [ 2937.696212] ? create_object.isra.0+0x3a/0xa30 [ 2937.696708] should_failslab+0x5/0x20 [ 2937.697124] kmem_cache_alloc+0x5b/0x310 [ 2937.697563] create_object.isra.0+0x3a/0xa30 [ 2937.698034] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2937.698582] __kmalloc_node+0x1ae/0x420 [ 2937.699019] __vmalloc_node_range+0x7a2/0x9e0 [ 2937.699512] ? osq_unlock+0x1a0/0x1a0 [ 2937.699927] ? create_object.isra.0+0x3ad/0xa30 [ 2937.700431] ? __vmalloc_node+0x110/0x110 [ 2937.700881] ? find_held_lock+0x2c/0x110 [ 2937.701361] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2937.701882] __vmalloc_node+0xb5/0x110 [ 2937.702305] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2937.702832] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2937.703440] bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2937.703946] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2937.704557] bpf_prog_alloc+0x2c/0x230 [ 2937.704979] ? trace_hardirqs_on+0x5b/0x180 [ 2937.705453] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2937.706072] bpf_prog_create_from_user+0xad/0x2f0 [ 2937.706597] do_seccomp+0x31f/0x2600 [ 2937.707005] ? wait_for_completion_io+0x270/0x270 [ 2937.707524] ? __seccomp_filter+0x1530/0x1530 [ 2937.708010] ? fput_many+0x2f/0x1a0 [ 2937.708404] ? ksys_write+0x1a9/0x260 [ 2937.708821] ? __ia32_sys_read+0xb0/0xb0 [ 2937.709268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2937.709832] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2937.710393] do_syscall_64+0x33/0x40 [ 2937.710795] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2937.711350] RIP: 0033:0x7fb6b1db2b19 [ 2937.711756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2937.713745] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2937.714575] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2937.715343] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2937.716123] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2937.716894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2937.717674] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 13:03:11 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x35}]}) [ 2937.761939] 9pnet: Insufficient options for proto=fd 13:03:12 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevma', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:12 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xf0ffffff7f0000) 13:03:12 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 10) 13:03:12 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 11) 13:03:12 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgi', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2937.844001] 9pnet: Insufficient options for proto=fd [ 2937.845507] FAULT_INJECTION: forcing a failure. [ 2937.845507] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2937.847459] CPU: 0 PID: 16353 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2937.848587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2937.849949] Call Trace: [ 2937.850391] dump_stack+0x107/0x167 [ 2937.850979] should_fail.cold+0x5/0xa [ 2937.851593] __alloc_pages_nodemask+0x182/0x600 [ 2937.852353] ? __kmalloc_node+0x1ae/0x420 [ 2937.853035] ? lock_downgrade+0x6d0/0x6d0 [ 2937.853722] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2937.854686] ? trace_hardirqs_on+0x5b/0x180 [ 2937.855401] alloc_pages_current+0x187/0x280 [ 2937.856111] __vmalloc_node_range+0x60a/0x9e0 [ 2937.856851] ? create_object.isra.0+0x3ad/0xa30 [ 2937.857608] ? __vmalloc_node+0x110/0x110 [ 2937.858268] ? lock_release+0x680/0x680 [ 2937.858907] ? find_held_lock+0x2c/0x110 [ 2937.859577] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2937.860359] __vmalloc_node+0xb5/0x110 [ 2937.861002] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2937.861810] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2937.862731] bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2937.863511] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2937.864455] bpf_prog_alloc+0x2c/0x230 [ 2937.865096] ? trace_hardirqs_on+0x5b/0x180 [ 2937.865806] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2937.866730] bpf_prog_create_from_user+0xad/0x2f0 [ 2937.867519] do_seccomp+0x31f/0x2600 [ 2937.868126] ? wait_for_completion_io+0x270/0x270 [ 2937.868900] ? __seccomp_filter+0x1530/0x1530 [ 2937.869640] ? fput_many+0x2f/0x1a0 [ 2937.870224] ? ksys_write+0x1a9/0x260 [ 2937.870863] ? __ia32_sys_read+0xb0/0xb0 [ 2937.871525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2937.872395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2937.873233] do_syscall_64+0x33/0x40 [ 2937.873836] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2937.874687] RIP: 0033:0x7fb6b1db2b19 [ 2937.875289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2937.878321] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2937.879580] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2937.880752] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2937.881936] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2937.883124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2937.884309] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 13:03:12 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:03:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x35}, {}]}) [ 2937.898927] FAULT_INJECTION: forcing a failure. [ 2937.898927] name failslab, interval 1, probability 0, space 0, times 0 [ 2937.900221] CPU: 1 PID: 16422 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2937.900971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2937.901871] Call Trace: [ 2937.902162] dump_stack+0x107/0x167 [ 2937.902555] should_fail.cold+0x5/0xa [ 2937.902967] ? alloc_fs_context+0x57/0x840 [ 2937.903428] should_failslab+0x5/0x20 [ 2937.903846] kmem_cache_alloc_trace+0x55/0x320 [ 2937.904342] alloc_fs_context+0x57/0x840 [ 2937.904787] path_mount+0xab1/0x21e0 [ 2937.905205] ? strncpy_from_user+0x9e/0x470 [ 2937.905674] ? finish_automount+0xa90/0xa90 [ 2937.906141] ? getname_flags.part.0+0x1dd/0x4f0 [ 2937.906649] ? _copy_from_user+0xfb/0x1b0 [ 2937.907101] __x64_sys_mount+0x282/0x300 [ 2937.907541] ? copy_mnt_ns+0xa00/0xa00 [ 2937.907979] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2937.908547] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2937.909113] do_syscall_64+0x33/0x40 [ 2937.909520] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2937.910078] RIP: 0033:0x7f3826f8db19 [ 2937.910485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2937.912495] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2937.913332] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2937.914102] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2937.914880] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2937.915649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2937.916422] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 2950.670016] FAULT_INJECTION: forcing a failure. [ 2950.670016] name failslab, interval 1, probability 0, space 0, times 0 [ 2950.671768] FAULT_INJECTION: forcing a failure. [ 2950.671768] name failslab, interval 1, probability 0, space 0, times 0 [ 2950.672848] CPU: 1 PID: 16472 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2950.675704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2950.677645] Call Trace: [ 2950.678262] dump_stack+0x107/0x167 [ 2950.679096] should_fail.cold+0x5/0xa [ 2950.679989] ? create_object.isra.0+0x3a/0xa30 [ 2950.681048] should_failslab+0x5/0x20 [ 2950.681930] kmem_cache_alloc+0x5b/0x310 [ 2950.682871] create_object.isra.0+0x3a/0xa30 [ 2950.683893] kmemleak_vmalloc+0x49/0x120 [ 2950.684836] __vmalloc_node_range+0x574/0x9e0 [ 2950.685887] ? create_object.isra.0+0x3ad/0xa30 [ 2950.686955] ? __vmalloc_node+0x110/0x110 [ 2950.687914] ? lock_release+0x680/0x680 [ 2950.688834] ? find_held_lock+0x2c/0x110 [ 2950.689781] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2950.690906] __vmalloc_node+0xb5/0x110 [ 2950.691793] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2950.692897] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2950.694198] bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2950.695272] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2950.696561] bpf_prog_alloc+0x2c/0x230 [ 2950.697455] ? trace_hardirqs_on+0x5b/0x180 [ 2950.698437] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2950.699729] bpf_prog_create_from_user+0xad/0x2f0 [ 2950.700825] do_seccomp+0x31f/0x2600 [ 2950.701678] ? wait_for_completion_io+0x270/0x270 [ 2950.702770] ? __seccomp_filter+0x1530/0x1530 [ 2950.703788] ? fput_many+0x2f/0x1a0 [ 2950.704608] ? ksys_write+0x1a9/0x260 [ 2950.705481] ? __ia32_sys_read+0xb0/0xb0 [ 2950.706415] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2950.707602] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2950.708774] do_syscall_64+0x33/0x40 [ 2950.709637] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2950.710796] RIP: 0033:0x7fb6b1db2b19 [ 2950.711644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2950.715851] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2950.717606] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2950.719253] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2950.720863] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2950.722494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2950.724104] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 [ 2950.725766] CPU: 0 PID: 16474 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2950.726665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2950.727725] Call Trace: [ 2950.728066] dump_stack+0x107/0x167 [ 2950.728535] should_fail.cold+0x5/0xa [ 2950.729037] ? create_object.isra.0+0x3a/0xa30 [ 2950.729632] should_failslab+0x5/0x20 [ 2950.730123] kmem_cache_alloc+0x5b/0x310 [ 2950.730653] create_object.isra.0+0x3a/0xa30 [ 2950.731227] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2950.731895] kmem_cache_alloc_trace+0x151/0x320 [ 2950.732510] alloc_fs_context+0x57/0x840 [ 2950.733045] path_mount+0xab1/0x21e0 [ 2950.733536] ? strncpy_from_user+0x9e/0x470 [ 2950.734098] ? finish_automount+0xa90/0xa90 [ 2950.734656] ? getname_flags.part.0+0x1dd/0x4f0 [ 2950.735264] ? _copy_from_user+0xfb/0x1b0 [ 2950.735800] __x64_sys_mount+0x282/0x300 [ 2950.736331] ? copy_mnt_ns+0xa00/0xa00 [ 2950.736834] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2950.737513] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2950.738188] do_syscall_64+0x33/0x40 [ 2950.738668] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2950.739334] RIP: 0033:0x7f3826f8db19 13:03:24 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x100000000000000) 13:03:24 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevma', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:24 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 12) 13:03:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 11) 13:03:24 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:24 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgi', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2950.739813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2950.742405] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2950.743381] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2950.744295] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2950.745212] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2950.746127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2950.747042] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 2950.752331] 9pnet: Insufficient options for proto=fd 13:03:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:03:25 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x35}, {}]}) 13:03:25 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:25 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffdffffffffffff) 13:03:25 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x35}, {}]}) 13:03:25 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:25 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 13) 13:03:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 2950.882269] FAULT_INJECTION: forcing a failure. [ 2950.882269] name failslab, interval 1, probability 0, space 0, times 0 [ 2950.883872] CPU: 0 PID: 16598 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2950.884613] 9pnet: Insufficient options for proto=fd [ 2950.884754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2950.884767] Call Trace: [ 2950.887206] dump_stack+0x107/0x167 [ 2950.887646] should_fail.cold+0x5/0xa [ 2950.888107] ? create_object.isra.0+0x3a/0xa30 [ 2950.888657] should_failslab+0x5/0x20 [ 2950.889114] kmem_cache_alloc+0x5b/0x310 [ 2950.889616] create_object.isra.0+0x3a/0xa30 [ 2950.890146] kmemleak_vmalloc+0x49/0x120 [ 2950.890639] __vmalloc_node_range+0x574/0x9e0 [ 2950.891181] ? create_object.isra.0+0x3ad/0xa30 [ 2950.891741] ? __vmalloc_node+0x110/0x110 [ 2950.892249] ? lock_release+0x680/0x680 [ 2950.892733] ? find_held_lock+0x2c/0x110 [ 2950.893236] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2950.893811] __vmalloc_node+0xb5/0x110 [ 2950.894277] ? bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2950.894855] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2950.895528] bpf_prog_alloc_no_stats+0x32/0x2c0 [ 2950.896081] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2950.896752] bpf_prog_alloc+0x2c/0x230 [ 2950.897222] ? trace_hardirqs_on+0x5b/0x180 [ 2950.897737] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2950.898416] bpf_prog_create_from_user+0xad/0x2f0 [ 2950.898992] do_seccomp+0x31f/0x2600 [ 2950.899437] ? wait_for_completion_io+0x270/0x270 [ 2950.900010] ? __seccomp_filter+0x1530/0x1530 [ 2950.900545] ? fput_many+0x2f/0x1a0 [ 2950.900977] ? ksys_write+0x1a9/0x260 [ 2950.901443] ? __ia32_sys_read+0xb0/0xb0 [ 2950.901930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2950.902553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2950.903170] do_syscall_64+0x33/0x40 [ 2950.903614] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2950.904226] RIP: 0033:0x7fb6b1db2b19 [ 2950.904667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2950.906861] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2950.907770] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2950.908617] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2950.909472] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2950.910316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2950.911164] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 13:03:38 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xffff3f0000000000) 13:03:38 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:38 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevma', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:03:38 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) 13:03:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 12) 13:03:38 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 14) [ 2964.063443] audit: type=1326 audit(1766927018.315:40): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16717 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5793cc3b19 code=0x0 [ 2964.080525] 9pnet: Insufficient options for proto=fd 13:03:38 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xffffff7f00000000) [ 2964.095996] FAULT_INJECTION: forcing a failure. [ 2964.095996] name failslab, interval 1, probability 0, space 0, times 0 [ 2964.098898] CPU: 0 PID: 16726 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2964.100656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2964.102772] Call Trace: [ 2964.103447] dump_stack+0x107/0x167 [ 2964.104375] should_fail.cold+0x5/0xa [ 2964.105368] ? legacy_init_fs_context+0x44/0xe0 [ 2964.106493] should_failslab+0x5/0x20 [ 2964.107310] kmem_cache_alloc_trace+0x55/0x320 [ 2964.108300] ? lockdep_init_map_type+0x2c7/0x780 [ 2964.109328] legacy_init_fs_context+0x44/0xe0 [ 2964.110286] ? generic_parse_monolithic+0x1f0/0x1f0 [ 2964.111353] alloc_fs_context+0x4fd/0x840 [ 2964.112246] path_mount+0xab1/0x21e0 [ 2964.113051] ? strncpy_from_user+0x9e/0x470 [ 2964.113982] ? finish_automount+0xa90/0xa90 [ 2964.114908] ? getname_flags.part.0+0x1dd/0x4f0 [ 2964.115910] ? _copy_from_user+0xfb/0x1b0 [ 2964.116808] __x64_sys_mount+0x282/0x300 [ 2964.117684] ? copy_mnt_ns+0xa00/0xa00 [ 2964.118525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2964.119650] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2964.120761] do_syscall_64+0x33/0x40 13:03:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) [ 2964.121569] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2964.122803] RIP: 0033:0x7f3826f8db19 [ 2964.123600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2964.127576] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2964.129215] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2964.130752] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2964.132286] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2964.133822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2964.135351] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 2964.139796] FAULT_INJECTION: forcing a failure. [ 2964.139796] name failslab, interval 1, probability 0, space 0, times 0 [ 2964.141328] CPU: 1 PID: 16834 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2964.142229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2964.143313] Call Trace: [ 2964.143653] dump_stack+0x107/0x167 [ 2964.144126] should_fail.cold+0x5/0xa [ 2964.144620] ? create_object.isra.0+0x3a/0xa30 [ 2964.145211] should_failslab+0x5/0x20 [ 2964.145711] kmem_cache_alloc+0x5b/0x310 [ 2964.146237] ? __vmalloc_node+0x110/0x110 [ 2964.146772] create_object.isra.0+0x3a/0xa30 [ 2964.147335] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2964.147991] kmem_cache_alloc_trace+0x151/0x320 [ 2964.148596] bpf_prog_alloc_no_stats+0xb9/0x2c0 [ 2964.149200] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2964.149936] bpf_prog_alloc+0x2c/0x230 [ 2964.150435] ? trace_hardirqs_on+0x5b/0x180 [ 2964.150992] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2964.151728] bpf_prog_create_from_user+0xad/0x2f0 [ 2964.152347] do_seccomp+0x31f/0x2600 [ 2964.152821] ? wait_for_completion_io+0x270/0x270 [ 2964.153449] ? __seccomp_filter+0x1530/0x1530 [ 2964.154024] ? fput_many+0x2f/0x1a0 [ 2964.154476] ? ksys_write+0x1a9/0x260 [ 2964.154959] ? __ia32_sys_read+0xb0/0xb0 [ 2964.155487] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2964.156161] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2964.156811] do_syscall_64+0x33/0x40 [ 2964.157295] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2964.157958] RIP: 0033:0x7fb6b1db2b19 [ 2964.158427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2964.160788] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2964.161769] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2964.162666] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2964.163590] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2964.164508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2964.165423] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 13:03:38 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xe, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:03:38 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xfffffffffffffdef) [ 2964.211393] audit: type=1326 audit(1766927018.464:41): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16837 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5793cc3b19 code=0x0 [ 2964.224507] 9pnet: Insufficient options for proto=fd 13:03:38 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 15) 13:03:38 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r1, 0x0, 0x0) 13:03:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) 13:03:38 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 13) [ 2964.314665] 9pnet: Insufficient options for proto=fd 13:03:38 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2964.324817] audit: type=1326 audit(1766927018.577:42): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16901 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5793cc3b19 code=0x0 [ 2964.332481] FAULT_INJECTION: forcing a failure. [ 2964.332481] name failslab, interval 1, probability 0, space 0, times 0 [ 2964.335023] CPU: 0 PID: 16927 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2964.336649] FAULT_INJECTION: forcing a failure. [ 2964.336649] name failslab, interval 1, probability 0, space 0, times 0 [ 2964.336684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2964.339752] Call Trace: [ 2964.340320] dump_stack+0x107/0x167 [ 2964.341105] should_fail.cold+0x5/0xa [ 2964.341935] ? create_object.isra.0+0x3a/0xa30 [ 2964.342915] should_failslab+0x5/0x20 [ 2964.343733] kmem_cache_alloc+0x5b/0x310 [ 2964.344612] create_object.isra.0+0x3a/0xa30 [ 2964.345576] kmemleak_alloc_percpu+0xa0/0x100 [ 2964.346547] pcpu_alloc+0x4e2/0x1240 [ 2964.347362] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2964.348580] bpf_prog_alloc+0x78/0x230 [ 2964.349426] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2964.350646] bpf_prog_create_from_user+0xad/0x2f0 [ 2964.351682] do_seccomp+0x31f/0x2600 [ 2964.352479] ? wait_for_completion_io+0x270/0x270 [ 2964.353518] ? __seccomp_filter+0x1530/0x1530 [ 2964.354473] ? fput_many+0x2f/0x1a0 [ 2964.355249] ? ksys_write+0x1a9/0x260 [ 2964.356064] ? __ia32_sys_read+0xb0/0xb0 [ 2964.356938] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2964.358069] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2964.359174] do_syscall_64+0x33/0x40 [ 2964.359974] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2964.361073] RIP: 0033:0x7fb6b1db2b19 [ 2964.361876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2964.365819] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2964.367461] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2964.368991] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2964.370514] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2964.372046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2964.373585] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 [ 2964.375096] CPU: 1 PID: 16918 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2964.375935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2964.376867] Call Trace: [ 2964.377175] dump_stack+0x107/0x167 [ 2964.377595] should_fail.cold+0x5/0xa [ 2964.378031] ? create_object.isra.0+0x3a/0xa30 [ 2964.378542] should_failslab+0x5/0x20 [ 2964.378966] kmem_cache_alloc+0x5b/0x310 [ 2964.379423] create_object.isra.0+0x3a/0xa30 [ 2964.379913] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2964.380482] kmem_cache_alloc_trace+0x151/0x320 [ 2964.381005] ? lockdep_init_map_type+0x2c7/0x780 [ 2964.381545] legacy_init_fs_context+0x44/0xe0 [ 2964.382042] ? generic_parse_monolithic+0x1f0/0x1f0 [ 2964.382597] alloc_fs_context+0x4fd/0x840 [ 2964.383063] path_mount+0xab1/0x21e0 [ 2964.383484] ? strncpy_from_user+0x9e/0x470 [ 2964.383964] ? finish_automount+0xa90/0xa90 [ 2964.384451] ? getname_flags.part.0+0x1dd/0x4f0 [ 2964.384973] ? _copy_from_user+0xfb/0x1b0 [ 2964.385447] __x64_sys_mount+0x282/0x300 [ 2964.385897] ? copy_mnt_ns+0xa00/0xa00 [ 2964.386345] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2964.386931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2964.387509] do_syscall_64+0x33/0x40 [ 2964.387925] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2964.388500] RIP: 0033:0x7f3826f8db19 [ 2964.388917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2964.390970] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2964.391818] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2964.392617] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2964.393420] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2964.394216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2964.395011] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:03:38 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) [ 2964.490023] audit: type=1326 audit(1766927018.742:43): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17067 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5793cc3b19 code=0x0 [ 2964.499054] 9pnet: Insufficient options for proto=fd [ 2976.628009] FAULT_INJECTION: forcing a failure. [ 2976.628009] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.630753] CPU: 0 PID: 17075 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2976.632205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.633945] Call Trace: [ 2976.634502] dump_stack+0x107/0x167 [ 2976.635257] should_fail.cold+0x5/0xa [ 2976.636051] ? v9fs_mount+0x5a/0x8f0 [ 2976.636838] should_failslab+0x5/0x20 [ 2976.637642] kmem_cache_alloc_trace+0x55/0x320 [ 2976.638600] ? v9fs_write_inode+0x60/0x60 [ 2976.639464] v9fs_mount+0x5a/0x8f0 [ 2976.640207] ? v9fs_write_inode+0x60/0x60 [ 2976.641074] legacy_get_tree+0x105/0x220 [ 2976.641934] vfs_get_tree+0x8e/0x300 [ 2976.642711] path_mount+0x1490/0x21e0 [ 2976.643519] ? strncpy_from_user+0x9e/0x470 [ 2976.644421] ? finish_automount+0xa90/0xa90 [ 2976.645326] ? getname_flags.part.0+0x1dd/0x4f0 [ 2976.646316] ? _copy_from_user+0xfb/0x1b0 [ 2976.647194] __x64_sys_mount+0x282/0x300 [ 2976.648043] ? copy_mnt_ns+0xa00/0xa00 [ 2976.648868] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.649988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.651074] do_syscall_64+0x33/0x40 [ 2976.651864] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2976.652940] RIP: 0033:0x7f3826f8db19 [ 2976.653726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.657604] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2976.659203] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2976.660702] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2976.662203] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2976.663694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2976.665188] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:03:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 14) 13:03:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) 13:03:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:03:50 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:50 executing program 3: write(0xffffffffffffffff, &(0x7f0000000340)="f7a3c5415838a3b29474ad36fc7653d39d2ada422099e3e1c0add792666fdccb0a600c406b33cc60c121676a4ffb87d5d925e8d736b565f15d28c61ce7698ab256f06fd9590879d83cdaa4dc9f29c59bf3c6f08fffa07cef4e8777c17748e6dc8c84ade61d138f7140ce", 0x6a) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x57da}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syncfs(r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x128, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008004) 13:03:50 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:03:50 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 16) 13:03:50 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2976.675466] 9pnet: Insufficient options for proto=fd [ 2976.676753] 9pnet: Insufficient options for proto=fd [ 2976.679611] FAULT_INJECTION: forcing a failure. [ 2976.679611] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.682168] CPU: 0 PID: 17095 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2976.683729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.685487] Call Trace: [ 2976.686050] dump_stack+0x107/0x167 [ 2976.686823] should_fail.cold+0x5/0xa [ 2976.687626] ? create_object.isra.0+0x3a/0xa30 [ 2976.688584] should_failslab+0x5/0x20 [ 2976.689383] kmem_cache_alloc+0x5b/0x310 [ 2976.690258] create_object.isra.0+0x3a/0xa30 [ 2976.691188] kmemleak_alloc_percpu+0xa0/0x100 [ 2976.692134] pcpu_alloc+0x4e2/0x1240 [ 2976.692934] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2976.694140] bpf_prog_alloc+0x78/0x230 [ 2976.694966] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2976.696158] bpf_prog_create_from_user+0xad/0x2f0 [ 2976.697175] do_seccomp+0x31f/0x2600 [ 2976.697966] ? wait_for_completion_io+0x270/0x270 [ 2976.698983] ? __seccomp_filter+0x1530/0x1530 [ 2976.699928] ? fput_many+0x2f/0x1a0 [ 2976.700692] ? ksys_write+0x1a9/0x260 [ 2976.701501] ? __ia32_sys_read+0xb0/0xb0 [ 2976.702359] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2976.703468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.704559] do_syscall_64+0x33/0x40 [ 2976.705342] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2976.706431] RIP: 0033:0x7fb6b1db2b19 [ 2976.707213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.711102] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2976.712704] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2976.714212] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2976.715721] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.717221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2976.718748] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 [ 2976.729304] audit: type=1326 audit(1766927030.980:44): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17093 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5793cc3b19 code=0x0 13:04:06 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:06 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{}, {0x6}]}) 13:04:06 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:04:06 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 15) 13:04:06 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) ppoll(&(0x7f0000000800)=[{r0, 0x8}, {r0, 0x8102}, {r1, 0x8400}, {r2, 0x80e4}, {r3, 0x20}], 0x5, &(0x7f0000000840)={0x77359400}, &(0x7f0000000880)={[0x1]}, 0x8) write$tcp_congestion(r0, 0x0, 0x0) [ 2992.371860] audit: type=1326 audit(1766927046.624:45): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17307 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5793cc3b19 code=0x0 [ 2992.382910] FAULT_INJECTION: forcing a failure. [ 2992.382910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2992.382937] 9pnet: Insufficient options for proto=fd [ 2992.385278] CPU: 1 PID: 17331 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2992.385288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2992.385293] Call Trace: [ 2992.385324] dump_stack+0x107/0x167 [ 2992.390611] should_fail.cold+0x5/0xa 13:04:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 17) [ 2992.391388] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2992.392685] _copy_from_user+0x2e/0x1b0 [ 2992.392727] 9pnet: Insufficient options for proto=fd [ 2992.393498] ? hardlockup_detector_perf_cleanup+0x1e0/0x1e0 [ 2992.393518] bpf_prog_create_from_user+0x10a/0x2f0 [ 2992.393539] do_seccomp+0x31f/0x2600 [ 2992.397364] ? wait_for_completion_io+0x270/0x270 [ 2992.398337] ? __seccomp_filter+0x1530/0x1530 [ 2992.399230] ? fput_many+0x2f/0x1a0 [ 2992.399952] ? ksys_write+0x1a9/0x260 [ 2992.400711] ? __ia32_sys_read+0xb0/0xb0 [ 2992.401533] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2992.402603] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2992.403649] do_syscall_64+0x33/0x40 [ 2992.404421] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2992.405463] RIP: 0033:0x7fb6b1db2b19 [ 2992.406227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2992.409945] RSP: 002b:00007fb6af328188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2992.411454] RAX: ffffffffffffffda RBX: 00007fb6b1ec5f60 RCX: 00007fb6b1db2b19 [ 2992.412868] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2992.414317] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2992.415776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2992.417230] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 [ 2992.423527] FAULT_INJECTION: forcing a failure. [ 2992.423527] name failslab, interval 1, probability 0, space 0, times 0 [ 2992.425804] CPU: 0 PID: 17315 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2992.427193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2992.428847] Call Trace: [ 2992.429374] dump_stack+0x107/0x167 [ 2992.430108] should_fail.cold+0x5/0xa [ 2992.430875] ? create_object.isra.0+0x3a/0xa30 [ 2992.431787] should_failslab+0x5/0x20 [ 2992.432555] kmem_cache_alloc+0x5b/0x310 [ 2992.433375] ? cred_has_capability.isra.0+0x152/0x2b0 [ 2992.434419] create_object.isra.0+0x3a/0xa30 [ 2992.435300] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2992.436318] kmem_cache_alloc_trace+0x151/0x320 [ 2992.437246] ? v9fs_write_inode+0x60/0x60 [ 2992.438076] v9fs_mount+0x5a/0x8f0 [ 2992.438792] ? v9fs_write_inode+0x60/0x60 [ 2992.439616] legacy_get_tree+0x105/0x220 [ 2992.440447] vfs_get_tree+0x8e/0x300 [ 2992.441195] path_mount+0x1490/0x21e0 [ 2992.441967] ? strncpy_from_user+0x9e/0x470 [ 2992.442830] ? finish_automount+0xa90/0xa90 [ 2992.443681] ? getname_flags.part.0+0x1dd/0x4f0 [ 2992.444600] ? _copy_from_user+0xfb/0x1b0 [ 2992.445427] __x64_sys_mount+0x282/0x300 [ 2992.446253] ? copy_mnt_ns+0xa00/0xa00 [ 2992.447034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2992.448072] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2992.449092] do_syscall_64+0x33/0x40 [ 2992.449845] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2992.450852] RIP: 0033:0x7f3826f8db19 [ 2992.451596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2992.455252] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2992.456760] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 2992.458185] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2992.459598] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 2992.461011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2992.462429] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:04:06 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:06 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) (fail_nth: 18) [ 2992.569436] 9pnet: Insufficient options for proto=fd [ 2992.571985] 9pnet: Insufficient options for proto=fd 13:04:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x48, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:04:06 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:04:06 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dflt', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 2992.597103] FAULT_INJECTION: forcing a failure. [ 2992.597103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2992.599551] CPU: 1 PID: 17527 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 2992.600926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2992.602579] Call Trace: [ 2992.603112] dump_stack+0x107/0x167 [ 2992.603846] should_fail.cold+0x5/0xa [ 2992.604621] _copy_to_user+0x2e/0x180 [ 2992.605393] simple_read_from_buffer+0xcc/0x160 [ 2992.606353] proc_fail_nth_read+0x198/0x230 [ 2992.607225] ? proc_sessionid_read+0x230/0x230 [ 2992.608131] ? security_file_permission+0xb1/0xe0 [ 2992.609106] ? proc_sessionid_read+0x230/0x230 [ 2992.610034] vfs_read+0x228/0x620 [ 2992.610738] ksys_read+0x12d/0x260 [ 2992.611451] ? vfs_write+0xb10/0xb10 [ 2992.612205] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2992.613252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2992.614296] do_syscall_64+0x33/0x40 [ 2992.615043] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2992.616087] RIP: 0033:0x7fb6b1d6569c [ 2992.616830] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 13:04:06 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:06 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:06 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) ppoll(&(0x7f0000000800)=[{r0, 0x8}, {r0, 0x8102}, {r1, 0x8400}, {r2, 0x80e4}, {r3, 0x20}], 0x5, &(0x7f0000000840)={0x77359400}, &(0x7f0000000880)={[0x1]}, 0x8) write$tcp_congestion(r0, 0x0, 0x0) [ 2992.620670] RSP: 002b:00007fb6af328170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2992.622323] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fb6b1d6569c [ 2992.623760] RDX: 000000000000000f RSI: 00007fb6af3281e0 RDI: 0000000000000003 [ 2992.625187] RBP: 00007fb6af3281d0 R08: 0000000000000000 R09: 0000000000000000 [ 2992.626624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2992.628044] R13: 00007ffd66f2e1df R14: 00007fb6af328300 R15: 0000000000022000 [ 2992.668763] loop5: detected capacity change from 0 to 135266304 [ 2992.678738] 9pnet: Insufficient options for proto=fd [ 2992.690013] 9pnet: Insufficient options for proto=fd 13:04:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:04:07 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:07 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='hybla\x00', 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fstat(r1, &(0x7f0000000080)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) fchown(r1, 0xee00, 0x0) 13:04:07 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:07 executing program 5: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) [ 2992.836113] 9pnet: Insufficient options for proto=fd [ 2992.885840] 9pnet: Insufficient options for proto=fd 13:04:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 16) 13:04:23 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x40, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x8, 0x28000000000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6066e0, 0x5a206c278fc4b413) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4003}], 0x14, &(0x7f00000004c0)=ANY=[]) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2004, @fd_index=0x1, 0x6, 0x0, 0x0, 0x14, 0x0, {0xffff, r4}}, 0x10001) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x2000}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) fsmount(r1, 0x1, 0x81) write$tcp_congestion(r0, 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000140)) 13:04:23 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:04:23 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dflt', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:23 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:23 executing program 5: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:04:23 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) [ 3008.988843] 9pnet: Insufficient options for proto=fd [ 3008.994942] FAULT_INJECTION: forcing a failure. [ 3008.994942] name failslab, interval 1, probability 0, space 0, times 0 [ 3008.997370] CPU: 0 PID: 17869 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3008.998814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3009.000530] Call Trace: [ 3009.001085] dump_stack+0x107/0x167 [ 3009.001852] should_fail.cold+0x5/0xa [ 3009.002649] should_failslab+0x5/0x20 [ 3009.003439] __kmalloc_track_caller+0x79/0x370 [ 3009.004389] ? v9fs_session_init+0xa7/0x1680 [ 3009.005302] ? kernel_text_address+0xf2/0x120 [ 3009.006245] kstrdup+0x36/0x70 [ 3009.006912] v9fs_session_init+0xa7/0x1680 [ 3009.007792] ? lock_release+0x680/0x680 [ 3009.008619] ? find_held_lock+0x2c/0x110 [ 3009.009467] ? kmem_cache_alloc_trace+0x151/0x320 [ 3009.010472] ? v9fs_show_options+0x690/0x690 [ 3009.011389] ? trace_hardirqs_on+0x5b/0x180 [ 3009.012290] ? kasan_unpoison_shadow+0x33/0x50 [ 3009.013229] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3009.014295] v9fs_mount+0x79/0x8f0 [ 3009.015029] ? v9fs_write_inode+0x60/0x60 [ 3009.015887] legacy_get_tree+0x105/0x220 [ 3009.016730] vfs_get_tree+0x8e/0x300 [ 3009.017518] path_mount+0x1490/0x21e0 [ 3009.018324] ? strncpy_from_user+0x9e/0x470 [ 3009.019228] ? finish_automount+0xa90/0xa90 [ 3009.020129] ? getname_flags.part.0+0x1dd/0x4f0 [ 3009.021095] ? _copy_from_user+0xfb/0x1b0 [ 3009.021979] __x64_sys_mount+0x282/0x300 [ 3009.022838] ? copy_mnt_ns+0xa00/0xa00 [ 3009.023667] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3009.024778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3009.025874] do_syscall_64+0x33/0x40 [ 3009.026661] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3009.027738] RIP: 0033:0x7f3826f8db19 [ 3009.028522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3009.032402] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3009.034199] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3009.035700] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3009.037206] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3009.038710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3009.040218] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:04:23 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3009.072199] 9pnet: Insufficient options for proto=fd [ 3009.072750] 9pnet: Insufficient options for proto=fd 13:04:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x68, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:04:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 17) 13:04:23 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:23 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) flistxattr(r2, &(0x7f0000000180)=""/189, 0xbd) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="331800001d6c00000724"], 0xc8) setsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80000) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0xc0000) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="33180000000000000724", @ANYRES64=r4, @ANYRESOCT, @ANYRESHEX], 0xc8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)) write$tcp_congestion(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:04:23 executing program 5: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) [ 3009.169054] FAULT_INJECTION: forcing a failure. [ 3009.169054] name failslab, interval 1, probability 0, space 0, times 0 [ 3009.170461] CPU: 1 PID: 18103 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3009.171253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3009.172194] Call Trace: [ 3009.172464] 9pnet: Insufficient options for proto=fd [ 3009.172504] dump_stack+0x107/0x167 [ 3009.172524] should_fail.cold+0x5/0xa [ 3009.174455] ? create_object.isra.0+0x3a/0xa30 [ 3009.174971] should_failslab+0x5/0x20 [ 3009.175411] kmem_cache_alloc+0x5b/0x310 [ 3009.175879] create_object.isra.0+0x3a/0xa30 [ 3009.176386] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3009.176964] __kmalloc_track_caller+0x177/0x370 [ 3009.177498] ? v9fs_session_init+0xa7/0x1680 [ 3009.178004] ? kernel_text_address+0xf2/0x120 [ 3009.178521] kstrdup+0x36/0x70 [ 3009.178892] v9fs_session_init+0xa7/0x1680 [ 3009.179382] ? lock_release+0x680/0x680 [ 3009.179836] ? find_held_lock+0x2c/0x110 [ 3009.180296] ? kmem_cache_alloc_trace+0x151/0x320 [ 3009.180854] ? v9fs_show_options+0x690/0x690 [ 3009.181362] ? trace_hardirqs_on+0x5b/0x180 [ 3009.181862] ? kasan_unpoison_shadow+0x33/0x50 [ 3009.182385] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3009.182973] v9fs_mount+0x79/0x8f0 [ 3009.183378] ? v9fs_write_inode+0x60/0x60 [ 3009.183845] legacy_get_tree+0x105/0x220 [ 3009.184313] vfs_get_tree+0x8e/0x300 [ 3009.184737] path_mount+0x1490/0x21e0 [ 3009.185182] ? strncpy_from_user+0x9e/0x470 [ 3009.185678] ? finish_automount+0xa90/0xa90 [ 3009.186175] ? getname_flags.part.0+0x1dd/0x4f0 [ 3009.186706] ? _copy_from_user+0xfb/0x1b0 [ 3009.187190] __x64_sys_mount+0x282/0x300 [ 3009.187655] ? copy_mnt_ns+0xa00/0xa00 [ 3009.188099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3009.188699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3009.189292] do_syscall_64+0x33/0x40 [ 3009.189715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3009.190309] RIP: 0033:0x7f3826f8db19 [ 3009.190732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3009.192846] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3009.193721] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3009.194545] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3009.195355] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3009.196161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3009.196974] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:04:37 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:04:37 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:37 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dflt', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:37 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:37 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 18) 13:04:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:04:37 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x8, 0xffffff80, 0x4, 0x800, 0x1, 0x1}, {0x1, 0x8001, 0x7, 0x5, 0x9, 0x4}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000000)) 13:04:37 executing program 5: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) [ 3023.409832] 9pnet: Insufficient options for proto=fd [ 3023.432521] FAULT_INJECTION: forcing a failure. [ 3023.432521] name failslab, interval 1, probability 0, space 0, times 0 [ 3023.434171] CPU: 1 PID: 18342 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3023.435089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3023.436242] Call Trace: [ 3023.436603] dump_stack+0x107/0x167 [ 3023.437115] should_fail.cold+0x5/0xa [ 3023.437641] should_failslab+0x5/0x20 [ 3023.438179] __kmalloc_track_caller+0x79/0x370 [ 3023.438793] ? v9fs_session_init+0xe9/0x1680 [ 3023.439388] ? kernel_text_address+0xf2/0x120 [ 3023.439992] kstrdup+0x36/0x70 [ 3023.440421] v9fs_session_init+0xe9/0x1680 [ 3023.440995] ? lock_release+0x680/0x680 [ 3023.441529] ? find_held_lock+0x2c/0x110 [ 3023.442123] ? kmem_cache_alloc_trace+0x151/0x320 [ 3023.442802] ? v9fs_show_options+0x690/0x690 [ 3023.443426] ? trace_hardirqs_on+0x5b/0x180 [ 3023.444020] ? kasan_unpoison_shadow+0x33/0x50 [ 3023.444649] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3023.445368] v9fs_mount+0x79/0x8f0 [ 3023.445861] ? v9fs_write_inode+0x60/0x60 [ 3023.446472] legacy_get_tree+0x105/0x220 [ 3023.447034] vfs_get_tree+0x8e/0x300 [ 3023.447549] path_mount+0x1490/0x21e0 [ 3023.448080] ? strncpy_from_user+0x9e/0x470 [ 3023.448673] ? finish_automount+0xa90/0xa90 [ 3023.449267] ? getname_flags.part.0+0x1dd/0x4f0 [ 3023.449908] ? _copy_from_user+0xfb/0x1b0 [ 3023.450506] __x64_sys_mount+0x282/0x300 [ 3023.451067] ? copy_mnt_ns+0xa00/0xa00 [ 3023.451599] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3023.452318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3023.453036] do_syscall_64+0x33/0x40 [ 3023.453554] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3023.454298] RIP: 0033:0x7f3826f8db19 [ 3023.454812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3023.457383] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3023.458470] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3023.459445] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3023.460433] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3023.461406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3023.462401] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:04:37 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x66510, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:04:37 executing program 5: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) 13:04:37 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:37 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x74, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 3023.561479] 9pnet: Insufficient options for proto=fd 13:04:51 executing program 5: prctl$PR_GET_PDEATHSIG(0x2, 0x0) [ 3037.315477] 9pnet: Insufficient options for proto=fd 13:04:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7a, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:04:51 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgi', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:51 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:04:51 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:04:51 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:51 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 19) 13:04:51 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) [ 3037.343807] FAULT_INJECTION: forcing a failure. [ 3037.343807] name failslab, interval 1, probability 0, space 0, times 0 [ 3037.346356] CPU: 0 PID: 18696 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3037.347877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3037.349705] Call Trace: [ 3037.350307] dump_stack+0x107/0x167 [ 3037.351114] should_fail.cold+0x5/0xa [ 3037.351957] ? create_object.isra.0+0x3a/0xa30 [ 3037.352964] should_failslab+0x5/0x20 [ 3037.353805] kmem_cache_alloc+0x5b/0x310 [ 3037.354722] create_object.isra.0+0x3a/0xa30 [ 3037.355689] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3037.356811] __kmalloc_track_caller+0x177/0x370 [ 3037.357837] ? v9fs_session_init+0xe9/0x1680 [ 3037.358817] ? kernel_text_address+0xf2/0x120 [ 3037.359810] kstrdup+0x36/0x70 [ 3037.360521] v9fs_session_init+0xe9/0x1680 [ 3037.361457] ? lock_release+0x680/0x680 [ 3037.362342] ? find_held_lock+0x2c/0x110 [ 3037.363246] ? kmem_cache_alloc_trace+0x151/0x320 [ 3037.364312] ? v9fs_show_options+0x690/0x690 [ 3037.365292] ? trace_hardirqs_on+0x5b/0x180 [ 3037.366252] ? kasan_unpoison_shadow+0x33/0x50 [ 3037.367262] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3037.368381] v9fs_mount+0x79/0x8f0 [ 3037.369166] ? v9fs_write_inode+0x60/0x60 [ 3037.370079] legacy_get_tree+0x105/0x220 [ 3037.370992] vfs_get_tree+0x8e/0x300 [ 3037.371813] path_mount+0x1490/0x21e0 [ 3037.372662] ? strncpy_from_user+0x9e/0x470 [ 3037.373619] ? finish_automount+0xa90/0xa90 [ 3037.374584] ? getname_flags.part.0+0x1dd/0x4f0 [ 3037.375611] ? _copy_from_user+0xfb/0x1b0 [ 3037.376535] __x64_sys_mount+0x282/0x300 [ 3037.377432] ? copy_mnt_ns+0xa00/0xa00 [ 3037.378304] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3037.379467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3037.380608] do_syscall_64+0x33/0x40 [ 3037.381432] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3037.382574] RIP: 0033:0x7f3826f8db19 [ 3037.383396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3037.387465] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3037.389147] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3037.390731] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3037.392311] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3037.393888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3037.395475] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:04:51 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:04:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9a, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:04:51 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3037.426261] 9pnet: Insufficient options for proto=fd 13:04:51 executing program 5: prctl$PR_GET_PDEATHSIG(0x2, 0x0) 13:04:51 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000000)='vegas\x00', 0x6) 13:04:51 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:51 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:04:51 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgi', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3037.507935] 9pnet: Insufficient options for proto=fd [ 3049.624849] 9pnet: Insufficient options for proto=fd [ 3049.633744] FAULT_INJECTION: forcing a failure. [ 3049.633744] name failslab, interval 1, probability 0, space 0, times 0 [ 3049.636738] CPU: 0 PID: 19006 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3049.638510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3049.640627] Call Trace: [ 3049.641308] dump_stack+0x107/0x167 [ 3049.642263] should_fail.cold+0x5/0xa [ 3049.643245] ? p9_client_create+0xaf/0x1230 [ 3049.644348] should_failslab+0x5/0x20 [ 3049.645320] kmem_cache_alloc_trace+0x55/0x320 [ 3049.646508] ? find_held_lock+0x2c/0x110 [ 3049.647556] p9_client_create+0xaf/0x1230 [ 3049.648616] ? lock_downgrade+0x6d0/0x6d0 [ 3049.649685] ? p9_client_flush+0x430/0x430 [ 3049.650779] ? trace_hardirqs_on+0x5b/0x180 [ 3049.651750] ? lockdep_init_map_type+0x2c7/0x780 [ 3049.652982] ? __raw_spin_lock_init+0x36/0x110 [ 3049.654167] v9fs_session_init+0x1dd/0x1680 13:05:03 executing program 5: prctl$PR_GET_PDEATHSIG(0x2, 0x0) 13:05:03 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:05:03 executing program 3: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xfdef) preadv(r0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/204, 0xcc}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000200)=""/23, 0x17}], 0x4, 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:05:03 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:03 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 20) 13:05:03 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgi', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9b, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:05:03 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:03 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3049.655304] ? lock_release+0x680/0x680 [ 3049.656552] ? kmem_cache_alloc_trace+0x151/0x320 [ 3049.657792] ? v9fs_show_options+0x690/0x690 [ 3049.658955] ? trace_hardirqs_on+0x5b/0x180 [ 3049.660056] ? kasan_unpoison_shadow+0x33/0x50 [ 3049.661229] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3049.662562] v9fs_mount+0x79/0x8f0 [ 3049.663485] ? v9fs_write_inode+0x60/0x60 [ 3049.664541] legacy_get_tree+0x105/0x220 [ 3049.665577] vfs_get_tree+0x8e/0x300 [ 3049.666743] path_mount+0x1490/0x21e0 [ 3049.667738] ? strncpy_from_user+0x9e/0x470 [ 3049.668843] ? finish_automount+0xa90/0xa90 [ 3049.669945] ? getname_flags.part.0+0x1dd/0x4f0 [ 3049.671040] ? _copy_from_user+0xfb/0x1b0 [ 3049.671921] __x64_sys_mount+0x282/0x300 [ 3049.672773] ? copy_mnt_ns+0xa00/0xa00 [ 3049.673601] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3049.674718] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3049.675812] do_syscall_64+0x33/0x40 [ 3049.676596] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3049.677675] RIP: 0033:0x7f3826f8db19 [ 3049.678472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3049.682364] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3049.683968] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3049.685476] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3049.686996] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3049.688502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3049.690013] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3049.697052] 9pnet: Insufficient options for proto=fd 13:05:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:05:03 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x900, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:05:04 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:04 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:04 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) ppoll(&(0x7f0000000800)=[{r0, 0x8}, {r0, 0x8102}, {r1, 0x8400}, {r2, 0x80e4}, {r3, 0x20}], 0x5, &(0x7f0000000840)={0x77359400}, &(0x7f0000000880)={[0x1]}, 0x8) write$tcp_congestion(r0, 0x0, 0x0) [ 3049.785864] loop5: detected capacity change from 0 to 135266304 13:05:04 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3049.819790] 9pnet: Insufficient options for proto=fd 13:05:04 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9d, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:05:04 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) ppoll(&(0x7f0000000800)=[{r0, 0x8}, {r0, 0x8102}, {r1, 0x8400}, {r2, 0x80e4}, {r3, 0x20}], 0x5, &(0x7f0000000840)={0x77359400}, &(0x7f0000000880)={[0x1]}, 0x8) write$tcp_congestion(r0, 0x0, 0x0) 13:05:04 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 21) [ 3049.876947] loop5: detected capacity change from 0 to 135266304 [ 3049.920601] FAULT_INJECTION: forcing a failure. [ 3049.920601] name failslab, interval 1, probability 0, space 0, times 0 [ 3049.923056] CPU: 0 PID: 19420 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3049.924526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3049.926278] Call Trace: [ 3049.926842] dump_stack+0x107/0x167 [ 3049.927623] should_fail.cold+0x5/0xa [ 3049.928429] ? create_object.isra.0+0x3a/0xa30 [ 3049.929390] should_failslab+0x5/0x20 [ 3049.930197] kmem_cache_alloc+0x5b/0x310 [ 3049.931062] ? kernel_text_address+0xf2/0x120 [ 3049.932013] create_object.isra.0+0x3a/0xa30 [ 3049.932938] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3049.934013] kmem_cache_alloc_trace+0x151/0x320 [ 3049.935006] p9_client_create+0xaf/0x1230 [ 3049.935879] ? lock_downgrade+0x6d0/0x6d0 [ 3049.936757] ? p9_client_flush+0x430/0x430 [ 3049.937643] ? trace_hardirqs_on+0x5b/0x180 [ 3049.938566] ? lockdep_init_map_type+0x2c7/0x780 [ 3049.939558] ? __raw_spin_lock_init+0x36/0x110 [ 3049.940526] v9fs_session_init+0x1dd/0x1680 [ 3049.941435] ? lock_release+0x680/0x680 [ 3049.942292] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3049.943419] ? trace_hardirqs_on+0x5b/0x180 [ 3049.944331] ? v9fs_show_options+0x690/0x690 [ 3049.945262] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 3049.946338] ? kasan_unpoison_shadow+0x33/0x50 [ 3049.947290] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3049.948359] v9fs_mount+0x79/0x8f0 [ 3049.949107] ? v9fs_write_inode+0x60/0x60 [ 3049.949969] legacy_get_tree+0x105/0x220 [ 3049.950831] vfs_get_tree+0x8e/0x300 [ 3049.951610] path_mount+0x1490/0x21e0 [ 3049.952413] ? strncpy_from_user+0x9e/0x470 [ 3049.953318] ? finish_automount+0xa90/0xa90 [ 3049.954223] ? getname_flags.part.0+0x1dd/0x4f0 [ 3049.955208] ? _copy_from_user+0xfb/0x1b0 [ 3049.956089] __x64_sys_mount+0x282/0x300 [ 3049.956936] ? copy_mnt_ns+0xa00/0xa00 [ 3049.957758] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3049.958867] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3049.959949] do_syscall_64+0x33/0x40 [ 3049.960733] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3049.961806] RIP: 0033:0x7f3826f8db19 [ 3049.962596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3049.966465] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3049.968070] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3049.969581] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3049.971092] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3049.972596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3049.974104] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:05:17 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:17 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 22) [ 3063.515775] FAULT_INJECTION: forcing a failure. [ 3063.515775] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.517194] CPU: 0 PID: 19471 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3063.518019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3063.519015] Call Trace: [ 3063.519345] dump_stack+0x107/0x167 [ 3063.519780] should_fail.cold+0x5/0xa [ 3063.520250] should_failslab+0x5/0x20 [ 3063.520706] __kmalloc_track_caller+0x79/0x370 [ 3063.521269] ? p9_client_create+0x41d/0x1230 [ 3063.521797] kstrdup+0x36/0x70 [ 3063.522194] p9_client_create+0x41d/0x1230 [ 3063.522709] ? lock_downgrade+0x6d0/0x6d0 [ 3063.523202] ? p9_client_flush+0x430/0x430 [ 3063.523705] ? trace_hardirqs_on+0x5b/0x180 [ 3063.524220] ? lockdep_init_map_type+0x2c7/0x780 [ 3063.524789] ? __raw_spin_lock_init+0x36/0x110 [ 3063.525337] v9fs_session_init+0x1dd/0x1680 [ 3063.525855] ? lock_release+0x680/0x680 [ 3063.526333] ? kmem_cache_alloc_trace+0x151/0x320 [ 3063.526911] ? v9fs_show_options+0x690/0x690 [ 3063.527441] ? trace_hardirqs_on+0x5b/0x180 [ 3063.527955] ? kasan_unpoison_shadow+0x33/0x50 [ 3063.528494] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3063.529094] v9fs_mount+0x79/0x8f0 [ 3063.529515] ? v9fs_write_inode+0x60/0x60 [ 3063.530004] legacy_get_tree+0x105/0x220 [ 3063.530496] vfs_get_tree+0x8e/0x300 [ 3063.531135] path_mount+0x1490/0x21e0 [ 3063.531592] ? strncpy_from_user+0x9e/0x470 [ 3063.532104] ? finish_automount+0xa90/0xa90 [ 3063.532616] ? getname_flags.part.0+0x1dd/0x4f0 [ 3063.533169] ? _copy_from_user+0xfb/0x1b0 [ 3063.533665] __x64_sys_mount+0x282/0x300 [ 3063.533949] 9pnet: Insufficient options for proto=fd [ 3063.534144] ? copy_mnt_ns+0xa00/0xa00 [ 3063.534163] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3063.536050] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3063.536661] do_syscall_64+0x33/0x40 [ 3063.537101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3063.537708] RIP: 0033:0x7f3826f8db19 [ 3063.538149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.540339] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3063.541236] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3063.542076] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3063.542925] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3063.543767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3063.544606] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:05:17 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:05:17 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:17 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) ppoll(&(0x7f0000000800)=[{r0, 0x8}, {r0, 0x8102}, {r1, 0x8400}, {r2, 0x80e4}, {r3, 0x20}], 0x5, &(0x7f0000000840)={0x77359400}, &(0x7f0000000880)={[0x1]}, 0x8) write$tcp_congestion(r0, 0x0, 0x0) 13:05:17 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:05:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9e, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 3063.558451] 9pnet: Could not find request transport: fd0x0000000000000004 13:05:17 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) [ 3063.573928] loop5: detected capacity change from 0 to 135266304 13:05:17 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x108) write$tcp_congestion(r0, &(0x7f0000000080)='nv\x00', 0x3) write$tcp_congestion(r1, 0x0, 0xfe6e0e904f1d9125) 13:05:17 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:17 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3063.617357] 9pnet: Could not find request transport: fd0x0000000000000004 13:05:17 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) ppoll(&(0x7f0000000800)=[{r0, 0x8}, {r0, 0x8102}, {r1, 0x8400}, {r2, 0x80e4}, {r3, 0x20}], 0x5, &(0x7f0000000840)={0x77359400}, &(0x7f0000000880)={[0x1]}, 0x8) 13:05:17 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:17 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:05:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 3063.675646] 9pnet: Insufficient options for proto=fd [ 3063.686474] loop5: detected capacity change from 0 to 135266304 13:05:17 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3063.709417] 9pnet: Could not find request transport: fd0x0000000000000004 13:05:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 23) 13:05:17 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:17 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:18 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) 13:05:18 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xff0f, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) [ 3063.788452] 9pnet: Insufficient options for proto=fd [ 3063.789659] FAULT_INJECTION: forcing a failure. [ 3063.789659] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.791392] CPU: 1 PID: 19788 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3063.792429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3063.793671] Call Trace: [ 3063.794080] dump_stack+0x107/0x167 [ 3063.794658] should_fail.cold+0x5/0xa [ 3063.795241] ? create_object.isra.0+0x3a/0xa30 [ 3063.795926] should_failslab+0x5/0x20 [ 3063.796489] kmem_cache_alloc+0x5b/0x310 [ 3063.797106] ? lock_downgrade+0x6d0/0x6d0 [ 3063.797720] create_object.isra.0+0x3a/0xa30 [ 3063.798506] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3063.799463] __kmalloc_track_caller+0x177/0x370 [ 3063.800304] ? p9_client_create+0x41d/0x1230 [ 3063.801098] kstrdup+0x36/0x70 [ 3063.801680] p9_client_create+0x41d/0x1230 [ 3063.802448] ? lock_downgrade+0x6d0/0x6d0 [ 3063.803192] ? p9_client_flush+0x430/0x430 [ 3063.803960] ? trace_hardirqs_on+0x5b/0x180 [ 3063.804725] ? lockdep_init_map_type+0x2c7/0x780 [ 3063.805573] ? __raw_spin_lock_init+0x36/0x110 [ 3063.806338] v9fs_session_init+0x1dd/0x1680 [ 3063.807005] ? lock_release+0x680/0x680 [ 3063.807590] ? kmem_cache_alloc_trace+0x151/0x320 [ 3063.807737] 9pnet: Insufficient options for proto=fd [ 3063.808417] ? v9fs_show_options+0x690/0x690 [ 3063.808445] ? trace_hardirqs_on+0x5b/0x180 [ 3063.810312] ? kasan_unpoison_shadow+0x33/0x50 [ 3063.811014] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3063.811765] v9fs_mount+0x79/0x8f0 [ 3063.812297] ? v9fs_write_inode+0x60/0x60 [ 3063.812912] legacy_get_tree+0x105/0x220 [ 3063.813508] vfs_get_tree+0x8e/0x300 [ 3063.814065] path_mount+0x1490/0x21e0 [ 3063.814641] ? strncpy_from_user+0x9e/0x470 [ 3063.815285] ? finish_automount+0xa90/0xa90 [ 3063.815934] ? getname_flags.part.0+0x1dd/0x4f0 [ 3063.816613] ? _copy_from_user+0xfb/0x1b0 [ 3063.817237] __x64_sys_mount+0x282/0x300 [ 3063.817839] ? copy_mnt_ns+0xa00/0xa00 [ 3063.818422] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3063.819207] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3063.819980] do_syscall_64+0x33/0x40 [ 3063.820524] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3063.821294] RIP: 0033:0x7f3826f8db19 [ 3063.821847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.824562] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3063.825686] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3063.826747] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3063.827802] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3063.828860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3063.829928] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3063.841100] loop5: detected capacity change from 0 to 135266304 13:05:18 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:05:18 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3063.888048] 9pnet: Insufficient options for proto=fd [ 3063.890016] 9pnet: Insufficient options for proto=fd 13:05:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 24) 13:05:30 executing program 3: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x2, 0x2, 0x1}) r0 = perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000640), 0x6e, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/153, 0x99}, {0x0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/96, 0x60}, {&(0x7f0000001840)=""/39, 0x27}, {&(0x7f0000001880)=""/123, 0x7b}], 0x6, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x201) perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x7, 0x7, 0x48, 0x0, 0x1, 0x900a0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0xaba}, 0xc000, 0x4, 0x1, 0x6, 0x6, 0xfffffff7, 0x401, 0x0, 0x7, 0x0, 0x3}, r1, 0x10, r0, 0xb) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000080)) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f00000000c0)) write$tcp_congestion(r2, 0x0, 0x0) 13:05:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x500, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:05:30 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:30 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) 13:05:30 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x200000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:05:30 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:30 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3076.370305] FAULT_INJECTION: forcing a failure. [ 3076.370305] name failslab, interval 1, probability 0, space 0, times 0 [ 3076.373179] CPU: 1 PID: 19953 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3076.374254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3076.375558] Call Trace: [ 3076.375910] dump_stack+0x107/0x167 [ 3076.376493] should_fail.cold+0x5/0xa [ 3076.377093] should_failslab+0x5/0x20 [ 3076.377696] __kmalloc_track_caller+0x79/0x370 [ 3076.378416] ? p9_client_create+0x51e/0x1230 [ 3076.379116] kmemdup_nul+0x2d/0xa0 [ 3076.379677] p9_client_create+0x51e/0x1230 [ 3076.380353] ? p9_client_flush+0x430/0x430 [ 3076.381021] ? trace_hardirqs_on+0x5b/0x180 [ 3076.381702] ? lockdep_init_map_type+0x2c7/0x780 [ 3076.381710] 9pnet: Insufficient options for proto=fd [ 3076.383259] ? __raw_spin_lock_init+0x36/0x110 [ 3076.383994] v9fs_session_init+0x1dd/0x1680 [ 3076.384677] ? lock_release+0x680/0x680 [ 3076.385309] ? kmem_cache_alloc_trace+0x151/0x320 [ 3076.386078] ? v9fs_show_options+0x690/0x690 [ 3076.386786] ? trace_hardirqs_on+0x5b/0x180 [ 3076.387471] ? kasan_unpoison_shadow+0x33/0x50 [ 3076.388205] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3076.389014] v9fs_mount+0x79/0x8f0 [ 3076.389583] ? v9fs_write_inode+0x60/0x60 [ 3076.390230] legacy_get_tree+0x105/0x220 [ 3076.390892] vfs_get_tree+0x8e/0x300 [ 3076.391472] path_mount+0x1490/0x21e0 [ 3076.392080] ? strncpy_from_user+0x9e/0x470 [ 3076.392757] ? finish_automount+0xa90/0xa90 [ 3076.393434] ? getname_flags.part.0+0x1dd/0x4f0 [ 3076.394157] ? _copy_from_user+0xfb/0x1b0 [ 3076.394819] __x64_sys_mount+0x282/0x300 [ 3076.395454] ? copy_mnt_ns+0xa00/0xa00 [ 3076.396062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3076.396874] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3076.397687] do_syscall_64+0x33/0x40 [ 3076.398269] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3076.399089] RIP: 0033:0x7f3826f8db19 [ 3076.399666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3076.402539] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3076.403659] 9pnet: Insufficient options for proto=fd [ 3076.403720] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3076.403741] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3076.406945] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3076.408042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3076.409159] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3076.429641] 9pnet: Insufficient options for proto=fd [ 3076.431989] loop5: detected capacity change from 0 to 135266304 13:05:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 25) 13:05:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x600, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:05:43 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) 13:05:43 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1000000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:05:43 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:43 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:43 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x20, 0x8, 0x0, 0x0, 0x0, 0x80000000, 0x12908, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x6}, 0x4, 0x101, 0x8, 0x8, 0x100000000, 0x5, 0x200, 0x0, 0x8, 0x0, 0xfff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) [ 3089.411848] FAULT_INJECTION: forcing a failure. [ 3089.411848] name failslab, interval 1, probability 0, space 0, times 0 [ 3089.413350] CPU: 1 PID: 20180 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3089.414234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3089.415297] Call Trace: [ 3089.415643] dump_stack+0x107/0x167 [ 3089.416105] should_fail.cold+0x5/0xa [ 3089.416589] ? create_object.isra.0+0x3a/0xa30 [ 3089.417162] should_failslab+0x5/0x20 [ 3089.417658] kmem_cache_alloc+0x5b/0x310 [ 3089.418170] create_object.isra.0+0x3a/0xa30 [ 3089.418727] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3089.419367] __kmalloc_track_caller+0x177/0x370 [ 3089.419968] ? p9_client_create+0x51e/0x1230 [ 3089.420521] kmemdup_nul+0x2d/0xa0 [ 3089.420970] p9_client_create+0x51e/0x1230 [ 3089.421525] ? p9_client_flush+0x430/0x430 [ 3089.421945] 9pnet: Insufficient options for proto=fd [ 3089.422062] ? trace_hardirqs_on+0x5b/0x180 [ 3089.422075] ? lockdep_init_map_type+0x2c7/0x780 [ 3089.422093] ? __raw_spin_lock_init+0x36/0x110 [ 3089.424913] v9fs_session_init+0x1dd/0x1680 [ 3089.425457] ? lock_release+0x680/0x680 [ 3089.425973] ? kmem_cache_alloc_trace+0x151/0x320 [ 3089.426574] ? v9fs_show_options+0x690/0x690 [ 3089.427137] ? trace_hardirqs_on+0x5b/0x180 [ 3089.427682] ? kasan_unpoison_shadow+0x33/0x50 [ 3089.428258] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3089.428899] v9fs_mount+0x79/0x8f0 [ 3089.429344] ? v9fs_write_inode+0x60/0x60 [ 3089.429859] legacy_get_tree+0x105/0x220 [ 3089.430371] vfs_get_tree+0x8e/0x300 [ 3089.430845] path_mount+0x1490/0x21e0 [ 3089.431324] ? strncpy_from_user+0x9e/0x470 [ 3089.431871] ? finish_automount+0xa90/0xa90 [ 3089.432416] ? getname_flags.part.0+0x1dd/0x4f0 [ 3089.432995] ? _copy_from_user+0xfb/0x1b0 [ 3089.433522] __x64_sys_mount+0x282/0x300 [ 3089.434033] ? copy_mnt_ns+0xa00/0xa00 [ 3089.434521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3089.435193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3089.435837] do_syscall_64+0x33/0x40 [ 3089.436302] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3089.436948] RIP: 0033:0x7f3826f8db19 [ 3089.437412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3089.439718] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3089.440665] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3089.441555] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3089.442436] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3089.443340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3089.444223] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3089.448457] 9pnet: Insufficient options for proto=fd 13:05:43 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2000000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) [ 3089.457673] loop5: detected capacity change from 0 to 135266304 13:05:43 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3089.470625] 9pnet: Insufficient options for proto=fd [ 3089.527384] 9pnet: Insufficient options for proto=fd 13:05:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 26) 13:05:43 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3089.547141] 9pnet: Insufficient options for proto=fd 13:05:43 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:43 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) 13:05:43 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3089.586993] FAULT_INJECTION: forcing a failure. [ 3089.586993] name failslab, interval 1, probability 0, space 0, times 0 [ 3089.588779] 9pnet: Insufficient options for proto=fd [ 3089.589823] CPU: 0 PID: 20361 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3089.591874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3089.593177] 9pnet: Insufficient options for proto=fd [ 3089.593821] Call Trace: [ 3089.593849] dump_stack+0x107/0x167 [ 3089.593873] should_fail.cold+0x5/0xa [ 3089.596766] should_failslab+0x5/0x20 [ 3089.597659] __kmalloc_track_caller+0x79/0x370 [ 3089.598740] ? parse_opts.part.0+0x8e/0x340 [ 3089.599055] loop5: detected capacity change from 0 to 135266304 [ 3089.599743] kstrdup+0x36/0x70 [ 3089.599762] parse_opts.part.0+0x8e/0x340 [ 3089.599784] ? p9_fd_show_options+0x1c0/0x1c0 [ 3089.603204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3089.604423] ? quarantine_put+0x8b/0x1a0 [ 3089.605362] ? trace_hardirqs_on+0x5b/0x180 [ 3089.606374] ? kfree+0xd7/0x340 [ 3089.607204] p9_fd_create+0x98/0x4a0 [ 3089.608068] ? p9_conn_create+0x510/0x510 [ 3089.609030] ? p9_client_create+0x798/0x1230 [ 3089.610053] ? kfree+0xd7/0x340 [ 3089.610836] ? do_raw_spin_unlock+0x4f/0x220 [ 3089.611873] p9_client_create+0x7ff/0x1230 [ 3089.612863] ? p9_client_flush+0x430/0x430 [ 3089.613850] ? trace_hardirqs_on+0x5b/0x180 [ 3089.614860] ? lockdep_init_map_type+0x2c7/0x780 [ 3089.615970] ? __raw_spin_lock_init+0x36/0x110 [ 3089.617044] v9fs_session_init+0x1dd/0x1680 [ 3089.618055] ? lock_release+0x680/0x680 [ 3089.619002] ? kmem_cache_alloc_trace+0x151/0x320 [ 3089.620128] ? v9fs_show_options+0x690/0x690 [ 3089.621158] ? trace_hardirqs_on+0x5b/0x180 13:05:43 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3089.622168] ? kasan_unpoison_shadow+0x33/0x50 [ 3089.623501] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3089.624712] v9fs_mount+0x79/0x8f0 [ 3089.625552] ? v9fs_write_inode+0x60/0x60 [ 3089.626542] legacy_get_tree+0x105/0x220 [ 3089.627530] vfs_get_tree+0x8e/0x300 [ 3089.628420] path_mount+0x1490/0x21e0 [ 3089.629335] ? strncpy_from_user+0x9e/0x470 [ 3089.630362] ? finish_automount+0xa90/0xa90 [ 3089.631408] ? getname_flags.part.0+0x1dd/0x4f0 [ 3089.632518] ? _copy_from_user+0xfb/0x1b0 [ 3089.633517] __x64_sys_mount+0x282/0x300 [ 3089.634485] ? copy_mnt_ns+0xa00/0xa00 [ 3089.635430] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3089.636684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3089.637931] do_syscall_64+0x33/0x40 [ 3089.638840] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3089.640073] RIP: 0033:0x7f3826f8db19 [ 3089.640967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3089.645406] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3089.647253] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 13:05:43 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3089.648989] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3089.650816] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3089.652545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3089.654280] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3089.656222] 9pnet: Insufficient options for proto=fd [ 3089.764572] 9pnet: Insufficient options for proto=fd [ 3103.003447] FAULT_INJECTION: forcing a failure. [ 3103.003447] name failslab, interval 1, probability 0, space 0, times 0 13:05:57 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9000000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:05:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 27) 13:05:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:05:57 executing program 3: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000640), 0x6e, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/153, 0x99}, {0x0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/96, 0x60}, {&(0x7f0000001840)=""/39, 0x27}, {&(0x7f0000001880)=""/123, 0x7b}], 0x6, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x201) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)=0x20) perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x7, 0x7, 0x48, 0x0, 0x1, 0x900a0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0xaba}, 0xc000, 0x4, 0x1, 0x6, 0x6, 0xfffffff7, 0x401, 0x0, 0x7, 0x0, 0x3}, r3, 0x10, r0, 0xb) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x440100, 0x0) pidfd_getfd(r1, r2, 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x100, 0x4c2780) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r5, 0x29, 0x36, 0x0, 0x0) fstat(r5, &(0x7f0000000100)) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x63) 13:05:57 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:57 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) 13:05:57 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:05:57 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xfffffffffffffdef) [ 3103.006376] CPU: 1 PID: 20424 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3103.007984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3103.009834] Call Trace: [ 3103.010429] dump_stack+0x107/0x167 [ 3103.011263] should_fail.cold+0x5/0xa [ 3103.012113] ? create_object.isra.0+0x3a/0xa30 [ 3103.013131] should_failslab+0x5/0x20 [ 3103.013982] kmem_cache_alloc+0x5b/0x310 [ 3103.014894] ? legacy_get_tree+0x105/0x220 [ 3103.015852] ? vfs_get_tree+0x8e/0x300 [ 3103.016742] create_object.isra.0+0x3a/0xa30 [ 3103.017735] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3103.018885] __kmalloc_track_caller+0x177/0x370 [ 3103.019936] ? parse_opts.part.0+0x8e/0x340 [ 3103.020907] kstrdup+0x36/0x70 [ 3103.021625] parse_opts.part.0+0x8e/0x340 [ 3103.022548] ? p9_fd_show_options+0x1c0/0x1c0 [ 3103.023054] 9pnet: Insufficient options for proto=fd [ 3103.023573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3103.023591] ? quarantine_put+0x8b/0x1a0 [ 3103.023611] ? trace_hardirqs_on+0x5b/0x180 [ 3103.027303] ? kfree+0xd7/0x340 [ 3103.028047] p9_fd_create+0x98/0x4a0 [ 3103.028875] ? p9_conn_create+0x510/0x510 [ 3103.029794] ? p9_client_create+0x798/0x1230 [ 3103.030772] ? kfree+0xd7/0x340 [ 3103.031524] ? do_raw_spin_unlock+0x4f/0x220 [ 3103.032501] p9_client_create+0x7ff/0x1230 [ 3103.033451] ? p9_client_flush+0x430/0x430 [ 3103.034395] ? trace_hardirqs_on+0x5b/0x180 [ 3103.035373] ? lockdep_init_map_type+0x2c7/0x780 [ 3103.036427] ? __raw_spin_lock_init+0x36/0x110 [ 3103.037462] v9fs_session_init+0x1dd/0x1680 [ 3103.038425] ? lock_release+0x680/0x680 [ 3103.039321] ? kmem_cache_alloc_trace+0x151/0x320 [ 3103.040414] ? v9fs_show_options+0x690/0x690 [ 3103.041398] ? trace_hardirqs_on+0x5b/0x180 [ 3103.042341] ? kasan_unpoison_shadow+0x33/0x50 [ 3103.043350] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3103.044470] v9fs_mount+0x79/0x8f0 [ 3103.045264] ? v9fs_write_inode+0x60/0x60 [ 3103.046193] legacy_get_tree+0x105/0x220 [ 3103.047110] vfs_get_tree+0x8e/0x300 [ 3103.047948] path_mount+0x1490/0x21e0 [ 3103.048809] ? strncpy_from_user+0x9e/0x470 [ 3103.049783] ? finish_automount+0xa90/0xa90 [ 3103.050746] ? getname_flags.part.0+0x1dd/0x4f0 [ 3103.051765] ? _copy_from_user+0xfb/0x1b0 [ 3103.052695] __x64_sys_mount+0x282/0x300 [ 3103.053584] ? copy_mnt_ns+0xa00/0xa00 [ 3103.054466] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3103.055629] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3103.056774] do_syscall_64+0x33/0x40 [ 3103.057607] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3103.058727] RIP: 0033:0x7f3826f8db19 [ 3103.059561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3103.063678] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3103.065355] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3103.066944] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3103.068515] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3103.070088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3103.071645] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3103.082290] loop5: detected capacity change from 0 to 135266304 13:06:11 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x100000000000000) 13:06:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 28) 13:06:11 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="92fb5dce86412de4b43b39a4bbbb624545b55dfac71eb18c3f049c7d73edac9fbbb097af48fa0b4d65476869bf33e3f94855c43f6d3b17f56409f6a2e03dd37de01408e4e3024f07a9370369ddd72a91335d508aafc8b52e84a25ac813a997104924d68ec00aed200f162daa79b4d00e04c000aa05685e453cb421cee039d9a3eb184a3b7d653b54be140a3b6cc91298e75e80d5ce6344627eee180ff4d39822895fa56622f573429b51cfba8ab813331a26d4555964275e3303bc2a55c1cd062aecd3419f0617c7070ba141016b991986be30f293298bddd5f470a8cbb2ec92e0eb647978ad62f8386bfe34460f13749e9ee331bb0b32a5c3c6677080c7", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) 13:06:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/204, 0xcc}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000200)=""/23, 0x17}], 0x4, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c00)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r1, 0x0, &(0x7f0000001540)='./file0\x00', 0x60, 0x280842, 0x12345}, 0x7) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001ac0)=ANY=[@ANYBLOB="010000543d973d4c2f956025fa0100010000001800000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001a00), 0x3, 0x82800) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000001a40)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000001a80)=0x28) getpeername(r2, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000000c0)=0x80) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="8edc31b56f87106dfd09a7e9145a8735b5f2b32aece11835f5d2f428d27ae8b1f6bccb0a9fdd28175be8be93af2487a4a2bf562ca42d4401d8dcae48e644712c9ad46dfcf6c666aa2968c75280499db2b5ab4d26042ea36ee164c47bfe4f9e79fe77aeb221b6b228a202f4bfc13349a6704ef8fa27f70bb1db8e7d47834fbbe217d1b92acbaa989bff3d89926ff5a81d39520573a34e3650c627fad1759619aad1cf767e057afc8523c4fa5a70d833cf03ada16e082e96b505f74cf885050bc068956cef1b398fd8f9eb181d13", 0xcd}], 0x1, &(0x7f0000000280)=[@tclass={{0x14, 0x29, 0x43, 0x7}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f00000003c0)="de4019d2d6ed8fc716c3981880744d0ff0bce1a2aa21333f1d27eaab13027c659f6abf37f143d868738baf6d074e83f3f45742840816370279984b4bffdd73af81ae8bca", 0x44}], 0x2, &(0x7f0000000480)=[@hoplimit={{0x14, 0x29, 0x34, 0xfff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x30}}, {{&(0x7f00000004c0)={0xa, 0x4e20, 0x5, @mcast2, 0x8}, 0x1c, &(0x7f0000001bc0)=[{&(0x7f0000000500)="6fe68071863eb9ce7179cb9ee0ecdecfdf5ccd60495ba981c0e6e57e", 0x1c}, {&(0x7f0000000540)="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", 0x1000}], 0x2, &(0x7f0000001580)=[@rthdrdstopts={{0x90, 0x29, 0x37, {0x4, 0xe, '\x00', [@pad1, @calipso={0x7, 0x40, {0x0, 0xe, 0x5, 0xfffe, [0x3, 0x81, 0x40, 0x2, 0x9, 0x1, 0x0]}}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x10, {0x1, 0x2, 0x1f, 0x3ff, [0x9]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1000}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001640)="61d0f86d506f54b4612cb3093ce1e566e4b7eb505a02a7299a4bc4ce85d56582f7af6cc1e218774dd906819cff1d9bac4807399e731a0802c712b806a162c4c152308dffdf273e2ccc917affcef0f22ec142cc0591f0d3d857b3414ae3f03d05d4875858d4426f45f11e5acb747142de8bb6466f2d75939c8df60b4c5c366e685dc5ab6e95a092376f4a65a83aebd91e8d77c61d8a4b8c80416b95b403efd551087d11daf91a354e20dd52f3dd6120b0aea86622223aa4059a546728c19dbad612f63c1c026bfee9cd999581a2cdca6e1781fbef26454365a4df408835b814483482514682835edbcc04", 0xea}, {&(0x7f0000001740)="45e0f45b71efd41cd8e4543eac23c4f08bf8469838aa35348457cf5a261776ee65b73f870bb5e5d1b22fb9a1c9c3dec55c01f8fa43d050d7c20572f538f133d7130bfbaf39ef6fec1049ff1178396632b85992b0dc67a60df1a55bfc6dd683f042c22f5e29b77a1d4526ce649981c985fb3ffc922d44fe693d43798d870184966a5881ba1382e516592bb2520050e39d79", 0x91}, {&(0x7f0000001800)="70099e41e92735a4404bdf2a597a67cb8336971f5fc7b3ee27bd4abf351fcda5716530b63d75d8737300d5226692bc", 0x2f}], 0x3, &(0x7f0000001c40)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x0, 0xc, 0x1, 0xa0, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x5}, @private0, @dev={0xfe, 0x80, '\x00', 0x31}, @dev={0xfe, 0x80, '\x00', 0x3d}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x78}}], 0x4, 0x48000) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0x23) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x4e24, 0xffff, 0x4e21, 0x0, 0x2, 0x40, 0x0, 0x84, r4}, {0x7ff, 0x1, 0x1, 0x20, 0x8000, 0x400, 0x8000, 0x9}, {0x1, 0x8, 0xc024, 0x2}, 0x2, 0x6e6bb9, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffc, 0x0, 0x2, 0x9, 0x1010001, 0x4, 0x99e4}}, 0xe8) sendmmsg$inet6(r3, &(0x7f0000008180)=[{{&(0x7f0000001880)={0xa, 0x4e23, 0x8c, @rand_addr=' \x01\x00', 0x9}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f00000018c0)="fc8550ae0e9195d8b8ddfe074b3df9b265749cb638df3a62466a3e9402b29e57cbfc", 0x22}, {&(0x7f0000001cc0)="55e2f3954b898d4febb20ee4bf46e497a762f6bafd75317ab984e2548f3503b5136b3e131bd3b92b69aa5044b1dbb9fa8fd2611d1ae349965ebd0bd9cb0765a5ec406c69c73f65da215beb4db341a6d44eb0f9820ce6c35ba087252f326a3e463cffa50a7863889644c2e8eb088c1e2b5192d85c594aeabe4645be75f786ead4d75dae5a8aba9e47f4568db245868515e6940e44753588a4c724e5cdc64b0a035d3298e3a3509fb3b3462306204dcc43530b863eb8956ca724abbf6a93ea806e6f2bf9ecbc267e74b79e8732d6cc7ffa69dfaa81c7320eb1206e70f1f33799aa9c72ff1240dda0", 0xe7}, {&(0x7f0000001dc0)="046650c464ee98f76482fdbe4ed2d7dc59e969e206c1d89606db", 0x1a}, {&(0x7f0000001e00)="3e6d52cc52af6c202d8e543eedfcc2c740a085fe80c64f516eeac0a4dbd8522c4f1b094762d4ea6e80b4a6919bdb44cf2db3afa9e4265d0ab5e32df89ceb12ca665738b006b90d69b93e6b860c29a8b2e1556ee934a869249db4c6afc7d6c61bf95ee424a17fa5cb041f11dd34df42028b9b230002037a8ebbdb0b70c1cf16a1ee396f8dc8bfb5bdf5d46ee23097aa87d3a3bbc48c29722b1bc309d2ead174edace5739d50ac0c82b468815b7292eb6364a38b732a9d9f8daf799bc33a3f8a9a7c6b3f3c705591744c6f60683a81199762338322251b8f", 0xd7}, {&(0x7f0000001f00)="a061411a898b381ea267490dbf215920d6f88872b4454629e18b14b975fc94eea2dd389aa122d7951244834a5f8934551b06fc5eb0bd3e193c78276b65a5f770985d8dac7a651667297334eeea5d4dbfc9091e4e011a5c083e05cdb383f9ff168c5e6f9ae38f0c2765151e80dc95e9ef467463db7f157c04af03ad37e7f4be9b3201d2", 0x83}], 0x5, &(0x7f0000002040)=[@dstopts={{0x150, 0x29, 0x37, {0x5c, 0x26, '\x00', [@generic={0x5, 0x3c, "0840d57d4038b4d7835bdf6f5d24f808996e6c36eb68b1ddbc741d8e3c288ba419adffab444858cf245baa3640d8a970fc84a82e8f0878cecf4679cb"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x80, 0x6, [0x8, 0x5]}}, @ra={0x5, 0x2, 0x200}, @pad1, @pad1, @generic={0x1, 0xb4, "34f640654ca91dbbf3f41f618bb9c13567aca0a4dd7e91e4d676a32e535d046f2d9418c27e8cb9b99cd81268f88d4de7ab6285b84fa075e095cd06494782557dd76dcacef95f4e08c322dc2575dda06e4ef3ea600fd71a1925c0bb2c8585d71b676b8894fac0bfdb4afbee64fb760da55691177192f77a0e5b2de8b566e8804f7f01879d6e7ff5214089b2bd83ced102b21957148313da1ffd945df6992393e419f8cbfbeb8ba38559ff68585cdfc4a20c9e4504"}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x10000}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x3}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x1, 0x4, 0x0, [@remote, @mcast2]}}}, @hopopts={{0xb0, 0x29, 0x36, {0x89, 0x13, '\x00', [@jumbo, @generic={0x3f, 0x90, "426b16d9a51dcb278e7af64477a5ebb213c734271981504ef273eab4363aba8b4e529d7cf204477d4d5fd9d7bc67e6517cb54b644f14c7fa551b3a17cc2b00e82b4b883c760b840177854af03432ea63af20206882b486bfc6d268e2163d5ac88989ddba3f59f8ffc58addebd3e3af385c34ae4cf34b27ec2129268ce2b5d0b8484eff41358edc02215ecc8eab6034d4"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@ra]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r4}}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x2c, 0xd, '\x00', [@ra={0x5, 0x2, 0x3ff}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x7f, 0x40, "0f85ce03a92e8f3612d69029a7dc799f21f1fbb2aa7071dfd76a74986015fbe6c17f6d6a756d8b9091e991f06e1fa149cb051e8a6238a06d6a8fc07f845d84b7"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x318}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000002380)="7224066967ce98ec501665b827a1fb25717077ed25d4670ef7382e3a0ab68177cd5ef320782cffbecf3c08f8dc4534912c3f14ac81264e36b49db3875574fc31153c762027ee43727845b092d51eba4e37c55828a782b2cb64e4089929cf924539de045e2f29de2fbf35055b800a89be70564dedab92f785c883121976445a089395674e091be7213cde3467ac78dab9969b0525780e53f0171690892c71f307423f5d432a81", 0xa6}, {&(0x7f0000002440)="c3f84206d52496aad40dbb3b499c8b06ad32079d9eb32fa87c720560df0b233047", 0x21}, {&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000003480)="dd562d86bc8a7814fc1182dd5a3e9ce99434c3a808969ed5900171b5e59192f687f879765d4223fb21caa3ec8b91f91d5f5039fa58252566e63b7ca97e621f4e5c6e1e874f20ddc92d242664853c3130895a9aaad815b195b84d1fce770db5cd5098363514d1d9ace257e92f38d4d2f206cfcda2bc11b8f900bebd6d3ca76c2c8c377235f1caee", 0x87}], 0x4, &(0x7f0000003580)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x7fff}}, @rthdr={{0x98, 0x29, 0x39, {0x33, 0x10, 0x2, 0x7, 0x0, [@remote, @local, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0, @private1, @local, @private0]}}}, @dstopts={{0x80, 0x29, 0x37, {0xaf, 0xd, '\x00', [@generic={0x40, 0x60, "65695aeaa1f8fe4eaa7a30a808dc11f12ae5b1f3dc85941b5e426b776b88a25f700b77fa5625036ab3457731551579f9a900fc5a708be19c42d66879e44784ab9d82ad717e4ac5d14aff9a1ad2a264a0b09d8ad851dfd389d06e015adee9cfc9"}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x3}]}}}], 0x1a8}}, {{&(0x7f0000003740)={0xa, 0x4e22, 0x0, @local, 0xfffffffe}, 0x1c, &(0x7f0000003ac0)=[{&(0x7f0000003780)="6bf66cc932340232bd6119c973166d5cd17fbdd11891d426f78c521913c0e0f30e7dd7142cd29272ea1b36c6156de0f211a8d47bd59677dc4c6eee46b0bcc75da797d7b9b38dd0151d2d04870d287d7036d4a66b8904493c246ae1bf250cc28145b95cabcc70406f0813c0997c0f1d57f9233901c107af1f327a39882306c142ec355b333c128e76cd5d4dfd80c9d9b26b4cb0b8c94f37ece9817e858a92c90f12103bbf05849f662b3766822dd6e084821b39c33e46fd88a0", 0xb9}, {&(0x7f0000003840)="f650f8b3a67c1d10684c37721fdd2339dc77f698b506281bffd1bc2593e79e75238ef8c9753b73084d797698f9b379d13ad4d9e933bfdedb85f055eb460920f0775a1f076abdac", 0x47}, {&(0x7f00000038c0)="6e48befb49ad58ee041dd9ba52dbe8b984220f87", 0x14}, {&(0x7f0000003900)="d89ca98d0208176bc269e9d88d459f39e237eea9dcce704a62e7634b96fe8eb045a6b4c403afa34878538894456fad031ef86fc9d4240f2be87e9a0485e701fe75569c65f499c28747d34a4eb63e33dc4cd078ab235f23ea715ea0fc2367f79cbe5e0819d47b85b4dee46785a1c5922690619463af5a05b74f8430dd9746265dec06a0bce017c191f79ad7a372710cdc1b95749d406ed64c0f409bac14749a5b4e0385a77c5038ea94ae331b6bc061d363109ce7ae3c0dd43264a974143d88a337629890b454d2962f7ac401a4d8c85bd481d44e0956d14ab8f1e2209c12e9ddb2cf2f0e36299220fc22aa01bf03ca", 0xef}, {&(0x7f0000003a00)="90934b5aef989b8d529042a7e72f056083689e8c9ddb82d356c574273fdc7ab1ed88618cd9866c1d47d2a8566493908300468be84768f385f662706a6b2227b6470135fdc9ba6b11e8eb0720b334bed86465369d56432e1b3cfc1e4e5b186cd1281b22c5b1535c6ecbd7a0cf51f4bd40dff683378cf67de348bc33e97d657cb16fb1ed4f501c2cba31d673e8764eeeed082c3a690d928865a25de11e544fda5c3d74624ba1c5da33be42853297189e9cda2ef9ec", 0xb4}], 0x5, &(0x7f0000003b40)=[@flowinfo={{0x14, 0x29, 0xb, 0x20}}, @rthdr={{0x58, 0x29, 0x39, {0x21, 0x8, 0x2, 0x1, 0x0, [@local, @remote, @private1, @mcast1]}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x2c, 0x7, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x7f, 0x0, [0x2, 0x100000001, 0x3f, 0x8001]}}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x100}, @jumbo={0xc2, 0x4, 0x40a2}, @ra={0x5, 0x2, 0xea4f}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@pad1]}}}], 0xe8}}, {{&(0x7f0000003c40)={0xa, 0x4e22, 0xdc0, @empty, 0x1c}, 0x1c, &(0x7f0000003cc0)=[{&(0x7f0000003c80)="05adf730de28b4d0e435b479a239dcb11eb812850fc7502ac38b5d3e34b4155f2a", 0x21}], 0x1, &(0x7f0000003d00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xe29a}}, @tclass={{0x14, 0x29, 0x43, 0x101}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x33, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2b, 0x4, 0x1, 0x5, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x11, 0x10, 0x0, 0x81, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @local, @dev={0xfe, 0x80, '\x00', 0x32}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x158}}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000003e80)="9785cb318d207a8ec342ddce9b80e4fc8652a02ea648db5d2b850e0849bd31f59f7982c16d3c1fbbc1be2fcbde6450bbe95ca90b162d451e4faa93307fcdb49144df25b30d355643089d87ede9b7876b5a68e18a034d51567ad3c26d609d8fcc6b7b44128b1de47e03bc44", 0x6b}, {&(0x7f0000003f00)="ed08e31e169feaca39b9e6a29ec0b7fdc09c910418efaf81d499b82cf274a30d5c7574d4439f4926e4c1785333ab702b4b04da57a05697f955aa6dabc3ee7aa78dc3114d1f8876a0fc899bcd91e4f6bf772f5764fc", 0x55}, {&(0x7f0000003f80)="accc24c80dcc351a135490edeaae5694cac8607633ac2174825eac55d7ad6aea360a61d155441639da212d47f168e7a0374906959108fa9dc8d9497be746084ea5a41bcbc87ac18fa8a3e9e03538df7ecaf233c0ebbe4cadc07eb06700f5238ab07003285751eac3de949ed07f44d22b8d9ba48fa47138fc861dd84da22a3579886a02e38f1df9db239eb161f8acd24df6147a5ae8d0e7518fa5f01d4ec892fd683a7ed5e072c923d85fdb18abf78f0f7c0a1d1947d50a36c485b04b5c7a8935980efd0dca9a2a9050bda1a8ff646940ba41", 0xd2}, {&(0x7f0000004080)="17db12451a553fd5c7012bed26f09a59e1a2a00974b8aa3cd60b109c8e871fc97b00ffb755143b11aae5b4d5b09ffbf8b51f263334759ebd18634d07d8780e83d3c0b709f135bfcba66ff157d6f9d6e9953db93df113fbcc1dce567f7d6818aea68eac2feb44976e364c046addbfc9c79f2cce8661fecbf168fe17338ebb63c95697983b4dd1644d4c9d2b2ed174f2910e257f9ee47fe9e973dd3efe799a0dd58498838b83282599cc2d41d6e6b84a3ea074371243c3992359b63bf7780484b8e37f0f46ba247d9386cd4cdbb95758288350cb4d16f7914bf4106d5b93c08dde2930fb1978d95dd91833afca", 0xec}, {&(0x7f0000004180)="e5253a5af2ade15a5673a7cf54e8b8903d4a67de22959cc65c0c9ac083c3de9a5cd5ce627d9f8236cad914528167f9b207b97e316d75effcbdc8f4f08f9f4bcb6f73d1ed089b742adbfc751e", 0x4c}, {&(0x7f0000004200)="3ebcafb3e0c3c4388d8e6c9937e7bf056a8227e01d2d7dc5785e14cc53b3d0292c8159c089bd1849b45263162301ed282b06284d1b6f4039631fe4d7488e06aa51adbd5ea4fedec5faee363aabe45757c92f", 0x52}, {&(0x7f0000004280)="edcb3abc12a3e167f38f47a79fb283a7de4a3a5796535e13485f4af051ecbd72a4b9cb1a8e806d658add7c4952383e3c115bbfabdf2ca85bdf1243cdff797227b2309b59b67305973f0f7942177531104afd7df7876e7ec0de5ebc18dec8ec0e8fb84858a2ac44c14a6fcd6dbe1e22c078cafa83848cec2f3a56cb48ae37268b7dd3f695722e5a90d4fd1dc76a44275d076dbcd0fe5cd67c8dff3dda25d0dd5691488d9af44dd770fbac", 0xaa}], 0x7, &(0x7f00000043c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x8000}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dstopts_2292={{0x1038, 0x29, 0x4, {0x87, 0x204, '\x00', [@hao={0xc9, 0x10, @private1}, @generic={0x0, 0x1000, "23facafd76c3858b5e73b3b2880cf1a707270571847c4a0d0599acf92e02a307cde492d8737d8213518341845c65da9cf0b67a9b228a06628195383dec65313ddd6cc199f246077464aade90b078f896e098ed5de8503951da85d7424aa643e97f06c59d0f26b013dd44dbea9a760c239612ad748394e8a6539e3468b3010a513cf4d0f5c9e7676b64ac7d39786c919c764c7892b8dde125cfed1aa803b90c0e325635043b631edd3ac8e4a73edb832b2d466d45a150891c3f7b364a2c56464abb107474ffff08c40fca31104d8d1b0355cbf6ce6ba567b328fca2aec5f99eb8dbd49b4355123d434c3485f6e5fb05683fc562993a2cc9458cb7301757948ac74fc0b6c5b9b9877354b3c1217356713c8c55673fec73814d7f4e0352fd547b6478f42fa0e5af5746832406674c6cbe52baaea85711010beeac886a0189c7e8027c0de3f8619be91b2fd549086719e68afd662adae3a6986a8b88abcbb8dc7f21e4fc082d974b701e282314deed9b5401482305a4630a14e64e8928334164a60b9541ff79af3fa68c87bb91c3b05ba1bdd5e4d21b30207dbac977f5dd8468be7e5ae9f0315dd26c62923578f8244d0c454d6e6790c4e7434b8596a7f7eb0bdafd9d55f89de0fb07fc21d7ba45c36f6dbb7ccc5a72f2f6867743cfa890cc666be4f0645baf17c44813f7ea47127c32b7bddb9c4c663ed997c9307c6edcc22da93c8eca42368fd09ff89f1d8c2e351effcfeeadc8248289b7e44ad140c15f4e7c4119e3e7afcd8768ce25f049af0c90f6f50e0e68e886b654bb77915171306944a593be4c0dc44af3029b0001642f7b48463ca24566b5fcdb495be94fed72ea270a85c764a09d6932f7de3e3a33d8a9838649e96d8daae15976b7d51c42e090a322e6dafc7821e51d656a900d84991c0097c210dd2204b6a22821bff97e28e2987e29967dc4613795e264a807a6557dff9e174747d982972346e76a77c29e68368b4c130c76b674fa218f6180426ef82f71104bca7c31c9a15a9a553f6e47cec0a9b04dc223595962ea24c10920fc5e02e13069f7138df9e9180112924acb8941e91310a188ca5db6d1921524adb74659d683fb10e48718ecde73d567b8847b69badf6322c7248a4ec6ae7ce28e4e7a52d20d10b15255343a90cbc89f0ea8ab48d1c9a952bdfbc3f9a1f0fd87376c35d1846bf55787398e8f80bacc1858f9ba429807f368fe1f3d6f30fc1d0bc343e326b35fec0751141fb7b145e1913888530dfc7b7989533c0128dc9abe3d68af9ee35dd08e310e7a2cd4caeed591964b811f7ca4a6083ebdedd1d1fd6ac760970f6d96e45370616bfaa2206a1073bf82d59ee39a1f74de25f3b54c6afb48655ef2697eaf51b76f81ca5b48aab794c2a61404c4b210c479bcd85528162c18f0cae88b968e8268f344d6132c61199e8d89bbdc5cca219b54e6f95b7c4d7a0ab797d8ce8f587aa0656f0da83c68390c0fb99143f62b7c98f1df8e150eb62e1b2a27f137e58739d514beaa029296570caff4ba5e423668c0c9169e48317a12da1c416068246e16109196928d2a1d5ed949651572604fae2ce757d9862f9d46fb4d77f8893146cf18ea88d721ba023ddf6a11c0244096479cd4d87ceddca18e919dc87e491c0be361100990bd9f6deb2f6dd2f444761c1c9cf6586d2f70cbef3ac11194c85b1fea0cbe3a98372dba4d57394bbf1af25e48f40eca9df1815fa5434b68065be7cd08ac1ebf7f696d21873e29f501144f59abc9d8559e30c6d8b83c2ddea7abc6d49032c8305e0077e80faa41d26266b52c0b47ca2bd9b978d468c0f40b8859f3a311fa1eec094043e6c53ca81fce641aa264f157da6a2e389ee97c7b07e8035442f5f8caba81e9b063f69d62f9e89be7334a5d2f6d209426549f77090df79b8eac2e7c4dc200b64a440d5ca6a583497b340f9fdaef4d641f3f410b9190beecf55b5f92b3ff44b8fa0405ff7fc9e0b3699468963c75d79ed036e4cc2ee4639232514899f208120db8a5419d3a48114f12c65da15dd30331ad9df5229ca3a479af6c73a4d684e7eee93de348337b542ccf4f87e82bfbaac9344ac5109b1c72737adf659a082d814e3763f0ddcb9f7602d660565ce920e75b032b5ef0eec8d95fe5de8aba430429681e9b694e88affe24506cddceefb6012ffee2af70425140f94b089d6db2c4cefa2388472842c9a96bf41318f02011a155aa3e2f2a9b9b894d146b5ad4722236b2d9f032ab238f0badb564076fb4a20faaffdc7ce6674a857e296a9b3da106814cf63ff22d00c5ea5366b0478362461e7c03c44ec4f47e7312a2f6d5750fe89789cc594c51c422d3b51871f451724215526e291f30277101c63aa2697c54e6776a34274393c0e843a6c99a1112b090514488cb7f5dde9ab035be29d6ef38ef612e4f0b763f87b21504c85d985afcaf0b168c303831c02b0585739f677171021d65cb712a2f225c41b20ac17b3972851b5ef0c6f58da64ae8920dbac2676579dd87c9ef5bccc2e30c507b017a8112b1349a330ed62a601d7859433a799b0988ed2eea4b39e9bc016c325794fdac374fb64f59c9cc939149249138fdc037af9f7b0f77317d58209db0d8a6c03532291052fc8b912d608aca3bd2824696cf9f13a287920f86beb9cab13aab35b165687bbff9205fffe638881edef778aa666f6c866162c801f7e3c3e38db506e72c4f7917d027b5d6c858ad2628f70e6abe0bf32bc5b664c682290f0de8f985ff99e9757b9dbed49f4da1b784d152f7175ed4b1469b899528250261e42c69cec8b1de8553816e901707cf469e0b6028f04c5a4067051b912fb8faa1df6f19db35a4e749a0ed9bb03d581385ee7404535b6e428592d40331632fd5b79afb586b5b1f3a69ab8b24bf12f86f675cbbbdefa65005faa01dd7175709a6b54a48a9ca23a497b3512279af5cd5062e75e611bc2e06d9b99eedb349a79832074bfbf28f59a95897fb7f3ad6216c20f9fc95b6317a793753797198f5e0b51088ee8c3f60148686a143a0694280c810f9c3fc4349a2632a3675e282688742b0e2f413f21068cb7811c2319f91f29c936c10f7f90fda594e852cf1c05a60f957645bdc8cfe7d1f601b9e2ba1324b2eccae8e375395c2a19f6ac171ddb102a0128c0bea829a7a7aa5f32d4a5fd75a1ca4757486223f43d89a760f20dabbe2dc2aa3fbb77d5479628e7093d52e3bc25629fb681a1183578a8a5eb3d515df44fe40562cb70e15650cfe93c91a9f828f42ca86ec58242f5a930f9c97fa969bff9aaa856b2519554aa20011112c4d0f481735ac3abde7103c95a7b4181d94a3de7e3148e17fa78df6a08bf5178fb3a8d74de21a9a59b6b4f6bf23351fc46e96a2e44f2c4a789731b28c2b6bedad806e2041d289e232c7b8fc1d0e74d02deca32c3cca7c2c1b9040f5dab3e186cfac4ffb188bd5732d10b248186af32039621dea13394345b6b72f41046aa182b782edbbebc49337de2223ce1d3202a2303b28f104f97ee93a6c04fa2b1c5e64e2d1dd983b29316b03632c00eae72c54901361cf3de08703298d096b9252b14636d5b0833b8a50cbf3c5e8138556b9354939f5bdeb6637e4619f111c41ff06fc72a9b42ce6b6c4287faf26743abd452f52afc7a891a4afb35626ede03919621d058baea3cfe04990cc4e09a2a5e367162cbe7dc743b8141c54981db523de48a2b4cdd2fbf20420bce5d303fb39261dc91ac117d8ad047c16f3c512d43128cec14384808e114babe807673d82b887cb89c4c4d878c6f61dd18bfcea5d93d1609649dc4979326a3f623dd7bf46cf9352ce391953e72e20d7d065bc6a5ca0af65735b1084890a0c36d9fce731a87957e3131aac63a3cc73b31f773e36a955be76a30b73bbf001febc7a2c840f6825619241e64b5820481d1d455e14cbf879fba95df42106fd63aaf07ffd386763ba187ea2069136aadb9fe52d58f2420773a0f4e5d77c84238a9af56e37f761b3bcacc177d923ac553f72c1afaa1a2aa1192dea8f8f2a09e44c071835d59569c57aaf2882f8c16d8acd72dc000e20c76c3015763d456780d4f13f202e2dd7f0a83f82921db79311d03c4931d8cbfb380ffacdf037689d5059a233f1d53a231fa6e3cdc0c957df831a3997b6d1025db2e082c998f7d7d40cefad7331dab99c39800547ea7d2aedbbc8ab7b4bbf0acbce60d1c4aae282e2f0a0ca49bb31871ab2297fd6ce2ae1f1b268d93757ae702e9abed4e444919489cca4765555e5e6303a54b7c98ea390af9ff7bb7e2ad70b6d79e91c06e861ed364771ac1d914a56105ce3636c1be3c0110c1937a6f0a7372c7a6ccd5c9a3625f44d216e6ed7c44f7bc15f3a76432520ff6d891d08832fda3cf28ccf1b10a349b7bbe77e71dec512d71b148846817aa3f0fa47c4d40a42c2df01fc172cf55f58a844a8141e3ecfc5f6344dc2ea4bbf763b256c3a282382cd3ff431a7457e04c76cc0f8860172b087f16f73cc3ffc42e73045e2fd51e647fb270458bf45ebc655068252fb8228831f0bff57c3eadfc4b5549c4fa8c28f8572d7515c5e4de99f4bfce8aecccb3731920dc70786ef8dc5a399ba9da5475faff699eee4514e9712ae6280c4b3851f5f16adb052459f6e09556c01939b9327e1e2d18dce261860d780d928d262fae068afcab4487d6ed5227b401d759283eef607c06dfd93c8df76f3449b16266d7fed8f68d5f4c3b170b4e288971995218e4e038524161eb01a4f98dcf06f88d982b0b3eaa417ee625cf7eea1d703049cb63cd9ddd0940f32a3769ca9ed5df2b554087b2a43bb1496cefbf18e531f48fa4b97c208fea7edb6cf233bfb5faf062f975b7a2ff2b1dd68bd582873c1006b48b01dcab19389a1b6cf8b6df11492e91687bcdd65ed7f08e7c8e387c39050c5d78336a4e777306d3927252c35288d8ec9f0bd5d627f91dff16ba0335dcd25f8fea3022ccb1cc2d47626f663f4f35dd1971c99d2163fd2b11218eff2327db95b6a5621bcc88e331bdd9745dd625cae07cc6de07d1b51931511958ac43ba1d34daeb9eb347e2a860d275158046be1e8bf4db57511bae9ecd462f3c168a6ad754e7d1bf01b2927a9d90743043daf2c0e6eea07747e3edadcdfac53aafe38d4abedb2b18e1d2dd4c11dd6c34a2d3513832195e70c4d36c133002a156488a8c22504e35c8b34f6961118afccf4f03eb0c18d20be9a128368381d31dcf023a9857cb78a5f71986cbcc2cced0c0610e35b3f71490ec3f5e5c51bcf2331727c6838d967f3584a9cde6204abfd47218ccb6ca56f04a7492dd834391ab9f99d6051a163b6b24cbefd519426d75df5320df45554276aae2af49b3ee801d1b90e26a9d6f0afb8df18c1d66fff179dd86df57485783c83ed752dbc20511dfba24c9979b205709751e0b7cf78b0e0ffb0e187ade96e9e84df4cf8fb85b1759aedf4f2bf08872f1efdab0e009e3b3a6c75a224e86b61fa6ddc329ecc7b6d49471098703f43c8a196cce9460c0c01f43f84d384260b36a6ce1b6159d176512ff3f93e8b4baba6070f8ceeccba3455fce0a109a823bfe89284d1ebf40aea59c38863af7c875745e31b6fc220379a86e9388074cd14180d563a3a135c3c83ab2428e5fba8e7e760db2785e7a1c579d44d7299cd1c6ac62b8ebbfcd475df9a769a7af938afdfeab59fba9b69512b7f22f0eadc3499c000a8924d0ec6eef002718f95b61da6cef4c09dd78878dc8724df9fd15d27ff3a3bbf073674bc7dae5577e6e0805f3186c54a50bfba915ca5"}, @jumbo={0xc2, 0x4, 0x200}, @padn={0x1, 0x1, [0x0]}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xa3d0}}, @hopopts={{0x68, 0x29, 0x36, {0x8, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x40, {0x0, 0xe, 0x7, 0x401, [0x2, 0x1, 0x1f, 0x4, 0x1f, 0xff, 0x0]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}}}], 0x1118}}, {{&(0x7f0000005500)={0xa, 0x4e20, 0x5, @local, 0x10001}, 0x1c, &(0x7f0000005680)=[{&(0x7f0000005540)="efa209b056980d66ae74ec141bb3c361068ca15ea995c630eb90ed00fb1379333de27eada1bf05c007c8584030fda182e8731231bc6b08f6c234d31e63f97aff63d72175df8fcb0fea4730ca0bf1b226666ee97660a178d55e55aeedba649d53ccdb00de1e3cb733f1bfa633aab3ce5f9c9cc601010e650aab9b7e5ea1a2f303d044d98f3813a3b36081119bdfb201742e010c2b9d2b344ef709e76990de074784e281202425bdf41b205200d75d38b5977eadd793a9fa4d", 0xb8}, {&(0x7f0000005600)="a756febf2ce0aab7f9c0d6cc92fd6379a6314deaed25c052dc5a1bde4ab9c5bd561b7e1c91ed2d2667add15ee1e5ef2e197c498021c26b52f7f99499ddc4acb14b6535cd1d66753dbdb3f36289f168939e47f1e2752d92c7f11bb7937b43e113b99089fd0a729ffce0a271375cfcd4d7fa0dfc08b9b71166a5b8d866", 0x7c}], 0x2, &(0x7f00000056c0)=[@rthdrdstopts={{0xf8, 0x29, 0x37, {0x0, 0x1b, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0xbc}, @ra, @calipso={0x7, 0x38, {0x0, 0xc, 0x1, 0x8, [0x0, 0x401, 0x6, 0x5c5, 0x9, 0x1]}}, @generic={0x48, 0x93, "3c44d876f0669c9e61435663a25faf34f6f135564d7b6d66b1eb1653caefea615a13e9b3cff224b97b4121cdb80a02e20e430348edcd6bb4257bcb5447d2d5944903cc369d918907a9f2357fdd0307b9e028fca834ca6e85f1d8a1a46b9e044b226243aa0961b2bcb0e86eefa1c0379432657ad4eaccc1a6a9a7cadb01db65d0c4c709c05c69aeb75f23da8d11ad41c02ae170"}]}}}, @rthdrdstopts={{0xf0, 0x29, 0x37, {0x2f, 0x1a, '\x00', [@ra={0x5, 0x2, 0x2}, @generic={0x3f, 0xce, "ec0646d346d96f992f0e928401208ca011bdc68d2b48a58139faaee079d16b9147562f9c215ab7355b70e5fea91ed6de422ed0c4cdeb57ef78c7bbc62b74940694d67025322172f901748bb852ef4ad4fceb9abac6454be158d8c06a57c90119f157acc163b19f3d5375543dbd1340d221738da6e0fe02e2e77cb4ea56dc118d8e282945984f157786069bce24979a7ed800aac9a915b9f6d2a8896931b62789315ef26d54f2eaa6bf396ed66397e106d9333d841854c0dbfd1d62cc7ab18f03d5f363a7ecb5b3414af18e4334dd"}]}}}, @hopopts={{0x78, 0x29, 0x36, {0x2b, 0xb, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0xd9, 0x562a, [0x5, 0x3, 0xfffffffffffffffb, 0xfffffffffffffff7, 0x5000000000000000, 0x6b4]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x8, {0x1, 0x0, 0xd9, 0x4}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x6c, 0x4, '\x00', [@enc_lim, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x101}, @enc_lim={0x4, 0x1, 0x80}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x1e0, 0x29, 0x37, {0x33, 0x38, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x5, 0xcd, "0eed53e769b5a6648b09da5ec2f1045832ae16c1bd034808f4705363e21cb367972206cad5c7aab712236d49bc7ed756c55cdadd76398ec510ca6eafe58ccc0fcdc9ed22aedf9e8873beee86aa98cb619726d50c37a6ed45a839e3727a098a1728798bc87e66c7e2cec4ddc502009e66103d1648bf75fea2c636e69fefcc9852b07ff43670ea49919897feb092e44451635b7644bd58e69fd7aa26c9f2e363056225f4eae7fc1266ef103188cc2a76a2c7376b7fbba637383ced05806966db2aa3e71277a77dc2f52315545238"}, @hao={0xc9, 0x10, @private2}, @generic={0x3, 0xc3, "103039e84ca333df2f2f1c1054c84f8e163fa2b4c91a99f58ddb030c85c3191e6cc65d7e943f2dbdab98b9e0015df34b817235c8bdceccb9d447eebbbba5fbb87a2660c918adc0e094e18b36c535204f390b2b2f52e9323f6ace3e8d8248a06a2e78d8cb50142dccc10d8ab1aa8435f4316d25e78e3445ebaff990e02080513849d51ed7eb64932077790eb835e0c4707cec7194dc64e2a58ff3550bf70a76141778256dac0b3ae059f3d7a370008fb5a9c26afb3ae926ed98747bef8b0552a37d8b04"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @ra={0x5, 0x2, 0x3c}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x100}}], 0x498}}, {{&(0x7f0000005b80)={0xa, 0x4e20, 0x7, @empty, 0x4}, 0x1c, &(0x7f0000007f00)=[{&(0x7f0000005bc0)="ce8f1573298db3253281f5e4ce871e3f5e35ca53cc4b5a73cb6cc9a33bb73180b2cd701f3f8bbf4d42c8a4a0b3a1494dfe908286d4155b76d4d8613e2908d2f8bbc57a7424e1ae4f921525d7cdd2a862759c6af95bc18c29e1ec033e333bbe0353d4bb5a233d31678f735b1a215248a9770ca7ca19f7ae68adad3f56710c2f60c744cc999d7a93f7ed332574e3485b78ae6026f0fe7c123b759dfa92148599bb7e42423da208cdedad2296697f6e7f0c99c2e023e483949ba739aa4f4706797841c6f4ec6e3d82478982736e1f04a2111fe51c82b89034e85c97068c21e83add11afea6ede222a60de6880c9e406f9b787a949a8cae7daad8d", 0xf9}, {&(0x7f0000005cc0)="59cfad3718ba1edce67cfea99e3a155b327a9a0199bd5caec6d90da85ca36b3f75661f1cf0f01a0ea42fa6d0b889c4b04213615849a5b0d324a1b0b3372ac4b706a3b27bd5cabbf8289c4cc7f58f7e997665f6d879242b559ec8c8c1c73a93e8ccf0", 0x62}, {&(0x7f0000005d40)="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", 0x1000}, {&(0x7f0000006d40)="a452a5f44fc25197a09341ecbb90c2e3240c74b4b97654020ee742369f96147ef45d24fedfdf553471156cd853a61faaaf2c4d13d63a1a8996d622eb1968a49c9fcbe9fb9b9630932fd40f", 0x4b}, {&(0x7f0000006dc0)="25ed6442520a96eb93b95df234", 0xd}, {&(0x7f0000006e00)="3081385656465cce31634215621eedff96f70e7ec0b9a3d5367389b00a912b7f115c2eb9edbcf5830d9deac17320731a9fc715a945094f2900d13ddfdf4bf0a4e2734e839c58808650db696cf0e372fdbb81ee0f7ba6c5ed9f438fc8e52db388c9dd52815df9c1ef0e40553a8096d3b0886deed8411e6521f60b256b7fe3da171d77e55c35ff84d0e63ca6f60e8e17cbe49115bfb3b26422de1fffc03a8d30ad76bd1cd13e32ec8af7fa4e09aa9fa370144b0c5780bb182128ce674cefd9ee48e6578594c9ed64608646b98c99f2404ce7aa0b2d811c8ab1", 0xd8}, {&(0x7f0000006f00)="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", 0x1000}], 0x7}}, {{&(0x7f0000007f80)={0xa, 0x1, 0x6, @remote, 0x7fff}, 0x1c, &(0x7f0000007fc0), 0x0, &(0x7f0000008000)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x87, 0x5, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x40, 0x53, [0x7, 0x0, 0x10000]}}, @jumbo={0xc2, 0x4, 0xdbc8}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0xc, 0x2, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x5, 0x5, [0xb0]}}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x3a, 0x12, 0x0, 0x6, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @local}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}], 0x160}}], 0x8, 0x1) syz_io_uring_setup(0x5f7b, &(0x7f0000001b00)={0x0, 0x4834, 0x4, 0x0, 0x93}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000001b80)) 13:06:11 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:06:11 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:06:11 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x40000000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:06:11 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 3117.402989] loop5: detected capacity change from 0 to 135266304 [ 3117.408657] 9pnet: Insufficient options for proto=fd 13:06:11 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3117.419172] FAULT_INJECTION: forcing a failure. [ 3117.419172] name failslab, interval 1, probability 0, space 0, times 0 [ 3117.421743] CPU: 0 PID: 20703 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3117.423335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3117.425223] Call Trace: [ 3117.425827] dump_stack+0x107/0x167 [ 3117.426667] should_fail.cold+0x5/0xa [ 3117.427550] should_failslab+0x5/0x20 [ 3117.428414] __kmalloc_track_caller+0x79/0x370 [ 3117.429455] ? match_number+0xaf/0x1d0 [ 3117.430346] kmemdup_nul+0x2d/0xa0 [ 3117.431161] match_number+0xaf/0x1d0 [ 3117.432014] ? match_u64+0x190/0x190 [ 3117.432857] ? __kmalloc_track_caller+0x2c6/0x370 [ 3117.433950] ? memcpy+0x39/0x60 [ 3117.434714] parse_opts.part.0+0x1f3/0x340 [ 3117.435691] ? p9_fd_show_options+0x1c0/0x1c0 [ 3117.436709] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3117.437895] ? trace_hardirqs_on+0x5b/0x180 [ 3117.438874] ? kfree+0xd7/0x340 [ 3117.439652] p9_fd_create+0x98/0x4a0 [ 3117.440493] ? p9_conn_create+0x510/0x510 [ 3117.441429] ? p9_client_create+0x798/0x1230 [ 3117.442424] ? kfree+0xd7/0x340 [ 3117.443170] ? do_raw_spin_unlock+0x4f/0x220 [ 3117.444164] p9_client_create+0x7ff/0x1230 [ 3117.445120] ? p9_client_flush+0x430/0x430 [ 3117.446072] ? trace_hardirqs_on+0x5b/0x180 [ 3117.447063] ? lockdep_init_map_type+0x2c7/0x780 [ 3117.448134] ? __raw_spin_lock_init+0x36/0x110 [ 3117.449161] v9fs_session_init+0x1dd/0x1680 [ 3117.450132] ? lock_release+0x680/0x680 [ 3117.451040] ? kmem_cache_alloc_trace+0x151/0x320 [ 3117.452126] ? v9fs_show_options+0x690/0x690 [ 3117.453123] ? trace_hardirqs_on+0x5b/0x180 [ 3117.454090] ? kasan_unpoison_shadow+0x33/0x50 [ 3117.455123] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3117.456275] v9fs_mount+0x79/0x8f0 [ 3117.457071] ? v9fs_write_inode+0x60/0x60 [ 3117.457999] legacy_get_tree+0x105/0x220 [ 3117.458919] vfs_get_tree+0x8e/0x300 [ 3117.459766] path_mount+0x1490/0x21e0 [ 3117.460627] ? strncpy_from_user+0x9e/0x470 [ 3117.461603] ? finish_automount+0xa90/0xa90 [ 3117.462569] ? getname_flags.part.0+0x1dd/0x4f0 [ 3117.463623] ? _copy_from_user+0xfb/0x1b0 [ 3117.464562] __x64_sys_mount+0x282/0x300 [ 3117.465471] ? copy_mnt_ns+0xa00/0xa00 [ 3117.466339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3117.467520] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3117.468667] do_syscall_64+0x33/0x40 [ 3117.469496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3117.470644] RIP: 0033:0x7f3826f8db19 [ 3117.471488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3117.475593] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3117.477292] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3117.478878] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3117.480471] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3117.482052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3117.483656] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:06:11 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:06:11 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa0000000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:06:11 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x1000000) 13:06:11 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 3117.551831] 9pnet: Insufficient options for proto=fd [ 3117.564332] 9pnet: Insufficient options for proto=fd 13:06:11 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:06:11 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xff0f0000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:06:11 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) 13:06:11 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x1000000) 13:06:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 29) 13:06:11 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3117.638987] loop5: detected capacity change from 0 to 135266304 [ 3117.682700] 9pnet: Insufficient options for proto=fd [ 3117.725854] FAULT_INJECTION: forcing a failure. [ 3117.725854] name failslab, interval 1, probability 0, space 0, times 0 [ 3117.727245] CPU: 1 PID: 21101 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3117.728035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3117.728989] Call Trace: [ 3117.729296] dump_stack+0x107/0x167 [ 3117.729710] should_fail.cold+0x5/0xa [ 3117.730146] ? create_object.isra.0+0x3a/0xa30 [ 3117.730666] should_failslab+0x5/0x20 [ 3117.731109] kmem_cache_alloc+0x5b/0x310 [ 3117.731574] create_object.isra.0+0x3a/0xa30 [ 3117.732079] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3117.732658] __kmalloc_track_caller+0x177/0x370 [ 3117.733194] ? match_number+0xaf/0x1d0 [ 3117.733633] kmemdup_nul+0x2d/0xa0 [ 3117.734038] match_number+0xaf/0x1d0 [ 3117.734460] ? match_u64+0x190/0x190 [ 3117.734881] ? __kmalloc_track_caller+0x2c6/0x370 [ 3117.735434] ? memcpy+0x39/0x60 [ 3117.735812] parse_opts.part.0+0x1f3/0x340 [ 3117.736290] ? p9_fd_show_options+0x1c0/0x1c0 [ 3117.736802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3117.737395] ? trace_hardirqs_on+0x5b/0x180 [ 3117.737883] ? kfree+0xd7/0x340 [ 3117.738261] p9_fd_create+0x98/0x4a0 [ 3117.738681] ? p9_conn_create+0x510/0x510 [ 3117.739155] ? p9_client_create+0x798/0x1230 [ 3117.739652] ? kfree+0xd7/0x340 [ 3117.740021] ? do_raw_spin_unlock+0x4f/0x220 [ 3117.740522] p9_client_create+0x7ff/0x1230 [ 3117.741000] ? p9_client_flush+0x430/0x430 [ 3117.741477] ? trace_hardirqs_on+0x5b/0x180 [ 3117.741965] ? lockdep_init_map_type+0x2c7/0x780 [ 3117.742503] ? __raw_spin_lock_init+0x36/0x110 [ 3117.743035] v9fs_session_init+0x1dd/0x1680 [ 3117.743523] ? lock_release+0x680/0x680 [ 3117.743977] ? kmem_cache_alloc_trace+0x151/0x320 [ 3117.744520] ? v9fs_show_options+0x690/0x690 [ 3117.745021] ? trace_hardirqs_on+0x5b/0x180 [ 3117.745514] ? kasan_unpoison_shadow+0x33/0x50 [ 3117.746030] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3117.746615] v9fs_mount+0x79/0x8f0 [ 3117.747025] ? v9fs_write_inode+0x60/0x60 [ 3117.747494] legacy_get_tree+0x105/0x220 [ 3117.747955] vfs_get_tree+0x8e/0x300 [ 3117.748376] path_mount+0x1490/0x21e0 [ 3117.748810] ? strncpy_from_user+0x9e/0x470 [ 3117.749298] ? finish_automount+0xa90/0xa90 [ 3117.749786] ? getname_flags.part.0+0x1dd/0x4f0 [ 3117.750316] ? _copy_from_user+0xfb/0x1b0 [ 3117.750788] __x64_sys_mount+0x282/0x300 [ 3117.751253] ? copy_mnt_ns+0xa00/0xa00 [ 3117.751696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3117.752290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3117.752872] do_syscall_64+0x33/0x40 [ 3117.753294] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3117.753873] RIP: 0033:0x7f3826f8db19 [ 3117.754297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3117.756393] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3117.757252] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3117.758057] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3117.758867] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3117.759681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3117.760489] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:06:25 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) 13:06:25 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:06:25 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:06:25 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1000000000000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:06:25 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x1000000) 13:06:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:06:25 executing program 3: getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)=""/3, &(0x7f0000000080)=0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000640), 0x6e, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/153, 0x99}, {0x0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/96, 0x60}, {&(0x7f0000001840)=""/39, 0x27}, {&(0x7f0000001880)=""/123, 0x7b}], 0x6, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x201) perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x7, 0x7, 0x48, 0x0, 0x1, 0x900a0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0xaba}, 0xc000, 0x4, 0x1, 0x6, 0x6, 0xfffffff7, 0x401, 0x0, 0x7, 0x0, 0x3}, r1, 0x10, r0, 0xb) write$tcp_congestion(r1, 0x0, 0x0) 13:06:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 30) [ 3131.597834] 9pnet: Insufficient options for proto=fd 13:06:25 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) [ 3131.625587] FAULT_INJECTION: forcing a failure. [ 3131.625587] name failslab, interval 1, probability 0, space 0, times 0 [ 3131.627356] CPU: 0 PID: 21146 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3131.628325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3131.629470] Call Trace: [ 3131.629848] dump_stack+0x107/0x167 [ 3131.630355] should_fail.cold+0x5/0xa [ 3131.630888] should_failslab+0x5/0x20 [ 3131.631428] __kmalloc_track_caller+0x79/0x370 [ 3131.632063] ? match_number+0xaf/0x1d0 [ 3131.632600] ? kfree+0xd7/0x340 [ 3131.633062] kmemdup_nul+0x2d/0xa0 [ 3131.633649] match_number+0xaf/0x1d0 [ 3131.634173] ? match_u64+0x190/0x190 [ 3131.634788] ? __kmalloc_track_caller+0x2c6/0x370 [ 3131.635481] ? memcpy+0x39/0x60 [ 3131.636037] parse_opts.part.0+0x1f3/0x340 [ 3131.636627] ? p9_fd_show_options+0x1c0/0x1c0 [ 3131.637367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3131.638149] ? trace_hardirqs_on+0x5b/0x180 [ 3131.638854] ? kfree+0xd7/0x340 [ 3131.639363] p9_fd_create+0x98/0x4a0 [ 3131.639957] ? p9_conn_create+0x510/0x510 [ 3131.640574] ? p9_client_create+0x798/0x1230 [ 3131.641280] ? kfree+0xd7/0x340 [ 3131.641776] ? do_raw_spin_unlock+0x4f/0x220 [ 3131.642500] p9_client_create+0x7ff/0x1230 [ 3131.643092] ? p9_client_flush+0x430/0x430 [ 3131.643787] ? trace_hardirqs_on+0x5b/0x180 [ 3131.644386] ? lockdep_init_map_type+0x2c7/0x780 [ 3131.645150] ? __raw_spin_lock_init+0x36/0x110 [ 3131.645839] v9fs_session_init+0x1dd/0x1680 [ 3131.646543] ? lock_release+0x680/0x680 [ 3131.647096] ? kmem_cache_alloc_trace+0x151/0x320 [ 3131.647767] ? v9fs_show_options+0x690/0x690 [ 3131.648381] ? trace_hardirqs_on+0x5b/0x180 [ 3131.648975] ? kasan_unpoison_shadow+0x33/0x50 [ 3131.649605] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3131.650304] v9fs_mount+0x79/0x8f0 [ 3131.650794] ? v9fs_write_inode+0x60/0x60 [ 3131.651412] legacy_get_tree+0x105/0x220 [ 3131.651973] vfs_get_tree+0x8e/0x300 [ 3131.652572] path_mount+0x1490/0x21e0 [ 3131.653109] ? strncpy_from_user+0x9e/0x470 [ 3131.653702] ? finish_automount+0xa90/0xa90 [ 3131.654297] ? getname_flags.part.0+0x1dd/0x4f0 [ 3131.654933] ? _copy_from_user+0xfb/0x1b0 [ 3131.655531] __x64_sys_mount+0x282/0x300 [ 3131.656106] ? copy_mnt_ns+0xa00/0xa00 [ 3131.656656] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3131.657395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3131.658126] do_syscall_64+0x33/0x40 [ 3131.658653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3131.659389] RIP: 0033:0x7f3826f8db19 [ 3131.659914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3131.662501] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3131.663570] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3131.664561] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3131.665562] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3131.666571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3131.667581] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3131.668986] 9pnet: Insufficient options for proto=fd 13:06:25 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x20000000000000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:06:25 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:06:25 executing program 7: write$tcp_congestion(0xffffffffffffffff, 0x0, 0x1000000) 13:06:25 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3131.740105] 9pnet: Insufficient options for proto=fd 13:06:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:06:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 31) 13:06:26 executing program 7: write$tcp_congestion(0xffffffffffffffff, 0x0, 0x1000000) 13:06:26 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) 13:06:26 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:06:26 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x100000000000000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) [ 3131.790147] 9pnet: Could not find request transport: fd0x0000000000000004 13:06:26 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x4, 0x4000) write$tcp_congestion(r1, &(0x7f00000000c0)='lp\x00', 0x3) r2 = perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000640), 0x6e, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/153, 0x99}, {0x0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/96, 0x60}, {&(0x7f0000001840)=""/39, 0x27}, {&(0x7f0000001880)=""/123, 0x7b}], 0x6, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x201) perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x7, 0x7, 0x48, 0x0, 0x1, 0x900a0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0xaba}, 0xc000, 0x4, 0x1, 0x6, 0x6, 0xfffffff7, 0x401, 0x0, 0x7, 0x0, 0x3}, r3, 0x10, r2, 0xb) write$tcp_congestion(r3, &(0x7f0000000000)='yeah\x00', 0x5) write$tcp_congestion(r0, 0x0, 0x0) [ 3131.831073] FAULT_INJECTION: forcing a failure. [ 3131.831073] name failslab, interval 1, probability 0, space 0, times 0 [ 3131.833591] CPU: 1 PID: 21355 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3131.835079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3131.836872] Call Trace: [ 3131.837444] dump_stack+0x107/0x167 [ 3131.838228] should_fail.cold+0x5/0xa [ 3131.839049] ? create_object.isra.0+0x3a/0xa30 [ 3131.840038] should_failslab+0x5/0x20 [ 3131.840856] kmem_cache_alloc+0x5b/0x310 [ 3131.841732] create_object.isra.0+0x3a/0xa30 [ 3131.842675] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3131.843778] __kmalloc_track_caller+0x177/0x370 [ 3131.844776] ? match_number+0xaf/0x1d0 [ 3131.845615] kmemdup_nul+0x2d/0xa0 [ 3131.846378] match_number+0xaf/0x1d0 [ 3131.847193] ? match_u64+0x190/0x190 [ 3131.847993] ? __kmalloc_track_caller+0x2c6/0x370 [ 3131.849023] ? memcpy+0x39/0x60 [ 3131.849735] parse_opts.part.0+0x1f3/0x340 [ 3131.850643] ? p9_fd_show_options+0x1c0/0x1c0 [ 3131.851623] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3131.852745] ? trace_hardirqs_on+0x5b/0x180 [ 3131.853675] ? kfree+0xd7/0x340 [ 3131.854394] p9_fd_create+0x98/0x4a0 [ 3131.855210] ? p9_conn_create+0x510/0x510 [ 3131.856092] ? p9_client_create+0x798/0x1230 [ 3131.857034] ? kfree+0xd7/0x340 [ 3131.857740] ? do_raw_spin_unlock+0x4f/0x220 [ 3131.858685] p9_client_create+0x7ff/0x1230 [ 3131.859607] ? p9_client_flush+0x430/0x430 [ 3131.860515] ? trace_hardirqs_on+0x5b/0x180 [ 3131.861440] ? lockdep_init_map_type+0x2c7/0x780 [ 3131.862472] ? __raw_spin_lock_init+0x36/0x110 [ 3131.862497] v9fs_session_init+0x1dd/0x1680 [ 3131.862517] ? lock_release+0x680/0x680 [ 3131.862543] ? kmem_cache_alloc_trace+0x151/0x320 [ 3131.862561] ? v9fs_show_options+0x690/0x690 [ 3131.862587] ? trace_hardirqs_on+0x5b/0x180 [ 3131.862606] ? kasan_unpoison_shadow+0x33/0x50 [ 3131.862622] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3131.862642] v9fs_mount+0x79/0x8f0 [ 3131.862661] ? v9fs_write_inode+0x60/0x60 [ 3131.862676] legacy_get_tree+0x105/0x220 [ 3131.862699] vfs_get_tree+0x8e/0x300 [ 3131.873338] path_mount+0x1490/0x21e0 [ 3131.873362] ? strncpy_from_user+0x9e/0x470 [ 3131.873380] ? finish_automount+0xa90/0xa90 [ 3131.873398] ? getname_flags.part.0+0x1dd/0x4f0 [ 3131.873416] ? _copy_from_user+0xfb/0x1b0 [ 3131.873441] __x64_sys_mount+0x282/0x300 [ 3131.873458] ? copy_mnt_ns+0xa00/0xa00 [ 3131.873484] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3131.873504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3131.873530] do_syscall_64+0x33/0x40 [ 3131.882403] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3131.883518] RIP: 0033:0x7f3826f8db19 [ 3131.884318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3131.888295] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3131.889958] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3131.891516] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3131.893065] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3131.894621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3131.896181] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:06:26 executing program 7: write$tcp_congestion(0xffffffffffffffff, 0x0, 0x1000000) 13:06:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xe00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:06:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 32) 13:06:40 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:06:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:06:40 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x1000000) 13:06:40 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x200000000000000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:06:40 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) 13:06:40 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:06:40 executing program 3: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x130, 0x17, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xcc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x4004850) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4a) write$tcp_congestion(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) [ 3146.060785] 9pnet: Could not find request transport: fd0x0000000000000004 [ 3146.061848] 9pnet: Insufficient options for proto=fd [ 3146.080281] FAULT_INJECTION: forcing a failure. [ 3146.080281] name failslab, interval 1, probability 0, space 0, times 0 [ 3146.082678] CPU: 0 PID: 21771 Comm: syz-executor.4 Not tainted 5.10.247 #1 13:06:40 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3146.084158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3146.086076] Call Trace: [ 3146.086673] dump_stack+0x107/0x167 [ 3146.087555] should_fail.cold+0x5/0xa [ 3146.088411] ? p9_fd_create+0x161/0x4a0 [ 3146.089322] should_failslab+0x5/0x20 [ 3146.090165] kmem_cache_alloc_trace+0x55/0x320 [ 3146.091107] 9pnet: Could not find request transport: fd0x0000000000000004 [ 3146.091198] p9_fd_create+0x161/0x4a0 [ 3146.092862] ? p9_conn_create+0x510/0x510 [ 3146.093779] ? p9_client_create+0x798/0x1230 [ 3146.094793] ? kfree+0xd7/0x340 [ 3146.095536] ? do_raw_spin_unlock+0x4f/0x220 [ 3146.096544] p9_client_create+0x7ff/0x1230 [ 3146.097519] ? p9_client_flush+0x430/0x430 [ 3146.098468] ? trace_hardirqs_on+0x5b/0x180 [ 3146.099451] ? lockdep_init_map_type+0x2c7/0x780 [ 3146.100527] ? __raw_spin_lock_init+0x36/0x110 13:06:40 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3146.101557] v9fs_session_init+0x1dd/0x1680 [ 3146.102588] ? lock_release+0x680/0x680 [ 3146.103525] ? kmem_cache_alloc_trace+0x151/0x320 [ 3146.104610] ? v9fs_show_options+0x690/0x690 [ 3146.105602] ? trace_hardirqs_on+0x5b/0x180 [ 3146.106577] ? kasan_unpoison_shadow+0x33/0x50 [ 3146.107586] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3146.108708] v9fs_mount+0x79/0x8f0 [ 3146.109508] ? v9fs_write_inode+0x60/0x60 [ 3146.110440] legacy_get_tree+0x105/0x220 [ 3146.111372] vfs_get_tree+0x8e/0x300 [ 3146.112216] path_mount+0x1490/0x21e0 [ 3146.112443] 9pnet: Insufficient options for proto=fd [ 3146.113077] ? strncpy_from_user+0x9e/0x470 [ 3146.113097] ? finish_automount+0xa90/0xa90 [ 3146.115628] ? getname_flags.part.0+0x1dd/0x4f0 [ 3146.116678] ? _copy_from_user+0xfb/0x1b0 [ 3146.117634] __x64_sys_mount+0x282/0x300 [ 3146.118554] ? copy_mnt_ns+0xa00/0xa00 [ 3146.119448] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3146.120641] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3146.121821] do_syscall_64+0x33/0x40 [ 3146.122664] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3146.123833] RIP: 0033:0x7f3826f8db19 [ 3146.124679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3146.128817] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3146.130522] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3146.132140] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3146.133738] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3146.135362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3146.136974] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:06:40 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x900000000000000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:06:40 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3146.142333] loop5: detected capacity change from 0 to 135266304 [ 3146.179125] 9pnet: Insufficient options for proto=fd 13:06:40 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x1000000) 13:06:56 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4000000000000000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:06:56 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:06:56 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = dup(r1) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000080)={0xea, "12855ba5c142ae9a24fb4ad22b667a9a7aad8111afd9b744b00c3528079d0d5f6ba81f5a039bc978d3c4894eb9c85537e1b61a5412f47de8f2937bae36f241f4483f769878d06191765cc60a3bca215da728c1c36b08ebbfa502e28233bf9b5d8e4ebdf291d33306c52e09e51f1f2425ca15e1e0ff67826623c2c848424e01743df00fe8cdf62b94522bd605d0b1ba44bc203b4bd0c49f07c4a41d070eaa659b4b2f1724c514193660cfdb3f10feb2ba9a7d883ba58051c5158ed464bcd2491adcf5a76a597a65ab405a1b7c45e2c663fd822fdc97091aea87ebf7b2b24f42791dc37ac68e6235596747"}) 13:06:56 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) 13:06:56 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:06:56 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x1000000) 13:06:56 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 33) 13:06:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 3162.205080] 9pnet: Insufficient options for proto=fd [ 3162.205759] loop5: detected capacity change from 0 to 135266304 [ 3162.207713] FAULT_INJECTION: forcing a failure. [ 3162.207713] name failslab, interval 1, probability 0, space 0, times 0 [ 3162.210766] CPU: 0 PID: 22116 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3162.212569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3162.214709] Call Trace: [ 3162.215411] dump_stack+0x107/0x167 [ 3162.216374] should_fail.cold+0x5/0xa [ 3162.217374] ? create_object.isra.0+0x3a/0xa30 [ 3162.218577] should_failslab+0x5/0x20 [ 3162.219578] kmem_cache_alloc+0x5b/0x310 [ 3162.220636] ? p9_fd_show_options+0x1c0/0x1c0 [ 3162.221819] create_object.isra.0+0x3a/0xa30 [ 3162.222959] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3162.224303] kmem_cache_alloc_trace+0x151/0x320 [ 3162.225524] p9_fd_create+0x161/0x4a0 [ 3162.226520] ? p9_conn_create+0x510/0x510 [ 3162.227620] ? p9_client_create+0x798/0x1230 [ 3162.228765] ? kfree+0xd7/0x340 [ 3162.229618] ? do_raw_spin_unlock+0x4f/0x220 [ 3162.230769] p9_client_create+0x7ff/0x1230 [ 3162.231883] ? p9_client_flush+0x430/0x430 [ 3162.232987] ? trace_hardirqs_on+0x5b/0x180 [ 3162.234120] ? lockdep_init_map_type+0x2c7/0x780 [ 3162.235354] ? __raw_spin_lock_init+0x36/0x110 [ 3162.236564] v9fs_session_init+0x1dd/0x1680 [ 3162.237692] ? lock_release+0x680/0x680 [ 3162.238742] ? kmem_cache_alloc_trace+0x151/0x320 [ 3162.239972] ? v9fs_show_options+0x690/0x690 [ 3162.240988] ? trace_hardirqs_on+0x5b/0x180 [ 3162.241974] ? kasan_unpoison_shadow+0x33/0x50 [ 3162.243020] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3162.244201] v9fs_mount+0x79/0x8f0 [ 3162.245027] ? v9fs_write_inode+0x60/0x60 [ 3162.245979] legacy_get_tree+0x105/0x220 [ 3162.246915] vfs_get_tree+0x8e/0x300 [ 3162.247781] path_mount+0x1490/0x21e0 [ 3162.248669] ? strncpy_from_user+0x9e/0x470 [ 3162.249652] ? finish_automount+0xa90/0xa90 [ 3162.250647] ? getname_flags.part.0+0x1dd/0x4f0 [ 3162.251728] ? _copy_from_user+0xfb/0x1b0 [ 3162.252688] __x64_sys_mount+0x282/0x300 [ 3162.253614] ? copy_mnt_ns+0xa00/0xa00 [ 3162.254513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3162.255719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3162.256907] do_syscall_64+0x33/0x40 [ 3162.257761] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3162.258937] RIP: 0033:0x7f3826f8db19 [ 3162.259807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3162.263997] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3162.265731] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3162.267356] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3162.268985] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3162.270603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3162.272233] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:06:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:06:56 executing program 7: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x1000000) 13:06:56 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa000000000000000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:06:56 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) 13:06:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000001724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f0000000a00)="4d3985ac525dc4cd5706be85bc294798fb37682f20ad79bd10a813733c5e9978feff3c0367f49679880647edb94ebe78831b7b9d2443c235a5611b1815dbec153b417d0095c1b096ad8a512667941721dac7eeee4044fa1320e55367156c68293e138a5a82ae57cd0a58654c164918adb2f17e1941cc2f90fec289ce1152e378455d1c8d7d65ed29e1ddbf9bc0fd71e97f40874b54d13c424d36f731c1d19bdd08c3abf71d84833204b799b2eacebf7cc2be4f19830fad") sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="41df06e804cf2f5166c79ffe005019", 0xf}, {&(0x7f0000000180)="a5", 0x1}, {&(0x7f00000001c0)="bc732da6ebc9992da3e0cde298956457d3396f244d13f299bdee446766c8b5a69dac02314c80d20decf9836dd03afb433584a284c63adb2b90b8f019e872c62752691821a5e55292fd7db91747e72270bedd58e16bb9ba5d00455ef501ce57a6b318e968adab1884df55d0ceb7ce2b63cfbc78029d4b8e3f76da27f27a00bf3febbeeb0385652f09b8a9c35fa563f8f4468a821479d2e304e621fb8117f7e121673365e4273803205bd6019530048c2e7c2046cabd52", 0xb6}, {&(0x7f0000000280)="bcbe4127", 0x4}], 0x4, &(0x7f0000000300)=[@rthdr={{0x58, 0x29, 0x39, {0x5c, 0x8, 0x0, 0x6, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @mcast1, @mcast1]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x62, 0x0, '\x00', [@pad1]}}}, @dstopts={{0x100, 0x29, 0x37, {0x5c, 0x1c, '\x00', [@generic={0x20, 0xcf, "56133ebb884b824cf8d679b1c38aa4458dd43c3d897657b71281cda5866d23c1fe4fa1567f271f003b1ff4f63e7c785c878fcbd47b9f24c818766bb1a4dc9f41ffff8e5650acd8220489eca4c5892933c5502e7f2ff5bdb1216d455543fdc48427847804051c2a0cd1d1daa6668677178a4358abc4fc3d07a6db93f4b56a2d28dd7d3c01608ae7771d3b2206a1d8417e6208c79ebfb16041fca0bf0986506f4857388f4082eb6bc0b221f0ea81bb8f846ddc563ba50667dd1b79c2dd2f826a0a5ffa69b83ba0f061a7e34c383dbcb9"}, @ra={0x5, 0x2, 0x401}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x8}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8001}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x84, 0x8, 0x1, 0x40, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5dc6d774}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fff}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3c, 0x6, 0x2, 0x80, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x36}, @remote]}}}], 0x278}}, {{&(0x7f0000000580)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000005c0)="b4799011b71de573bc6c6be4dfb36e7eddd8b3064a25773ddc199437394adc5f35787ba508536d362c1a48fdae9f70a53b2846bd94105f8681b6069982b2bb7d17ebf20a29a5577ded3683bac2676539d9522f67a8094d31260a5cd59341eb353be0cdcdf949d5d591abb5a0afa093a1383bc321e9fc0756429a71360b0ae846402810c33302c981a526a924e782f9470e8a43dfcf8c7da91b22657b8405f99b61857a8babc6", 0xa6}, {&(0x7f0000000680)="e30d721a96a9de761a684ff2467a9cb733f5436de76aaf15ab23b5ceced91264f0de877c8a88c04606a7e6a80266da6cf618ea174a1d903735d00965ce9a86239c079be54bf9dcfc8c951232b4cfd4f9ecda42bc075272c0a4f0f5e0979da7ba71ba7f9da3d69a2c229c520f07bf3bf2e48b6c20ffa864bc5a510f8ed9f04bb97b3e5d4fb0b68d031218bca507e2c386d9f36a01388b156ac5527a83e43fdfb57674b8bbf0f810c015b07632ae1d5b830a60908b94420ca060ca47f1ec62f9f62348647b6ed4dfeaa60df5aa7785d6351c922dbeebc39a42", 0xd8}], 0x2, &(0x7f00000007c0)=[@tclass={{0x14, 0x29, 0x43, 0x7c82ad36}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@pad1, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x68}}, {{&(0x7f0000000840)={0xa, 0x4e21, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000880)="9a78d36f1afde3e11b32d35c9e9fc5b5678947", 0x13}, {&(0x7f00000008c0)="a57d4605fb21992e787ea390f63f188f332edbeed113087c1cf30fe4eeef679266d94d7115ce5f07e7", 0x29}], 0x2}}], 0x3, 0x84) pwrite64(r0, &(0x7f0000000080)="8a5a60efeaa9ba40ce824d55ab5d35d835dfce05d2ad17ed94610f3ba04c0c2ea1b47ee1af3a5828cabc07e9dd96f732c1a5a0fefd62afdaa516bb72d02c7d5c1cb01ee7c614d3d0b6fb828b472fcd8e37fe929c", 0x54, 0x8) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r1, 0x0, 0x0) [ 3162.344382] loop5: detected capacity change from 0 to 135266304 13:06:56 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) 13:06:56 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:06:56 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3162.442784] 9pnet: Insufficient options for proto=fd [ 3162.506324] 9pnet: Insufficient options for proto=fd 13:07:10 executing program 7: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x1000000) 13:07:10 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) 13:07:10 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x5, r0, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:07:10 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xff0f000000000000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:07:10 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:07:10 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:07:10 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 34) [ 3176.206785] 9pnet: Insufficient options for proto=fd 13:07:10 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3176.245136] FAULT_INJECTION: forcing a failure. [ 3176.245136] name failslab, interval 1, probability 0, space 0, times 0 [ 3176.247562] CPU: 0 PID: 22666 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3176.249049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3176.250797] Call Trace: [ 3176.251361] dump_stack+0x107/0x167 [ 3176.252150] should_fail.cold+0x5/0xa [ 3176.252157] 9pnet: Insufficient options for proto=fd [ 3176.254010] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 3176.255123] should_failslab+0x5/0x20 [ 3176.255934] kmem_cache_alloc+0x5b/0x310 [ 3176.256797] p9_client_prepare_req.part.0+0x3a/0xac0 [ 3176.257874] p9_client_rpc+0x220/0x1370 [ 3176.258713] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.259836] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 3176.260959] ? pipe_poll+0x21b/0x800 [ 3176.261740] ? p9_fd_close+0x4a0/0x4a0 [ 3176.262559] ? wait_for_partner+0x3c0/0x3c0 [ 3176.263469] ? p9_fd_poll+0x1e0/0x2c0 [ 3176.263493] loop5: detected capacity change from 0 to 135266304 [ 3176.264296] ? p9_fd_create+0x357/0x4a0 [ 3176.264312] ? p9_conn_create+0x510/0x510 [ 3176.264333] ? p9_client_create+0x798/0x1230 [ 3176.268199] ? kfree+0xd7/0x340 [ 3176.268892] ? do_raw_spin_unlock+0x4f/0x220 [ 3176.269821] p9_client_create+0xa76/0x1230 [ 3176.270721] ? p9_client_flush+0x430/0x430 [ 3176.271623] ? trace_hardirqs_on+0x5b/0x180 [ 3176.272542] ? lockdep_init_map_type+0x2c7/0x780 [ 3176.273546] ? __raw_spin_lock_init+0x36/0x110 [ 3176.274515] v9fs_session_init+0x1dd/0x1680 [ 3176.275426] ? lock_release+0x680/0x680 [ 3176.276285] ? kmem_cache_alloc_trace+0x151/0x320 [ 3176.277305] ? v9fs_show_options+0x690/0x690 [ 3176.278236] ? trace_hardirqs_on+0x5b/0x180 [ 3176.279152] ? kasan_unpoison_shadow+0x33/0x50 [ 3176.280134] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3176.281207] v9fs_mount+0x79/0x8f0 [ 3176.281959] ? v9fs_write_inode+0x60/0x60 [ 3176.282835] legacy_get_tree+0x105/0x220 [ 3176.283695] vfs_get_tree+0x8e/0x300 [ 3176.284480] path_mount+0x1490/0x21e0 [ 3176.285287] ? strncpy_from_user+0x9e/0x470 [ 3176.286196] ? finish_automount+0xa90/0xa90 [ 3176.287106] ? getname_flags.part.0+0x1dd/0x4f0 [ 3176.288096] ? _copy_from_user+0xfb/0x1b0 [ 3176.288991] __x64_sys_mount+0x282/0x300 [ 3176.289845] ? copy_mnt_ns+0xa00/0xa00 [ 3176.290668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.291790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3176.292886] do_syscall_64+0x33/0x40 [ 3176.293671] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3176.294755] RIP: 0033:0x7f3826f8db19 [ 3176.295538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3176.299443] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3176.301061] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3176.302567] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3176.304097] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3176.305611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3176.307124] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:07:10 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:07:10 executing program 7: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x1000000) 13:07:10 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xffffffff00000000, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:07:10 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3176.384726] 9pnet: Insufficient options for proto=fd 13:07:10 executing program 5: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 3176.391675] 9pnet: Insufficient options for proto=fd 13:07:10 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x34}]}) [ 3176.484585] loop5: detected capacity change from 0 to 135266304 13:07:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:07:23 executing program 5: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:07:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 35) 13:07:23 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:07:23 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x34}]}) 13:07:23 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:07:23 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x5, r0, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:07:23 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3189.159728] 9pnet: Could not find request transport: fd0x0000000000000004 [ 3189.162097] FAULT_INJECTION: forcing a failure. [ 3189.162097] name failslab, interval 1, probability 0, space 0, times 0 [ 3189.164636] CPU: 0 PID: 22908 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3189.166143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3189.167993] Call Trace: [ 3189.168592] dump_stack+0x107/0x167 [ 3189.169442] should_fail.cold+0x5/0xa [ 3189.170295] ? create_object.isra.0+0x3a/0xa30 [ 3189.171319] should_failslab+0x5/0x20 [ 3189.172191] kmem_cache_alloc+0x5b/0x310 [ 3189.173137] create_object.isra.0+0x3a/0xa30 [ 3189.174163] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3189.175312] kmem_cache_alloc+0x159/0x310 [ 3189.176231] p9_client_prepare_req.part.0+0x3a/0xac0 [ 3189.177353] p9_client_rpc+0x220/0x1370 [ 3189.178266] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3189.179423] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 3189.180652] ? pipe_poll+0x21b/0x800 [ 3189.180854] 9pnet: Insufficient options for proto=fd [ 3189.181492] ? p9_fd_close+0x4a0/0x4a0 13:07:23 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) futex(&(0x7f0000000000), 0x87, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000008c0)) clock_gettime(0x6, &(0x7f0000000100)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) [ 3189.181511] ? wait_for_partner+0x3c0/0x3c0 [ 3189.181529] ? p9_fd_poll+0x1e0/0x2c0 [ 3189.184996] ? p9_fd_create+0x357/0x4a0 [ 3189.185899] ? p9_conn_create+0x510/0x510 [ 3189.186858] ? p9_client_create+0x798/0x1230 [ 3189.187887] ? kfree+0xd7/0x340 [ 3189.188650] ? do_raw_spin_unlock+0x4f/0x220 [ 3189.189679] p9_client_create+0xa76/0x1230 [ 3189.190694] ? p9_client_flush+0x430/0x430 [ 3189.191704] ? trace_hardirqs_on+0x5b/0x180 [ 3189.192725] ? lockdep_init_map_type+0x2c7/0x780 [ 3189.193835] ? __raw_spin_lock_init+0x36/0x110 [ 3189.194897] v9fs_session_init+0x1dd/0x1680 [ 3189.195890] ? lock_release+0x680/0x680 [ 3189.196753] ? kmem_cache_alloc_trace+0x151/0x320 [ 3189.197802] ? v9fs_show_options+0x690/0x690 [ 3189.198758] ? trace_hardirqs_on+0x5b/0x180 [ 3189.199693] ? kasan_unpoison_shadow+0x33/0x50 [ 3189.200681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3189.201774] v9fs_mount+0x79/0x8f0 [ 3189.202541] ? v9fs_write_inode+0x60/0x60 [ 3189.203434] legacy_get_tree+0x105/0x220 [ 3189.204313] vfs_get_tree+0x8e/0x300 [ 3189.205118] path_mount+0x1490/0x21e0 [ 3189.205956] ? strncpy_from_user+0x9e/0x470 [ 3189.206896] ? finish_automount+0xa90/0xa90 [ 3189.207836] ? getname_flags.part.0+0x1dd/0x4f0 [ 3189.208854] ? _copy_from_user+0xfb/0x1b0 [ 3189.209759] __x64_sys_mount+0x282/0x300 [ 3189.210634] ? copy_mnt_ns+0xa00/0xa00 [ 3189.211470] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3189.212626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3189.213740] do_syscall_64+0x33/0x40 [ 3189.214548] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3189.215657] RIP: 0033:0x7f3826f8db19 13:07:23 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3189.216473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3189.220514] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3189.222146] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3189.223669] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3189.225215] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3189.226745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3189.228281] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3189.234545] loop5: detected capacity change from 0 to 135266304 13:07:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4000, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 3189.292560] 9pnet: Insufficient options for proto=fd 13:07:23 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x5, r0, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:07:23 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:07:23 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x2}]}) 13:07:23 executing program 7: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:07:23 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:07:23 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) [ 3189.444624] 9pnet: Insufficient options for proto=fd [ 3202.123292] 9pnet: Insufficient options for proto=fd 13:07:36 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x5, r0, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:07:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4084, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:07:36 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) 13:07:36 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x3}]}) 13:07:36 executing program 3: ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x2, 0x2, 0x1, 0x7, 0x8, 0x200000}) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000080)='highspeed\x00', 0xa) write$tcp_congestion(r0, 0x0, 0x0) fdatasync(r0) 13:07:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 36) 13:07:36 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:07:36 executing program 5: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 3202.134648] FAULT_INJECTION: forcing a failure. [ 3202.134648] name failslab, interval 1, probability 0, space 0, times 0 [ 3202.136218] CPU: 1 PID: 23358 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3202.137186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3202.138339] Call Trace: [ 3202.138712] dump_stack+0x107/0x167 [ 3202.139222] should_fail.cold+0x5/0xa [ 3202.139749] ? p9_fcall_init+0x97/0x290 [ 3202.140356] should_failslab+0x5/0x20 [ 3202.140881] __kmalloc+0x72/0x390 [ 3202.141413] p9_fcall_init+0x97/0x290 [ 3202.141946] p9_client_prepare_req.part.0+0x8c/0xac0 [ 3202.142649] p9_client_rpc+0x220/0x1370 [ 3202.143247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3202.143988] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 3202.144727] ? pipe_poll+0x21b/0x800 [ 3202.145242] ? p9_fd_close+0x4a0/0x4a0 [ 3202.145778] ? wait_for_partner+0x3c0/0x3c0 [ 3202.146372] ? p9_fd_poll+0x1e0/0x2c0 [ 3202.146898] ? p9_fd_create+0x357/0x4a0 [ 3202.147439] ? p9_conn_create+0x510/0x510 [ 3202.148011] ? p9_client_create+0x798/0x1230 [ 3202.148601] ? kfree+0xd7/0x340 [ 3202.149042] ? do_raw_spin_unlock+0x4f/0x220 [ 3202.149622] p9_client_create+0xa76/0x1230 [ 3202.150195] ? p9_client_flush+0x430/0x430 [ 3202.150760] ? trace_hardirqs_on+0x5b/0x180 [ 3202.151333] ? lockdep_init_map_type+0x2c7/0x780 [ 3202.151973] ? __raw_spin_lock_init+0x36/0x110 [ 3202.152605] v9fs_session_init+0x1dd/0x1680 [ 3202.153198] ? lock_release+0x680/0x680 [ 3202.153750] ? kmem_cache_alloc_trace+0x151/0x320 [ 3202.154410] ? v9fs_show_options+0x690/0x690 [ 3202.155020] ? trace_hardirqs_on+0x5b/0x180 [ 3202.155616] ? kasan_unpoison_shadow+0x33/0x50 [ 3202.156247] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3202.156949] v9fs_mount+0x79/0x8f0 [ 3202.157432] ? v9fs_write_inode+0x60/0x60 [ 3202.157996] legacy_get_tree+0x105/0x220 [ 3202.158548] vfs_get_tree+0x8e/0x300 [ 3202.159057] path_mount+0x1490/0x21e0 [ 3202.159583] ? strncpy_from_user+0x9e/0x470 [ 3202.160179] ? finish_automount+0xa90/0xa90 [ 3202.160765] ? getname_flags.part.0+0x1dd/0x4f0 [ 3202.161397] ? _copy_from_user+0xfb/0x1b0 [ 3202.161965] __x64_sys_mount+0x282/0x300 [ 3202.162517] ? copy_mnt_ns+0xa00/0xa00 [ 3202.163052] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3202.163766] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3202.164485] do_syscall_64+0x33/0x40 [ 3202.164995] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3202.165693] RIP: 0033:0x7f3826f8db19 [ 3202.166206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3202.168725] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3202.169759] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3202.170732] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3202.171708] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3202.172687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3202.173655] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3202.178135] loop5: detected capacity change from 0 to 135266304 13:07:36 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x5, r0, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) 13:07:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:07:36 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:07:36 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x5}]}) 13:07:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4800, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:07:36 executing program 2: copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x5, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) 13:07:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 37) [ 3202.283765] loop5: detected capacity change from 0 to 135266304 13:07:36 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) 13:07:36 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x15}]}) 13:07:36 executing program 2: copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x5, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) 13:07:36 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 3202.344723] 9pnet: Insufficient options for proto=fd [ 3202.360837] FAULT_INJECTION: forcing a failure. [ 3202.360837] name failslab, interval 1, probability 0, space 0, times 0 [ 3202.362213] CPU: 1 PID: 23603 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3202.363057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3202.364076] Call Trace: [ 3202.364416] dump_stack+0x107/0x167 [ 3202.364855] should_fail.cold+0x5/0xa [ 3202.365320] ? p9_fcall_init+0x97/0x290 [ 3202.365802] should_failslab+0x5/0x20 [ 3202.366261] __kmalloc+0x72/0x390 [ 3202.366724] p9_fcall_init+0x97/0x290 [ 3202.367188] p9_client_prepare_req.part.0+0x8c/0xac0 [ 3202.367815] p9_client_rpc+0x220/0x1370 [ 3202.368306] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3202.368938] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 3202.369581] ? pipe_poll+0x21b/0x800 [ 3202.370045] ? p9_fd_close+0x4a0/0x4a0 [ 3202.370514] ? wait_for_partner+0x3c0/0x3c0 [ 3202.371039] ? p9_fd_poll+0x1e0/0x2c0 [ 3202.371483] ? p9_fd_create+0x357/0x4a0 [ 3202.371970] ? p9_conn_create+0x510/0x510 [ 3202.372469] ? p9_client_create+0x798/0x1230 [ 3202.373000] ? kfree+0xd7/0x340 [ 3202.373397] ? do_raw_spin_unlock+0x4f/0x220 [ 3202.373931] p9_client_create+0xa76/0x1230 [ 3202.374446] ? p9_client_flush+0x430/0x430 [ 3202.374958] ? trace_hardirqs_on+0x5b/0x180 [ 3202.375484] ? lockdep_init_map_type+0x2c7/0x780 [ 3202.376059] ? __raw_spin_lock_init+0x36/0x110 [ 3202.376610] v9fs_session_init+0x1dd/0x1680 [ 3202.377133] ? lock_release+0x680/0x680 [ 3202.377612] ? kmem_cache_alloc_trace+0x151/0x320 [ 3202.378190] ? v9fs_show_options+0x690/0x690 [ 3202.378726] ? trace_hardirqs_on+0x5b/0x180 [ 3202.379252] ? kasan_unpoison_shadow+0x33/0x50 [ 3202.379800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3202.380431] v9fs_mount+0x79/0x8f0 [ 3202.380861] ? v9fs_write_inode+0x60/0x60 [ 3202.381359] legacy_get_tree+0x105/0x220 [ 3202.381852] vfs_get_tree+0x8e/0x300 [ 3202.382305] path_mount+0x1490/0x21e0 [ 3202.382763] ? strncpy_from_user+0x9e/0x470 [ 3202.383280] ? finish_automount+0xa90/0xa90 [ 3202.383799] ? getname_flags.part.0+0x1dd/0x4f0 [ 3202.384362] ? _copy_from_user+0xfb/0x1b0 [ 3202.384865] __x64_sys_mount+0x282/0x300 [ 3202.385351] ? copy_mnt_ns+0xa00/0xa00 [ 3202.385820] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3202.386461] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3202.387089] do_syscall_64+0x33/0x40 13:07:36 executing program 7: write$tcp_congestion(0xffffffffffffffff, 0x0, 0xeffd) [ 3202.387537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3202.388350] RIP: 0033:0x7f3826f8db19 [ 3202.388818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3202.390906] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3202.391773] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3202.392590] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3202.393396] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3202.394205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3202.395009] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:07:36 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) [ 3202.420774] loop5: detected capacity change from 0 to 135266304 13:07:36 executing program 2: copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x5, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) 13:07:50 executing program 3: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x60000000, 0x0, &(0x7f00000000c0), 0x2000000, &(0x7f0000000100)={[{@overriderock}, {@map_normal}, {@unhide}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x7fff}}]}) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x100010, &(0x7f0000000200)={[{@cpuset_v2_mode}], [{@smackfsroot={'smackfsroot', 0x3d, '-'}}]}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000180)={0x1, 0x3}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) statx(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100, &(0x7f0000000300)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) copy_file_range(r1, &(0x7f0000000240)=0x101, 0xffffffffffffffff, &(0x7f0000000280)=0x101, 0x3, 0x0) write$tcp_congestion(r1, 0x0, 0x0) 13:07:50 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:07:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4c00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:07:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 38) 13:07:50 executing program 7: write$tcp_congestion(0xffffffffffffffff, 0x0, 0xeffd) 13:07:50 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x1d}]}) 13:07:50 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x5, r0, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) 13:07:50 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x14d1, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 3216.487541] 9pnet: Insufficient options for proto=fd [ 3216.494012] loop5: detected capacity change from 0 to 135266304 [ 3216.500399] FAULT_INJECTION: forcing a failure. [ 3216.500399] name failslab, interval 1, probability 0, space 0, times 0 [ 3216.502702] CPU: 0 PID: 23725 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3216.504080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3216.505732] Call Trace: [ 3216.506262] dump_stack+0x107/0x167 [ 3216.506985] should_fail.cold+0x5/0xa [ 3216.507734] ? p9_fcall_init+0x97/0x290 [ 3216.508543] should_failslab+0x5/0x20 [ 3216.509292] __kmalloc+0x72/0x390 [ 3216.509970] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3216.510970] p9_fcall_init+0x97/0x290 [ 3216.511718] p9_client_prepare_req.part.0+0xf4/0xac0 [ 3216.512740] p9_client_rpc+0x220/0x1370 [ 3216.513519] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3216.514560] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 3216.515616] ? pipe_poll+0x21b/0x800 [ 3216.516365] ? p9_fd_close+0x4a0/0x4a0 [ 3216.517131] ? wait_for_partner+0x3c0/0x3c0 [ 3216.517979] ? p9_fd_poll+0x1e0/0x2c0 [ 3216.518728] ? p9_fd_create+0x357/0x4a0 [ 3216.519509] ? p9_conn_create+0x510/0x510 [ 3216.520354] ? p9_client_create+0x798/0x1230 [ 3216.521203] ? kfree+0xd7/0x340 [ 3216.521840] ? do_raw_spin_unlock+0x4f/0x220 [ 3216.522697] p9_client_create+0xa76/0x1230 [ 3216.523523] ? p9_client_flush+0x430/0x430 [ 3216.524372] ? trace_hardirqs_on+0x5b/0x180 [ 3216.525209] ? lockdep_init_map_type+0x2c7/0x780 [ 3216.526127] ? __raw_spin_lock_init+0x36/0x110 [ 3216.527023] v9fs_session_init+0x1dd/0x1680 [ 3216.527867] ? lock_release+0x680/0x680 [ 3216.528669] ? kmem_cache_alloc_trace+0x151/0x320 [ 3216.529610] ? v9fs_show_options+0x690/0x690 [ 3216.530474] ? trace_hardirqs_on+0x5b/0x180 [ 3216.531313] ? kasan_unpoison_shadow+0x33/0x50 [ 3216.532223] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3216.533206] v9fs_mount+0x79/0x8f0 [ 3216.533898] ? v9fs_write_inode+0x60/0x60 [ 3216.534707] legacy_get_tree+0x105/0x220 [ 3216.535494] vfs_get_tree+0x8e/0x300 [ 3216.536240] path_mount+0x1490/0x21e0 [ 3216.536989] ? strncpy_from_user+0x9e/0x470 [ 3216.537822] ? finish_automount+0xa90/0xa90 [ 3216.538658] ? getname_flags.part.0+0x1dd/0x4f0 [ 3216.539565] ? _copy_from_user+0xfb/0x1b0 [ 3216.540404] __x64_sys_mount+0x282/0x300 [ 3216.541183] ? copy_mnt_ns+0xa00/0xa00 [ 3216.541930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3216.542946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3216.543938] do_syscall_64+0x33/0x40 [ 3216.544690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3216.545683] RIP: 0033:0x7f3826f8db19 [ 3216.546397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3216.549967] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3216.551437] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3216.552830] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3216.554203] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3216.555581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3216.556987] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:07:50 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x5, r0, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) 13:08:08 executing program 7: write$tcp_congestion(0xffffffffffffffff, 0x0, 0xeffd) 13:08:08 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6800, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:08:08 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 39) 13:08:08 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x5, r0, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) 13:08:08 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x7, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="92fb5dce86412de4b43b39a4bbbb624545b55dfac71eb18c3f049c7d73edac9fbbb097af48fa0b4d65476869bf33e3f94855c43f6d3b17f56409f6a2e03dd37de01408e4e3024f07a9370369ddd72a91335d508aafc8b52e84a25ac813a997104924d68ec00aed200f162daa79b4d00e04c000aa05685e453cb421cee039d9a3eb184a3b7d653b54be140a3b6cc91298e75e80d5ce6344627eee180ff4d39822895fa56622f573429b51cfba8ab813331a26d4555964275e3303bc2a55c1cd062aecd3419f0617c7070ba141016b991986be30f293298bddd5f470a8cbb2ec92e0eb647978ad62f8386bfe34460f13749e9ee331bb0b32a5c3c6677080c7", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}, {&(0x7f00000005c0)="41b4a88b9ebf035f118e59a328f9002e5fbed17498e4fcf137c5921166cabe2e6ba5530216a089a7685fe25806f2d99a39f6921725927447a54ac79b2b59a17a087fc9c8d3f5ddc8e22dc0421da14578aa78231f7c473d63f84125867d987b9cb113857abca1f3113eed73f57dddcc6bb74e9fc71ca9ebe270ccfbaa8d4d72f9f766b462de4d817af93975124d29de2ad3b1", 0x92, 0x5}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:08:08 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:08:08 executing program 3: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xfdef) preadv(r0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/204, 0xcc}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000200)=""/23, 0x17}], 0x4, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syncfs(r1) r2 = perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000640), 0x6e, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/153, 0x99}, {0x0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/96, 0x60}, {&(0x7f0000001840)=""/39, 0x27}, {&(0x7f0000001880)=""/123, 0x7b}], 0x6, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x201) perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x7, 0x7, 0x48, 0x0, 0x1, 0x900a0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0xaba}, 0xc000, 0x4, 0x1, 0x6, 0x6, 0xfffffff7, 0x401, 0x0, 0x7, 0x0, 0x3}, r3, 0x10, r2, 0xb) write$tcp_congestion(r1, 0x0, 0x3) 13:08:08 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x25}]}) 13:08:08 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x28}]}) [ 3234.025034] FAULT_INJECTION: forcing a failure. [ 3234.025034] name failslab, interval 1, probability 0, space 0, times 0 [ 3234.025773] loop5: detected capacity change from 0 to 135266304 [ 3234.027465] CPU: 0 PID: 23939 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3234.029740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3234.031532] Call Trace: [ 3234.032107] dump_stack+0x107/0x167 [ 3234.032908] should_fail.cold+0x5/0xa [ 3234.033732] ? create_object.isra.0+0x3a/0xa30 [ 3234.034714] should_failslab+0x5/0x20 [ 3234.035534] kmem_cache_alloc+0x5b/0x310 [ 3234.036431] create_object.isra.0+0x3a/0xa30 [ 3234.037376] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3234.038478] __kmalloc+0x16e/0x390 [ 3234.039251] p9_fcall_init+0x97/0x290 [ 3234.040072] p9_client_prepare_req.part.0+0xf4/0xac0 [ 3234.041180] p9_client_rpc+0x220/0x1370 [ 3234.042039] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3234.043169] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 3234.044330] ? pipe_poll+0x21b/0x800 [ 3234.045126] ? p9_fd_close+0x4a0/0x4a0 [ 3234.045963] ? wait_for_partner+0x3c0/0x3c0 [ 3234.046892] ? p9_fd_poll+0x1e0/0x2c0 [ 3234.047715] ? p9_fd_create+0x357/0x4a0 [ 3234.048579] ? p9_conn_create+0x510/0x510 [ 3234.049467] ? p9_client_create+0x798/0x1230 [ 3234.050413] ? kfree+0xd7/0x340 [ 3234.051121] ? do_raw_spin_unlock+0x4f/0x220 [ 3234.052072] p9_client_create+0xa76/0x1230 [ 3234.052998] ? p9_client_flush+0x430/0x430 [ 3234.053913] ? trace_hardirqs_on+0x5b/0x180 13:08:08 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) [ 3234.054844] ? lockdep_init_map_type+0x2c7/0x780 [ 3234.056015] ? __raw_spin_lock_init+0x36/0x110 [ 3234.057016] v9fs_session_init+0x1dd/0x1680 [ 3234.057948] ? lock_release+0x680/0x680 [ 3234.058812] ? kmem_cache_alloc_trace+0x151/0x320 [ 3234.059851] ? v9fs_show_options+0x690/0x690 [ 3234.060825] ? trace_hardirqs_on+0x5b/0x180 [ 3234.061754] ? kasan_unpoison_shadow+0x33/0x50 [ 3234.062736] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3234.063830] v9fs_mount+0x79/0x8f0 [ 3234.064605] ? v9fs_write_inode+0x60/0x60 [ 3234.065500] legacy_get_tree+0x105/0x220 [ 3234.066379] vfs_get_tree+0x8e/0x300 [ 3234.067180] path_mount+0x1490/0x21e0 [ 3234.068009] ? strncpy_from_user+0x9e/0x470 [ 3234.068949] ? finish_automount+0xa90/0xa90 [ 3234.069879] ? getname_flags.part.0+0x1dd/0x4f0 [ 3234.070881] ? _copy_from_user+0xfb/0x1b0 [ 3234.071782] __x64_sys_mount+0x282/0x300 [ 3234.072667] ? copy_mnt_ns+0xa00/0xa00 [ 3234.073516] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3234.074646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3234.075760] do_syscall_64+0x33/0x40 [ 3234.076579] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3234.077690] RIP: 0033:0x7f3826f8db19 13:08:08 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x5, r0, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) [ 3234.078498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3234.082566] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3234.084231] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3234.085804] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3234.087365] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3234.088922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3234.090457] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:08:08 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 3234.174775] 9pnet: Insufficient options for proto=fd 13:08:08 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6c00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:08:08 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x2d}]}) 13:08:08 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) 13:08:08 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3234.277811] 9pnet: Insufficient options for proto=fd 13:08:08 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000000)='highspeed\x00', 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) write$tcp_congestion(r0, 0x0, 0x0) 13:08:08 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x5, r0, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) 13:08:21 executing program 3: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000640), 0x6e, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/153, 0x99}, {0x0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/96, 0x60}, {&(0x7f0000001840)=""/39, 0x27}, {&(0x7f0000001880)=""/123, 0x7b}], 0x6, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x201) perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x7, 0x7, 0x48, 0x0, 0x1, 0x900a0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0xaba}, 0xc000, 0x4, 0x1, 0x6, 0x6, 0xfffffff7, 0x401, 0x0, 0x7, 0x0, 0x3}, r3, 0x10, r0, 0xb) r4 = dup3(r2, r1, 0x80000) write$tcp_congestion(r4, 0x0, 0x0) 13:08:21 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:08:21 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x5, r0, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) 13:08:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 40) 13:08:21 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) 13:08:21 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x30}]}) 13:08:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7400, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:08:21 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3246.825699] 9pnet: Insufficient options for proto=fd [ 3246.831256] FAULT_INJECTION: forcing a failure. [ 3246.831256] name failslab, interval 1, probability 0, space 0, times 0 [ 3246.834260] CPU: 1 PID: 24402 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3246.835710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3246.837459] Call Trace: [ 3246.838018] dump_stack+0x107/0x167 [ 3246.838785] should_fail.cold+0x5/0xa [ 3246.839595] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3246.840806] should_failslab+0x5/0x20 [ 3246.841605] kmem_cache_alloc+0x5b/0x310 [ 3246.842467] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3246.843641] idr_get_free+0x4b5/0x8f0 [ 3246.844461] idr_alloc_u32+0x170/0x2d0 [ 3246.845284] ? __fprop_inc_percpu_max+0x130/0x130 [ 3246.846289] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 3246.847410] ? lock_release+0x680/0x680 [ 3246.848245] idr_alloc+0xc2/0x130 [ 3246.848972] ? idr_alloc_u32+0x2d0/0x2d0 [ 3246.849820] ? rwlock_bug.part.0+0x90/0x90 [ 3246.850709] p9_client_prepare_req.part.0+0x612/0xac0 [ 3246.851797] p9_client_rpc+0x220/0x1370 [ 3246.852630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3246.853736] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 3246.854859] ? pipe_poll+0x21b/0x800 [ 3246.855641] ? p9_fd_close+0x4a0/0x4a0 [ 3246.856468] ? wait_for_partner+0x3c0/0x3c0 [ 3246.857374] ? p9_fd_poll+0x1e0/0x2c0 [ 3246.858181] ? p9_fd_create+0x357/0x4a0 [ 3246.859005] ? p9_conn_create+0x510/0x510 [ 3246.859877] ? p9_client_create+0x798/0x1230 [ 3246.860809] ? kfree+0xd7/0x340 [ 3246.861496] ? do_raw_spin_unlock+0x4f/0x220 [ 3246.862422] p9_client_create+0xa76/0x1230 [ 3246.863317] ? p9_client_flush+0x430/0x430 [ 3246.864203] ? trace_hardirqs_on+0x5b/0x180 [ 3246.865118] ? lockdep_init_map_type+0x2c7/0x780 [ 3246.866109] ? __raw_spin_lock_init+0x36/0x110 [ 3246.867078] v9fs_session_init+0x1dd/0x1680 [ 3246.867982] ? lock_release+0x680/0x680 [ 3246.868839] ? kmem_cache_alloc_trace+0x151/0x320 [ 3246.869848] ? v9fs_show_options+0x690/0x690 [ 3246.870781] ? trace_hardirqs_on+0x5b/0x180 [ 3246.871685] ? kasan_unpoison_shadow+0x33/0x50 [ 3246.872657] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3246.873727] v9fs_mount+0x79/0x8f0 [ 3246.874473] ? v9fs_write_inode+0x60/0x60 [ 3246.875345] legacy_get_tree+0x105/0x220 [ 3246.876196] vfs_get_tree+0x8e/0x300 [ 3246.876984] path_mount+0x1490/0x21e0 [ 3246.877791] ? strncpy_from_user+0x9e/0x470 [ 3246.878697] ? finish_automount+0xa90/0xa90 [ 3246.879603] ? getname_flags.part.0+0x1dd/0x4f0 [ 3246.880586] ? _copy_from_user+0xfb/0x1b0 [ 3246.881472] __x64_sys_mount+0x282/0x300 [ 3246.882322] ? copy_mnt_ns+0xa00/0xa00 [ 3246.883140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3246.884238] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3246.885334] do_syscall_64+0x33/0x40 [ 3246.886114] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3246.887179] RIP: 0033:0x7f3826f8db19 [ 3246.887958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3246.891789] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3246.893377] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3246.894867] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3246.896347] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3246.897837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3246.899328] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:08:21 executing program 7: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0xeffd) 13:08:21 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:08:21 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) 13:08:21 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x35}]}) 13:08:21 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/204, 0xcc}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000200)=""/23, 0x17}], 0x4, 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000000)='westwood\x00', 0x9) write$tcp_congestion(r0, 0x0, 0x0) 13:08:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7a00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:08:21 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:08:21 executing program 7: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0xeffd) 13:08:36 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x184, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4900}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5c}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x400c000}, 0x40895) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r2, 0x0, 0x0) 13:08:36 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}, {&(0x7f0000000500)="be25780dd1b328e4b7e6d63d6f15095ac0baf97a520c8f074809f75892a8f15e4b745831a0aa5e7c71e595b69d77471ad51275e0f809dde196d5e4b088d8290b0c074bc6aca4607fa7f183c0cc9d000af3fa332f31331631890e7391c4ae615afc8306205ecba6df983fd11ced860de044023b3f10088cbf8ae493be000864137b18a6e5c5419491fd9486a1d4ac0336f10f3ff617409f5860ddfe00ce165376", 0xa0, 0x7ff}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:08:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9a00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:08:36 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) 13:08:36 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x3d}]}) 13:08:36 executing program 7: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0xeffd) 13:08:36 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:08:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 41) [ 3262.570597] FAULT_INJECTION: forcing a failure. [ 3262.570597] name failslab, interval 1, probability 0, space 0, times 0 [ 3262.573017] CPU: 0 PID: 24846 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3262.574498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3262.576281] Call Trace: [ 3262.576861] dump_stack+0x107/0x167 [ 3262.577642] should_fail.cold+0x5/0xa [ 3262.578472] ? create_object.isra.0+0x3a/0xa30 [ 3262.579467] should_failslab+0x5/0x20 [ 3262.580300] kmem_cache_alloc+0x5b/0x310 [ 3262.581201] create_object.isra.0+0x3a/0xa30 [ 3262.582161] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3262.583280] kmem_cache_alloc+0x159/0x310 [ 3262.584200] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3262.585432] idr_get_free+0x4b5/0x8f0 [ 3262.586283] idr_alloc_u32+0x170/0x2d0 [ 3262.587136] ? __fprop_inc_percpu_max+0x130/0x130 [ 3262.588183] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 3262.589352] ? lock_release+0x680/0x680 [ 3262.590221] idr_alloc+0xc2/0x130 [ 3262.590974] ? idr_alloc_u32+0x2d0/0x2d0 [ 3262.591852] ? rwlock_bug.part.0+0x90/0x90 [ 3262.592790] p9_client_prepare_req.part.0+0x612/0xac0 [ 3262.593917] p9_client_rpc+0x220/0x1370 [ 3262.594781] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3262.595927] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 3262.597100] ? pipe_poll+0x21b/0x800 [ 3262.597907] ? p9_fd_close+0x4a0/0x4a0 [ 3262.598755] ? wait_for_partner+0x3c0/0x3c0 [ 3262.599689] ? p9_fd_poll+0x1e0/0x2c0 [ 3262.600521] ? p9_fd_create+0x357/0x4a0 [ 3262.601401] ? p9_conn_create+0x510/0x510 [ 3262.602300] ? p9_client_create+0x798/0x1230 [ 3262.603256] ? kfree+0xd7/0x340 [ 3262.603969] ? do_raw_spin_unlock+0x4f/0x220 [ 3262.604940] p9_client_create+0xa76/0x1230 [ 3262.605865] ? p9_client_flush+0x430/0x430 [ 3262.606787] ? trace_hardirqs_on+0x5b/0x180 [ 3262.607729] ? lockdep_init_map_type+0x2c7/0x780 [ 3262.608777] ? __raw_spin_lock_init+0x36/0x110 [ 3262.609778] v9fs_session_init+0x1dd/0x1680 13:08:36 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) [ 3262.610719] ? lock_release+0x680/0x680 [ 3262.611821] ? kmem_cache_alloc_trace+0x151/0x320 [ 3262.612883] ? v9fs_show_options+0x690/0x690 [ 3262.613849] ? trace_hardirqs_on+0x5b/0x180 [ 3262.614788] ? kasan_unpoison_shadow+0x33/0x50 [ 3262.615780] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3262.616893] v9fs_mount+0x79/0x8f0 [ 3262.617666] ? v9fs_write_inode+0x60/0x60 [ 3262.618563] legacy_get_tree+0x105/0x220 [ 3262.619451] vfs_get_tree+0x8e/0x300 [ 3262.620260] path_mount+0x1490/0x21e0 [ 3262.621105] ? strncpy_from_user+0x9e/0x470 [ 3262.622043] ? finish_automount+0xa90/0xa90 [ 3262.622981] ? getname_flags.part.0+0x1dd/0x4f0 [ 3262.623993] ? _copy_from_user+0xfb/0x1b0 [ 3262.624910] __x64_sys_mount+0x282/0x300 [ 3262.625793] ? copy_mnt_ns+0xa00/0xa00 [ 3262.626644] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3262.627787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3262.628919] do_syscall_64+0x33/0x40 [ 3262.629728] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3262.630839] RIP: 0033:0x7f3826f8db19 [ 3262.631651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3262.635708] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3262.637367] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3262.638908] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3262.640452] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3262.642007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3262.643558] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3262.646094] loop5: detected capacity change from 0 to 135266304 13:08:36 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x5, r0, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) 13:08:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9b00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:08:36 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x45}]}) 13:08:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 42) 13:08:51 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:08:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:08:51 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x3022401c, 0x0) 13:08:51 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x5, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}, {&(0x7f0000000440)="2ff5cd98498f0e900966be026a857cef91a800be67e8fc2488d0e0f94ee6d19ff214b73dd390528e1d428e704e14222f061c7454860e256099c47a573f6b8ce9729ead437968bd725164291fd0eb501dbac1809e995ac73dc85d31fd932c37ac0d7ede4ca4ead812412ba3e29dcd7c129e1452dc0606589af07b4f1e86d306a4df2e81a49b708774563eeafe006c1f167ad4b03cb6e1ff31cac02743dc3f2eb1321112dff998", 0xa6, 0x100000001}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:08:51 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:08:51 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x4d}]}) 13:08:51 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:08:51 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x60}]}) [ 3276.899742] loop5: detected capacity change from 0 to 135266304 [ 3276.900755] FAULT_INJECTION: forcing a failure. [ 3276.900755] name failslab, interval 1, probability 0, space 0, times 0 [ 3276.903397] CPU: 0 PID: 25180 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3276.904868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3276.906630] Call Trace: [ 3276.907192] dump_stack+0x107/0x167 [ 3276.907961] should_fail.cold+0x5/0xa [ 3276.908787] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3276.909997] should_failslab+0x5/0x20 [ 3276.910801] kmem_cache_alloc+0x5b/0x310 [ 3276.911669] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3276.912859] idr_get_free+0x4b5/0x8f0 [ 3276.913678] idr_alloc_u32+0x170/0x2d0 [ 3276.914505] ? __fprop_inc_percpu_max+0x130/0x130 [ 3276.915524] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 3276.916653] ? lock_release+0x680/0x680 [ 3276.917510] idr_alloc+0xc2/0x130 [ 3276.918242] ? idr_alloc_u32+0x2d0/0x2d0 [ 3276.919098] ? rwlock_bug.part.0+0x90/0x90 [ 3276.920004] p9_client_prepare_req.part.0+0x612/0xac0 [ 3276.921107] p9_client_rpc+0x220/0x1370 [ 3276.921949] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3276.923067] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 3276.924194] ? pipe_poll+0x21b/0x800 [ 3276.924987] ? p9_fd_close+0x4a0/0x4a0 [ 3276.925812] ? wait_for_partner+0x3c0/0x3c0 [ 3276.926720] ? p9_fd_poll+0x1e0/0x2c0 [ 3276.927540] ? p9_fd_create+0x357/0x4a0 [ 3276.928374] ? p9_conn_create+0x510/0x510 [ 3276.929252] ? p9_client_create+0x798/0x1230 [ 3276.930177] ? kfree+0xd7/0x340 [ 3276.930869] ? do_raw_spin_unlock+0x4f/0x220 [ 3276.931806] p9_client_create+0xa76/0x1230 [ 3276.932713] ? p9_client_flush+0x430/0x430 [ 3276.933608] ? trace_hardirqs_on+0x5b/0x180 [ 3276.934524] ? lockdep_init_map_type+0x2c7/0x780 [ 3276.935524] ? __raw_spin_lock_init+0x36/0x110 [ 3276.936495] v9fs_session_init+0x1dd/0x1680 [ 3276.937418] ? lock_release+0x680/0x680 [ 3276.938276] ? kmem_cache_alloc_trace+0x151/0x320 [ 3276.939291] ? v9fs_show_options+0x690/0x690 [ 3276.940230] ? trace_hardirqs_on+0x5b/0x180 [ 3276.941146] ? kasan_unpoison_shadow+0x33/0x50 [ 3276.942106] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3276.943181] v9fs_mount+0x79/0x8f0 [ 3276.943930] ? v9fs_write_inode+0x60/0x60 [ 3276.944813] legacy_get_tree+0x105/0x220 [ 3276.945670] vfs_get_tree+0x8e/0x300 [ 3276.946455] path_mount+0x1490/0x21e0 [ 3276.947276] ? strncpy_from_user+0x9e/0x470 [ 3276.948185] ? finish_automount+0xa90/0xa90 [ 3276.949105] ? getname_flags.part.0+0x1dd/0x4f0 [ 3276.950097] ? _copy_from_user+0xfb/0x1b0 [ 3276.950983] __x64_sys_mount+0x282/0x300 [ 3276.951831] ? copy_mnt_ns+0xa00/0xa00 [ 3276.952651] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3276.953764] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3276.954846] do_syscall_64+0x33/0x40 [ 3276.955630] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3276.956711] RIP: 0033:0x7f3826f8db19 [ 3276.957491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3276.961349] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3276.962940] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3276.964436] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3276.965931] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3276.967416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3276.968925] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:08:51 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x3022401c, 0x0) 13:08:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9d00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:08:51 executing program 7: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:08:51 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:08:51 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:08:51 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="92fb5dce86412de4b43b39a4bbbb624545b55dfac71eb18c3f049c7d73edac9fbbb097af48fa0b4d65476869bf33e3f94855c43f6d3b17f56409f6a2e03dd37de01408e4e3024f07a9370369ddd72a91335d508aafc8b52e84a25ac813a997104924d68ec00aed200f162daa79b4d00e04c000aa05685e453cb421cee039d9a3eb184a3b7d653b54be140a3b6cc91298e75e80d5ce6344627eee180ff4d39822895fa56622f573429b51cfba8ab813331a26d4555964275e3303bc2a55c1cd062aecd3419f0617c7070ba141016b991986be30f293298bddd5f470a8cbb2ec92e0eb647978ad62f8386bfe34460f13749e9ee331bb0b32a5c3c6677080c7", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}, {&(0x7f0000000380)="b01202303a40e3f1ae5dbc0a4ca4901badc41de1ac7f7fae61cb359fbc86fc3ca5da7090edba64fe3ae0254927b1bb614a2d1b793c7bbbf55a8370111ad3b83a6e547a93aa7a82b62baef4b625a6b89ccf5a64a81e761e76051137427d589f8734594e2d49e78de9a43a72e1a2a24717e3b35b0bbb688448a9d638f6145119f55bb4530129a42b70", 0x88, 0x1}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:09:07 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9e00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:09:07 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) (fail_nth: 1) [ 3293.550636] FAULT_INJECTION: forcing a failure. [ 3293.550636] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3293.552487] CPU: 0 PID: 25416 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 3293.553539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3293.554789] Call Trace: [ 3293.555194] dump_stack+0x107/0x167 [ 3293.555495] FAULT_INJECTION: forcing a failure. [ 3293.555495] name failslab, interval 1, probability 0, space 0, times 0 [ 3293.555717] should_fail.cold+0x5/0xa [ 3293.557949] __alloc_pages_nodemask+0x182/0x600 [ 3293.558480] ? check_nnp_nosuid.isra.0+0x2a0/0x2a0 [ 3293.559042] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 3293.559730] ? lock_acquire+0x197/0x470 [ 3293.560181] ? find_held_lock+0x2c/0x110 [ 3293.560653] kmalloc_large_node+0x55/0x1a0 [ 3293.561134] ? security_capable+0x95/0xc0 [ 3293.561606] __kmalloc_node+0x30d/0x420 [ 3293.562060] ? ns_capable_noaudit+0xe5/0x110 [ 3293.562558] kvmalloc_node+0xc0/0x170 [ 3293.562994] proc_sys_call_handler+0x20c/0x5a0 [ 3293.563517] ? proc_sys_lookup+0x590/0x590 [ 3293.564006] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3293.564601] new_sync_write+0x42c/0x660 [ 3293.565059] ? new_sync_read+0x6f0/0x6f0 [ 3293.565517] ? ksys_write+0x12d/0x260 [ 3293.565948] ? lock_release+0x680/0x680 [ 3293.566400] ? avc_policy_seqno+0x9/0x70 [ 3293.566860] ? selinux_file_permission+0x92/0x520 [ 3293.567420] vfs_write+0x7c0/0xb10 [ 3293.567831] ksys_write+0x12d/0x260 [ 3293.568248] ? __ia32_sys_read+0xb0/0xb0 [ 3293.568713] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3293.569315] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3293.569900] do_syscall_64+0x33/0x40 [ 3293.570322] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3293.570901] RIP: 0033:0x7f2c7730db19 [ 3293.571321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3293.573396] RSP: 002b:00007f2c74883188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3293.574258] RAX: ffffffffffffffda RBX: 00007f2c77420f60 RCX: 00007f2c7730db19 [ 3293.575067] RDX: 000000000000effd RSI: 0000000000000000 RDI: 0000000000000003 [ 3293.575872] RBP: 00007f2c748831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3293.576673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3293.577534] R13: 00007ffcadf0e8cf R14: 00007f2c74883300 R15: 0000000000022000 [ 3293.578373] CPU: 1 PID: 25415 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3293.579918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3293.581784] Call Trace: [ 3293.582383] dump_stack+0x107/0x167 [ 3293.583200] should_fail.cold+0x5/0xa [ 3293.584051] ? create_object.isra.0+0x3a/0xa30 [ 3293.585085] should_failslab+0x5/0x20 [ 3293.585940] kmem_cache_alloc+0x5b/0x310 [ 3293.586857] create_object.isra.0+0x3a/0xa30 13:09:07 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:09:07 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 13:09:07 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 13:09:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x61}]}) 13:09:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 43) 13:09:07 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 3293.587838] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3293.589201] kmem_cache_alloc+0x159/0x310 [ 3293.590145] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3293.591411] idr_get_free+0x4b5/0x8f0 [ 3293.592279] idr_alloc_u32+0x170/0x2d0 [ 3293.593165] ? __fprop_inc_percpu_max+0x130/0x130 [ 3293.594243] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 3293.595446] ? lock_release+0x680/0x680 [ 3293.596343] idr_alloc+0xc2/0x130 [ 3293.597130] ? idr_alloc_u32+0x2d0/0x2d0 [ 3293.598041] ? rwlock_bug.part.0+0x90/0x90 [ 3293.599001] p9_client_prepare_req.part.0+0x612/0xac0 [ 3293.600164] p9_client_rpc+0x220/0x1370 [ 3293.601068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3293.602256] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 3293.603457] ? pipe_poll+0x21b/0x800 [ 3293.604289] ? p9_fd_close+0x4a0/0x4a0 [ 3293.605175] ? wait_for_partner+0x3c0/0x3c0 [ 3293.606143] ? p9_fd_poll+0x1e0/0x2c0 [ 3293.607003] ? p9_fd_create+0x357/0x4a0 [ 3293.607891] ? p9_conn_create+0x510/0x510 [ 3293.608814] ? p9_client_create+0x798/0x1230 [ 3293.609806] ? kfree+0xd7/0x340 [ 3293.610540] ? do_raw_spin_unlock+0x4f/0x220 [ 3293.611542] p9_client_create+0xa76/0x1230 [ 3293.612498] ? p9_client_flush+0x430/0x430 [ 3293.613456] ? trace_hardirqs_on+0x5b/0x180 [ 3293.614425] ? lockdep_init_map_type+0x2c7/0x780 [ 3293.615492] ? __raw_spin_lock_init+0x36/0x110 [ 3293.616525] v9fs_session_init+0x1dd/0x1680 [ 3293.617510] ? lock_release+0x680/0x680 [ 3293.618412] ? kmem_cache_alloc_trace+0x151/0x320 [ 3293.619494] ? v9fs_show_options+0x690/0x690 [ 3293.620492] ? trace_hardirqs_on+0x5b/0x180 [ 3293.621489] ? kasan_unpoison_shadow+0x33/0x50 [ 3293.622516] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3293.623639] v9fs_mount+0x79/0x8f0 [ 3293.624426] ? v9fs_write_inode+0x60/0x60 [ 3293.625365] legacy_get_tree+0x105/0x220 [ 3293.626281] vfs_get_tree+0x8e/0x300 [ 3293.627118] path_mount+0x1490/0x21e0 [ 3293.627988] ? strncpy_from_user+0x9e/0x470 [ 3293.628956] ? finish_automount+0xa90/0xa90 [ 3293.629912] ? getname_flags.part.0+0x1dd/0x4f0 [ 3293.630956] ? _copy_from_user+0xfb/0x1b0 [ 3293.631904] __x64_sys_mount+0x282/0x300 [ 3293.632816] ? copy_mnt_ns+0xa00/0xa00 [ 3293.633701] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3293.634876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3293.636112] do_syscall_64+0x33/0x40 [ 3293.636967] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3293.638119] RIP: 0033:0x7f3826f8db19 [ 3293.638952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3293.643090] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3293.644799] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3293.646413] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3293.648013] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3293.649633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3293.651232] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:09:07 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:09:07 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) (fail_nth: 2) 13:09:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x64}]}) 13:09:07 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) (fail_nth: 1) 13:09:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 44) [ 3293.726551] FAULT_INJECTION: forcing a failure. [ 3293.726551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3293.727990] CPU: 0 PID: 25628 Comm: syz-executor.2 Not tainted 5.10.247 #1 [ 3293.728775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3293.729738] Call Trace: [ 3293.730044] dump_stack+0x107/0x167 [ 3293.730462] should_fail.cold+0x5/0xa [ 3293.730900] _copy_to_user+0x2e/0x180 [ 3293.731337] simple_read_from_buffer+0xcc/0x160 [ 3293.731876] proc_fail_nth_read+0x198/0x230 [ 3293.731932] FAULT_INJECTION: forcing a failure. [ 3293.731932] name failslab, interval 1, probability 0, space 0, times 0 [ 3293.732368] ? proc_sessionid_read+0x230/0x230 [ 3293.732379] ? security_file_permission+0xb1/0xe0 [ 3293.732393] ? proc_sessionid_read+0x230/0x230 [ 3293.732404] vfs_read+0x228/0x620 [ 3293.732420] ksys_read+0x12d/0x260 [ 3293.737237] ? vfs_write+0xb10/0xb10 [ 3293.737666] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3293.738268] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3293.738860] do_syscall_64+0x33/0x40 [ 3293.739286] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3293.739871] RIP: 0033:0x7f4eb0cea69c [ 3293.740296] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3293.742387] RSP: 002b:00007f4eae2ad170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3293.743250] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f4eb0cea69c [ 3293.744061] RDX: 000000000000000f RSI: 00007f4eae2ad1e0 RDI: 0000000000000004 [ 3293.744871] RBP: 00007f4eae2ad1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3293.745684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3293.746495] R13: 00007fff1b56aadf R14: 00007f4eae2ad300 R15: 0000000000022000 [ 3293.747326] CPU: 1 PID: 25637 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 3293.748902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3293.750773] Call Trace: [ 3293.751368] dump_stack+0x107/0x167 [ 3293.752193] should_fail.cold+0x5/0xa [ 3293.753074] ? create_object.isra.0+0x3a/0xa30 [ 3293.754115] should_failslab+0x5/0x20 [ 3293.754981] kmem_cache_alloc+0x5b/0x310 [ 3293.755915] create_object.isra.0+0x3a/0xa30 [ 3293.756919] ? kasan_unpoison_shadow+0x33/0x50 [ 3293.757972] kmalloc_large_node+0x124/0x1a0 [ 3293.758962] __kmalloc_node+0x30d/0x420 [ 3293.759872] ? ns_capable_noaudit+0xe5/0x110 [ 3293.760892] kvmalloc_node+0xc0/0x170 [ 3293.761764] proc_sys_call_handler+0x20c/0x5a0 [ 3293.762813] ? proc_sys_lookup+0x590/0x590 [ 3293.763769] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3293.764988] new_sync_write+0x42c/0x660 [ 3293.765907] ? new_sync_read+0x6f0/0x6f0 [ 3293.766844] ? ksys_write+0x12d/0x260 [ 3293.767717] ? lock_release+0x680/0x680 [ 3293.768624] ? avc_policy_seqno+0x9/0x70 [ 3293.769557] ? selinux_file_permission+0x92/0x520 [ 3293.770682] vfs_write+0x7c0/0xb10 [ 3293.771494] ksys_write+0x12d/0x260 [ 3293.772326] ? __ia32_sys_read+0xb0/0xb0 [ 3293.773261] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3293.774441] ? syscall_enter_from_user_mode+0x1d/0x50 13:09:08 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 3293.775626] do_syscall_64+0x33/0x40 [ 3293.776680] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3293.777847] RIP: 0033:0x7f2c7730db19 [ 3293.778690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:09:08 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa300, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 3293.782828] RSP: 002b:00007f2c74883188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3293.784647] RAX: ffffffffffffffda RBX: 00007f2c77420f60 RCX: 00007f2c7730db19 [ 3293.786276] RDX: 000000000000effd RSI: 0000000000000000 RDI: 0000000000000003 [ 3293.787897] RBP: 00007f2c748831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3293.789523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3293.791157] R13: 00007ffcadf0e8cf R14: 00007f2c74883300 R15: 0000000000022000 13:09:08 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x74}]}) [ 3293.812435] FAULT_INJECTION: forcing a failure. [ 3293.812435] name failslab, interval 1, probability 0, space 0, times 0 [ 3293.813731] CPU: 0 PID: 25741 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3293.814509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3293.815459] Call Trace: [ 3293.815769] dump_stack+0x107/0x167 [ 3293.816182] should_fail.cold+0x5/0xa [ 3293.816616] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3293.817276] should_failslab+0x5/0x20 [ 3293.817709] kmem_cache_alloc+0x5b/0x310 [ 3293.818173] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3293.818816] idr_get_free+0x4b5/0x8f0 [ 3293.819252] idr_alloc_u32+0x170/0x2d0 [ 3293.819693] ? __fprop_inc_percpu_max+0x130/0x130 [ 3293.820235] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 3293.820861] ? lock_release+0x680/0x680 [ 3293.821317] idr_alloc+0xc2/0x130 [ 3293.821714] ? idr_alloc_u32+0x2d0/0x2d0 [ 3293.822176] ? rwlock_bug.part.0+0x90/0x90 [ 3293.822660] p9_client_prepare_req.part.0+0x612/0xac0 [ 3293.823250] p9_client_rpc+0x220/0x1370 [ 3293.823700] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3293.824299] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 3293.824915] ? pipe_poll+0x21b/0x800 [ 3293.825335] ? p9_fd_close+0x4a0/0x4a0 [ 3293.825787] ? wait_for_partner+0x3c0/0x3c0 [ 3293.826274] ? p9_fd_poll+0x1e0/0x2c0 [ 3293.826710] ? p9_fd_create+0x357/0x4a0 [ 3293.827161] ? p9_conn_create+0x510/0x510 [ 3293.827629] ? p9_client_create+0x798/0x1230 [ 3293.828124] ? kfree+0xd7/0x340 [ 3293.828494] ? do_raw_spin_unlock+0x4f/0x220 [ 3293.829006] p9_client_create+0xa76/0x1230 [ 3293.829486] ? p9_client_flush+0x430/0x430 [ 3293.829968] ? trace_hardirqs_on+0x5b/0x180 [ 3293.830463] ? lockdep_init_map_type+0x2c7/0x780 [ 3293.830996] ? __raw_spin_lock_init+0x36/0x110 [ 3293.831527] v9fs_session_init+0x1dd/0x1680 [ 3293.832014] ? lock_release+0x680/0x680 [ 3293.832465] ? kmem_cache_alloc_trace+0x151/0x320 [ 3293.833015] ? v9fs_show_options+0x690/0x690 [ 3293.833513] ? trace_hardirqs_on+0x5b/0x180 [ 3293.834000] ? kasan_unpoison_shadow+0x33/0x50 [ 3293.834513] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3293.835096] v9fs_mount+0x79/0x8f0 [ 3293.835497] ? v9fs_write_inode+0x60/0x60 [ 3293.835961] legacy_get_tree+0x105/0x220 [ 3293.836418] vfs_get_tree+0x8e/0x300 [ 3293.836837] path_mount+0x1490/0x21e0 [ 3293.837276] ? strncpy_from_user+0x9e/0x470 [ 3293.837760] ? finish_automount+0xa90/0xa90 [ 3293.838244] ? getname_flags.part.0+0x1dd/0x4f0 [ 3293.838766] ? _copy_from_user+0xfb/0x1b0 [ 3293.839237] __x64_sys_mount+0x282/0x300 [ 3293.839694] ? copy_mnt_ns+0xa00/0xa00 [ 3293.840141] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3293.840740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3293.841333] do_syscall_64+0x33/0x40 [ 3293.841752] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3293.842327] RIP: 0033:0x7f3826f8db19 [ 3293.842747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3293.844815] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3293.845674] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3293.846483] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3293.847300] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3293.848108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3293.848915] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:09:08 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) (fail_nth: 3) [ 3293.879134] 9pnet: Could not find request transport: fd0x0000000000000004 13:09:08 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}, {&(0x7f0000000340), 0x0, 0x2}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 3293.893095] FAULT_INJECTION: forcing a failure. [ 3293.893095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3293.895791] CPU: 1 PID: 25853 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 3293.897368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3293.899267] Call Trace: 13:09:08 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="070078000000ffff000000004a1000680066000009299078ac1414190a010101070c8ee15472e13f355212e200070fa5ac14142dac141426ac14142c890bf10a0101020a01010044041633891770000000007f000001e00000020a010102ffffffff94ae42a0400c3a9000000009000000000000"]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0x23) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x4e24, 0xffff, 0x4e21, 0x0, 0x2, 0x40, 0x0, 0x84, r3}, {0x7ff, 0x1, 0x1, 0x20, 0x8000, 0x400, 0x8000, 0x9}, {0x1, 0x8, 0xc024, 0x2}, 0x2, 0x6e6bb9, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffc, 0x0, 0x2, 0x9, 0x1010001, 0x4, 0x99e4}}, 0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0x23) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x4e24, 0xffff, 0x4e21, 0x0, 0x2, 0x40, 0x0, 0x84, r5}, {0x7ff, 0x1, 0x1, 0x20, 0x8000, 0x400, 0x8000, 0x9}, {0x1, 0x8, 0xc024, 0x2}, 0x2, 0x6e6bb9, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffc, 0x0, 0x2, 0x9, 0x1010001, 0x4, 0x99e4}}, 0xe8) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x7, 0x3, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8700, 0x8000, 0x8001, 0x9}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0x23) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x4e24, 0xffff, 0x4e21, 0x0, 0x2, 0x40, 0x0, 0x84, r8}, {0x7ff, 0x1, 0x1, 0x20, 0x8000, 0x400, 0x8000, 0x9}, {0x1, 0x8, 0xc024, 0x2}, 0x2, 0x6e6bb9, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffc, 0x0, 0x2, 0x9, 0x1010001, 0x4, 0x99e4}}, 0xe8) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d4, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x200008c1}, 0xc0) [ 3293.899991] dump_stack+0x107/0x167 [ 3293.900934] should_fail.cold+0x5/0xa [ 3293.901813] _copy_from_iter_full+0x201/0xa60 [ 3293.902821] ? __virt_addr_valid+0x170/0x5d0 [ 3293.903808] ? __check_object_size+0x319/0x440 [ 3293.904839] proc_sys_call_handler+0x279/0x5a0 [ 3293.905873] ? proc_sys_lookup+0x590/0x590 [ 3293.906829] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3293.908016] new_sync_write+0x42c/0x660 [ 3293.908916] ? new_sync_read+0x6f0/0x6f0 [ 3293.909822] ? ksys_write+0x12d/0x260 [ 3293.910678] ? lock_release+0x680/0x680 [ 3293.911569] ? avc_policy_seqno+0x9/0x70 [ 3293.912478] ? selinux_file_permission+0x92/0x520 [ 3293.913586] vfs_write+0x7c0/0xb10 [ 3293.914388] ksys_write+0x12d/0x260 [ 3293.915213] ? __ia32_sys_read+0xb0/0xb0 [ 3293.916127] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3293.917316] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3293.918478] do_syscall_64+0x33/0x40 [ 3293.919314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3293.920464] RIP: 0033:0x7f2c7730db19 [ 3293.921307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3293.925436] RSP: 002b:00007f2c74883188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3293.927144] RAX: ffffffffffffffda RBX: 00007f2c77420f60 RCX: 00007f2c7730db19 [ 3293.928750] RDX: 000000000000effd RSI: 0000000000000000 RDI: 0000000000000003 [ 3293.930355] RBP: 00007f2c748831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3293.931950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3293.933560] R13: 00007ffcadf0e8cf R14: 00007f2c74883300 R15: 0000000000022000 13:09:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 45) 13:09:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xedc0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:09:22 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) (fail_nth: 4) 13:09:22 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 13:09:22 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:09:22 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:09:22 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:09:22 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x94}]}) [ 3307.937696] 9pnet: Could not find request transport: fd0x0000000000000004 [ 3307.943931] FAULT_INJECTION: forcing a failure. [ 3307.943931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3307.945226] FAULT_INJECTION: forcing a failure. [ 3307.945226] name failslab, interval 1, probability 0, space 0, times 0 [ 3307.946424] CPU: 0 PID: 25983 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 3307.950135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3307.951894] Call Trace: [ 3307.952458] dump_stack+0x107/0x167 [ 3307.953240] should_fail.cold+0x5/0xa [ 3307.954058] _copy_to_user+0x2e/0x180 [ 3307.954892] simple_read_from_buffer+0xcc/0x160 [ 3307.955881] proc_fail_nth_read+0x198/0x230 [ 3307.956804] ? proc_sessionid_read+0x230/0x230 [ 3307.957790] ? security_file_permission+0xb1/0xe0 [ 3307.958823] ? proc_sessionid_read+0x230/0x230 [ 3307.959797] vfs_read+0x228/0x620 [ 3307.960542] ksys_read+0x12d/0x260 [ 3307.961307] ? vfs_write+0xb10/0xb10 [ 3307.962105] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3307.963218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3307.964306] do_syscall_64+0x33/0x40 [ 3307.965096] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3307.966172] RIP: 0033:0x7f2c772c069c [ 3307.966966] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3307.970901] RSP: 002b:00007f2c74883170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3307.972502] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f2c772c069c [ 3307.974023] RDX: 000000000000000f RSI: 00007f2c748831e0 RDI: 0000000000000004 [ 3307.975538] RBP: 00007f2c748831d0 R08: 0000000000000000 R09: 0000000000000000 [ 3307.977069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3307.978592] R13: 00007ffcadf0e8cf R14: 00007f2c74883300 R15: 0000000000022000 [ 3307.980126] CPU: 1 PID: 25972 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3307.981602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3307.983361] Call Trace: [ 3307.983928] dump_stack+0x107/0x167 [ 3307.984708] should_fail.cold+0x5/0xa [ 3307.985524] ? create_object.isra.0+0x3a/0xa30 [ 3307.986493] should_failslab+0x5/0x20 [ 3307.987306] kmem_cache_alloc+0x5b/0x310 [ 3307.988174] create_object.isra.0+0x3a/0xa30 [ 3307.989109] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3307.990187] kmem_cache_alloc+0x159/0x310 [ 3307.991073] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3307.992268] idr_get_free+0x4b5/0x8f0 [ 3307.993103] idr_alloc_u32+0x170/0x2d0 [ 3307.993931] ? __fprop_inc_percpu_max+0x130/0x130 [ 3307.994962] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 3307.996097] ? lock_release+0x680/0x680 [ 3307.996936] idr_alloc+0xc2/0x130 [ 3307.997672] ? idr_alloc_u32+0x2d0/0x2d0 [ 3307.998531] ? rwlock_bug.part.0+0x90/0x90 [ 3307.999429] p9_client_prepare_req.part.0+0x612/0xac0 [ 3308.000528] p9_client_rpc+0x220/0x1370 [ 3308.001383] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3308.002508] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 3308.003637] ? pipe_poll+0x21b/0x800 [ 3308.004427] ? p9_fd_close+0x4a0/0x4a0 [ 3308.005275] ? wait_for_partner+0x3c0/0x3c0 [ 3308.006189] ? p9_fd_poll+0x1e0/0x2c0 [ 3308.007011] ? p9_fd_create+0x357/0x4a0 [ 3308.007852] ? p9_conn_create+0x510/0x510 [ 3308.008726] ? p9_client_create+0x798/0x1230 [ 3308.009662] ? kfree+0xd7/0x340 [ 3308.010352] ? do_raw_spin_unlock+0x4f/0x220 [ 3308.011293] p9_client_create+0xa76/0x1230 [ 3308.012197] ? p9_client_flush+0x430/0x430 [ 3308.013096] ? trace_hardirqs_on+0x5b/0x180 [ 3308.014015] ? lockdep_init_map_type+0x2c7/0x780 [ 3308.015021] ? __raw_spin_lock_init+0x36/0x110 [ 3308.015999] v9fs_session_init+0x1dd/0x1680 [ 3308.016918] ? lock_release+0x680/0x680 [ 3308.017783] ? kmem_cache_alloc_trace+0x151/0x320 [ 3308.018797] ? v9fs_show_options+0x690/0x690 [ 3308.019738] ? trace_hardirqs_on+0x5b/0x180 [ 3308.020646] ? kasan_unpoison_shadow+0x33/0x50 [ 3308.021623] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3308.022700] v9fs_mount+0x79/0x8f0 [ 3308.023459] ? v9fs_write_inode+0x60/0x60 [ 3308.024338] legacy_get_tree+0x105/0x220 [ 3308.025218] vfs_get_tree+0x8e/0x300 [ 3308.026006] path_mount+0x1490/0x21e0 [ 3308.026833] ? strncpy_from_user+0x9e/0x470 [ 3308.027759] ? finish_automount+0xa90/0xa90 [ 3308.028671] ? getname_flags.part.0+0x1dd/0x4f0 [ 3308.029656] ? _copy_from_user+0xfb/0x1b0 [ 3308.030543] __x64_sys_mount+0x282/0x300 [ 3308.031401] ? copy_mnt_ns+0xa00/0xa00 [ 3308.032231] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3308.033359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3308.034459] do_syscall_64+0x33/0x40 [ 3308.035259] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3308.036351] RIP: 0033:0x7f3826f8db19 [ 3308.037152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3308.041025] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3308.042650] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3308.044158] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3308.045678] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3308.047193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3308.048702] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:09:22 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:09:22 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0xb1}]}) 13:09:22 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="33180000000000000724d8"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}, 0x10002) copy_file_range(r1, 0x0, r3, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) 13:09:22 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) 13:09:22 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:09:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfeff, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 3308.183783] 9pnet: Could not find request transport: fd0x0000000000000004 13:09:22 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:09:22 executing program 3: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) [ 3308.290756] 9pnet: Insufficient options for proto=fd 13:09:35 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x3fffff) 13:09:35 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci', 0xc000, 0x5) write$tcp_congestion(r1, &(0x7f0000000080)='illinois\x00', 0x9) write$tcp_congestion(r0, 0x0, 0x0) 13:09:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xff03, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:09:35 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}, {&(0x7f0000000240)="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", 0xfe, 0x7}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:09:35 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:09:35 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:09:35 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 46) 13:09:35 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000640), 0x6e, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/153, 0x99}, {0x0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/96, 0x60}, {&(0x7f0000001840)=""/39, 0x27}, {&(0x7f0000001880)=""/123, 0x7b}], 0x6, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES16=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00008f501c12c400000000a1000001080000020000002a1f9d87025e319d02e36448459bb1ee95e71cf2624e72d4091048db68f34ec3f6a805d33e031cf181223033c4a0fc6704714b28c92e606d1156afaf589776d06a9ac3c1e038c671f28be5781cb504188e63ad842937d49cc8ba754bd3c0d4fd415db4ff8e6c9588ca173003a48e97a8bfa834fc8b8ad8cf18015cf9f4dc4b51e3", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYBLOB="0000000024180000001100000100000001004000", @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="fb6ee0a2fed310504b8de9385c51acd1fecd056d59bde9d2d4202684e0b57e227ca0c8096f39daaae7fc6994affb54ee1d86e17b8dc354044e196e5cdb30c6b14fda6b215d5f7412dc0cb71757bccfa148209a928108487b67a896", @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001000000000000000010000000100000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100ed0001000000c32d57f018e3df0be8cebf128e32b40c82eb09318b8e8737e7c7ce6beb2958b9a0af56be827639ff1dc71011fb16e117687ef7aed704fb43a21655b3b3a94b70a82694d8118a060362192ae6", @ANYRESOCT=r1, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRESDEC=r1], 0x108}, 0x201) perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x7, 0x7, 0x48, 0x0, 0x1, 0x900a0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0xaba}, 0xc000, 0x4, 0x1, 0x6, 0x6, 0xfffffff7, 0x401, 0x0, 0x7, 0x0, 0x3}, r4, 0x10, r1, 0xb) write$tcp_congestion(r4, &(0x7f0000000040)='scalable\x00', 0x9) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x48) [ 3321.391871] FAULT_INJECTION: forcing a failure. [ 3321.391871] name failslab, interval 1, probability 0, space 0, times 0 [ 3321.393298] CPU: 1 PID: 26526 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3321.394157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3321.394705] 9pnet: Insufficient options for proto=fd [ 3321.395189] Call Trace: [ 3321.395207] dump_stack+0x107/0x167 [ 3321.395232] should_fail.cold+0x5/0xa [ 3321.397528] ? create_object.isra.0+0x3a/0xa30 [ 3321.398093] should_failslab+0x5/0x20 [ 3321.398566] kmem_cache_alloc+0x5b/0x310 [ 3321.399073] create_object.isra.0+0x3a/0xa30 [ 3321.399615] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3321.400249] kmem_cache_alloc+0x159/0x310 [ 3321.400768] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 3321.401478] idr_get_free+0x4b5/0x8f0 [ 3321.401962] idr_alloc_u32+0x170/0x2d0 [ 3321.402452] ? __fprop_inc_percpu_max+0x130/0x130 [ 3321.403053] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 3321.403716] ? lock_release+0x680/0x680 [ 3321.404213] idr_alloc+0xc2/0x130 [ 3321.404644] ? idr_alloc_u32+0x2d0/0x2d0 [ 3321.405146] ? rwlock_bug.part.0+0x90/0x90 [ 3321.405687] p9_client_prepare_req.part.0+0x612/0xac0 [ 3321.406331] p9_client_rpc+0x220/0x1370 [ 3321.406825] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3321.407480] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 3321.408144] ? pipe_poll+0x21b/0x800 [ 3321.408605] ? p9_fd_close+0x4a0/0x4a0 [ 3321.409088] ? wait_for_partner+0x3c0/0x3c0 [ 3321.409631] ? p9_fd_poll+0x1e0/0x2c0 [ 3321.410109] ? p9_fd_create+0x357/0x4a0 [ 3321.410598] ? p9_conn_create+0x510/0x510 [ 3321.411112] ? p9_client_create+0x798/0x1230 [ 3321.411654] ? kfree+0xd7/0x340 [ 3321.412063] ? do_raw_spin_unlock+0x4f/0x220 [ 3321.412613] p9_client_create+0xa76/0x1230 [ 3321.413144] ? p9_client_flush+0x430/0x430 [ 3321.413678] ? trace_hardirqs_on+0x5b/0x180 [ 3321.414215] ? lockdep_init_map_type+0x2c7/0x780 [ 3321.414802] ? __raw_spin_lock_init+0x36/0x110 [ 3321.415368] v9fs_session_init+0x1dd/0x1680 [ 3321.415900] ? lock_release+0x680/0x680 [ 3321.416397] ? kmem_cache_alloc_trace+0x151/0x320 [ 3321.416989] ? v9fs_show_options+0x690/0x690 [ 3321.417554] ? trace_hardirqs_on+0x5b/0x180 [ 3321.418087] ? kasan_unpoison_shadow+0x33/0x50 [ 3321.418648] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3321.419275] v9fs_mount+0x79/0x8f0 [ 3321.419714] ? v9fs_write_inode+0x60/0x60 [ 3321.420225] legacy_get_tree+0x105/0x220 [ 3321.420726] vfs_get_tree+0x8e/0x300 [ 3321.421194] path_mount+0x1490/0x21e0 [ 3321.421665] ? strncpy_from_user+0x9e/0x470 [ 3321.422196] ? finish_automount+0xa90/0xa90 [ 3321.422728] ? getname_flags.part.0+0x1dd/0x4f0 [ 3321.423311] ? _copy_from_user+0xfb/0x1b0 [ 3321.423824] __x64_sys_mount+0x282/0x300 [ 3321.424325] ? copy_mnt_ns+0xa00/0xa00 [ 3321.424805] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3321.425459] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3321.426097] do_syscall_64+0x33/0x40 [ 3321.426562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3321.427193] RIP: 0033:0x7f3826f8db19 [ 3321.427650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3321.429923] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3321.430860] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3321.431746] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3321.432628] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3321.433519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3321.434398] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:09:35 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:09:35 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8e75163e3b84f3134fe410e49973c90753a735dfae7d76b27b84b36a3d1140b1dac704df34fb6bd4a5910fda5d19298404d33724d3ca04461d371eab8027898ff52b24b12c577a69f712b35d46d0588077d3ba3559b18b542780d6a16c3a497afa73b2ae1e3eba4", 0xcf, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 3321.479252] 9pnet: Insufficient options for proto=fd 13:09:35 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x2}]}) 13:09:35 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x7ffffffff000) 13:09:35 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) fcntl$setstatus(r1, 0x4, 0x40000) 13:09:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfffe, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:09:35 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:09:35 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x24040, 0x134) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) [ 3321.601734] 9pnet: Insufficient options for proto=fd 13:09:51 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) 13:09:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151c3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:09:51 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) write$tcp_congestion(r0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) fstat(r3, &(0x7f0000000180)) 13:09:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 47) 13:09:51 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x9}]}) 13:09:51 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:09:51 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 13:09:51 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:09:51 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 3337.435927] 9pnet: Insufficient options for proto=fd [ 3337.461605] FAULT_INJECTION: forcing a failure. [ 3337.461605] name failslab, interval 1, probability 0, space 0, times 0 [ 3337.464229] CPU: 0 PID: 27238 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3337.465734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3337.467521] Call Trace: [ 3337.468093] dump_stack+0x107/0x167 [ 3337.468880] should_fail.cold+0x5/0xa [ 3337.469708] ? create_object.isra.0+0x3a/0xa30 [ 3337.470691] should_failslab+0x5/0x20 [ 3337.471514] kmem_cache_alloc+0x5b/0x310 [ 3337.472393] create_object.isra.0+0x3a/0xa30 [ 3337.473338] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3337.474498] __kmalloc+0x16e/0x390 [ 3337.475269] p9pdu_readf+0xadb/0x1d40 [ 3337.476094] ? pipe_poll+0x21b/0x800 [ 3337.476894] ? p9pdu_writef+0x100/0x100 [ 3337.477768] ? p9_fd_poll+0x1e0/0x2c0 [ 3337.478591] ? p9_fd_create+0x357/0x4a0 [ 3337.479446] ? p9_conn_create+0x510/0x510 [ 3337.480332] ? p9_client_create+0x798/0x1230 [ 3337.481278] ? kfree+0xd7/0x340 [ 3337.481993] ? do_raw_spin_unlock+0x4f/0x220 [ 3337.482942] p9_client_create+0xaee/0x1230 [ 3337.483856] ? p9_client_flush+0x430/0x430 [ 3337.484767] ? trace_hardirqs_on+0x5b/0x180 [ 3337.485711] ? lockdep_init_map_type+0x2c7/0x780 [ 3337.486732] ? __raw_spin_lock_init+0x36/0x110 [ 3337.487722] v9fs_session_init+0x1dd/0x1680 [ 3337.488650] ? lock_release+0x680/0x680 [ 3337.489521] ? kmem_cache_alloc_trace+0x151/0x320 [ 3337.490562] ? v9fs_show_options+0x690/0x690 [ 3337.491517] ? trace_hardirqs_on+0x5b/0x180 [ 3337.492449] ? kasan_unpoison_shadow+0x33/0x50 [ 3337.493442] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3337.494534] v9fs_mount+0x79/0x8f0 [ 3337.495301] ? v9fs_write_inode+0x60/0x60 [ 3337.496186] legacy_get_tree+0x105/0x220 [ 3337.497056] vfs_get_tree+0x8e/0x300 [ 3337.497862] path_mount+0x1490/0x21e0 [ 3337.498685] ? strncpy_from_user+0x9e/0x470 [ 3337.499607] ? finish_automount+0xa90/0xa90 [ 3337.500530] ? getname_flags.part.0+0x1dd/0x4f0 [ 3337.501534] ? _copy_from_user+0xfb/0x1b0 [ 3337.502429] __x64_sys_mount+0x282/0x300 [ 3337.503299] ? copy_mnt_ns+0xa00/0xa00 [ 3337.504136] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3337.505264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3337.506386] do_syscall_64+0x33/0x40 [ 3337.507184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3337.508282] RIP: 0033:0x7f3826f8db19 [ 3337.509081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3337.513055] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3337.514713] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3337.516258] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3337.517811] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3337.519352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3337.520896] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:09:51 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0xa0}]}) 13:09:51 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/204, 0xcc}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000200)=""/23, 0x17}], 0x4, 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000000)='bic\x00', 0x4) write$tcp_congestion(r0, 0x0, 0xeffd) r2 = perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000640), 0x6e, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/153, 0x99}, {0x0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/96, 0x60}, {&(0x7f0000001840)=""/39, 0x27}, {&(0x7f0000001880)=""/123, 0x7b}], 0x6, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x201) perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x7, 0x7, 0x48, 0x0, 0x1, 0x900a0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0xaba}, 0xc000, 0x4, 0x1, 0x6, 0x6, 0xfffffff7, 0x401, 0x0, 0x7, 0x0, 0x3}, r3, 0x10, r2, 0xb) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080)=0x5, 0x4) 13:09:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151c4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:09:51 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 3337.598429] 9pnet: Insufficient options for proto=fd 13:09:51 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 13:09:51 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{0x0, 0x0, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:09:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 48) 13:09:52 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:09:52 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) dup2(r0, r0) write$tcp_congestion(r0, 0x0, 0x0) [ 3337.791643] FAULT_INJECTION: forcing a failure. [ 3337.791643] name failslab, interval 1, probability 0, space 0, times 0 [ 3337.794163] CPU: 1 PID: 27670 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3337.795665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3337.797472] Call Trace: [ 3337.798045] dump_stack+0x107/0x167 [ 3337.798837] should_fail.cold+0x5/0xa [ 3337.799666] ? p9pdu_readf+0xadb/0x1d40 [ 3337.800529] should_failslab+0x5/0x20 [ 3337.801352] __kmalloc+0x72/0x390 [ 3337.802115] p9pdu_readf+0xadb/0x1d40 [ 3337.802943] ? pipe_poll+0x21b/0x800 [ 3337.803748] ? p9pdu_writef+0x100/0x100 [ 3337.804607] ? p9_fd_poll+0x1e0/0x2c0 [ 3337.805445] ? p9_fd_create+0x357/0x4a0 [ 3337.806303] ? p9_conn_create+0x510/0x510 [ 3337.807193] ? p9_client_create+0x798/0x1230 [ 3337.808145] ? kfree+0xd7/0x340 [ 3337.808854] ? do_raw_spin_unlock+0x4f/0x220 [ 3337.809817] p9_client_create+0xaee/0x1230 [ 3337.810736] ? p9_client_flush+0x430/0x430 [ 3337.811656] ? trace_hardirqs_on+0x5b/0x180 [ 3337.812594] ? lockdep_init_map_type+0x2c7/0x780 [ 3337.813625] ? __raw_spin_lock_init+0x36/0x110 [ 3337.814622] v9fs_session_init+0x1dd/0x1680 [ 3337.815556] ? lock_release+0x680/0x680 [ 3337.816423] ? kmem_cache_alloc_trace+0x151/0x320 [ 3337.817474] ? v9fs_show_options+0x690/0x690 [ 3337.818431] ? trace_hardirqs_on+0x5b/0x180 [ 3337.819366] ? kasan_unpoison_shadow+0x33/0x50 [ 3337.820353] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3337.821460] v9fs_mount+0x79/0x8f0 [ 3337.822230] ? v9fs_write_inode+0x60/0x60 [ 3337.823124] legacy_get_tree+0x105/0x220 [ 3337.824002] vfs_get_tree+0x8e/0x300 [ 3337.824811] path_mount+0x1490/0x21e0 [ 3337.825648] ? strncpy_from_user+0x9e/0x470 [ 3337.826579] ? finish_automount+0xa90/0xa90 [ 3337.827508] ? getname_flags.part.0+0x1dd/0x4f0 [ 3337.828513] ? _copy_from_user+0xfb/0x1b0 [ 3337.829423] __x64_sys_mount+0x282/0x300 [ 3337.830297] ? copy_mnt_ns+0xa00/0xa00 [ 3337.831140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3337.832274] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3337.833401] do_syscall_64+0x33/0x40 [ 3337.834205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3337.835310] RIP: 0033:0x7f3826f8db19 [ 3337.836111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3337.840105] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3337.841752] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3337.843293] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3337.844835] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3337.846380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3337.847917] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:10:05 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151c5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:10:05 executing program 3: syz_io_uring_setup(0x2aa6, &(0x7f0000000080)={0x0, 0x3d60, 0x4, 0x1, 0x205}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 13:10:05 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 1) 13:10:05 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{0x0, 0x0, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:10:05 executing program 7: prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000e60080000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) write$tcp_congestion(r1, 0x0, 0x0) 13:10:05 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x2}]}) 13:10:05 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 49) 13:10:05 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x4800, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ftruncate(0xffffffffffffffff, 0x2007fff) [ 3351.749945] FAULT_INJECTION: forcing a failure. [ 3351.749945] name failslab, interval 1, probability 0, space 0, times 0 [ 3351.752382] CPU: 0 PID: 27819 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3351.753853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3351.754389] FAULT_INJECTION: forcing a failure. [ 3351.754389] name failslab, interval 1, probability 0, space 0, times 0 [ 3351.755601] Call Trace: [ 3351.755628] dump_stack+0x107/0x167 [ 3351.755653] should_fail.cold+0x5/0xa [ 3351.759260] should_failslab+0x5/0x20 [ 3351.760066] __kmalloc_track_caller+0x79/0x370 [ 3351.761018] ? strndup_user+0x74/0xe0 [ 3351.761836] memdup_user+0x22/0xd0 [ 3351.762584] strndup_user+0x74/0xe0 [ 3351.763350] __x64_sys_mount+0x133/0x300 [ 3351.764207] ? copy_mnt_ns+0xa00/0xa00 [ 3351.765035] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3351.766158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3351.767249] do_syscall_64+0x33/0x40 [ 3351.768040] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3351.769127] RIP: 0033:0x7fc8902beb19 [ 3351.769918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3351.773791] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3351.775410] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3351.776909] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3351.778420] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 [ 3351.779919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3351.781424] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 [ 3351.782956] CPU: 1 PID: 27827 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3351.783924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3351.785056] Call Trace: [ 3351.785422] dump_stack+0x107/0x167 [ 3351.785963] should_fail.cold+0x5/0xa [ 3351.786485] should_failslab+0x5/0x20 [ 3351.787004] __kmalloc_track_caller+0x79/0x370 [ 3351.787619] ? kasprintf+0xbb/0xf0 [ 3351.788102] ? __delete_object+0xb3/0x100 [ 3351.788685] kvasprintf+0xb5/0x150 [ 3351.789167] ? bust_spinlocks+0xe0/0xe0 [ 3351.789739] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3351.790468] kasprintf+0xbb/0xf0 [ 3351.790926] ? kvasprintf_const+0x1a0/0x1a0 [ 3351.791510] ? kmem_cache_free+0x249/0x2d0 [ 3351.792093] ? p9_client_create+0xbfa/0x1230 [ 3351.792692] p9_client_create+0xc1b/0x1230 [ 3351.793269] ? p9_client_flush+0x430/0x430 [ 3351.793876] ? trace_hardirqs_on+0x5b/0x180 [ 3351.794474] ? lockdep_init_map_type+0x2c7/0x780 [ 3351.795119] ? __raw_spin_lock_init+0x36/0x110 [ 3351.795753] v9fs_session_init+0x1dd/0x1680 [ 3351.796343] ? lock_release+0x680/0x680 [ 3351.796889] ? kmem_cache_alloc_trace+0x151/0x320 [ 3351.797567] ? v9fs_show_options+0x690/0x690 [ 3351.798185] ? trace_hardirqs_on+0x5b/0x180 [ 3351.798781] ? kasan_unpoison_shadow+0x33/0x50 [ 3351.799402] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3351.800092] v9fs_mount+0x79/0x8f0 [ 3351.800583] ? v9fs_write_inode+0x60/0x60 [ 3351.801145] legacy_get_tree+0x105/0x220 [ 3351.801730] vfs_get_tree+0x8e/0x300 [ 3351.802247] path_mount+0x1490/0x21e0 [ 3351.802778] ? strncpy_from_user+0x9e/0x470 [ 3351.803366] ? finish_automount+0xa90/0xa90 [ 3351.803951] ? getname_flags.part.0+0x1dd/0x4f0 [ 3351.804583] ? _copy_from_user+0xfb/0x1b0 [ 3351.805149] __x64_sys_mount+0x282/0x300 [ 3351.805741] ? copy_mnt_ns+0xa00/0xa00 [ 3351.806271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3351.806999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3351.807710] do_syscall_64+0x33/0x40 [ 3351.808225] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3351.808923] RIP: 0033:0x7f3826f8db19 [ 3351.809432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3351.811958] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3351.813013] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3351.814003] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3351.814975] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3351.815938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3351.816917] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:10:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x9}]}) 13:10:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 50) 13:10:06 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:10:06 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{0x0, 0x0, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:10:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151c6, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 3352.033958] FAULT_INJECTION: forcing a failure. [ 3352.033958] name failslab, interval 1, probability 0, space 0, times 0 [ 3352.037188] CPU: 0 PID: 28135 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3352.038643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 13:10:06 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$FITHAW(r0, 0xc0045878) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000015c0)={'erspan0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x80, 0x40, 0x3, 0xfffffff5, {{0x15, 0x4, 0x0, 0x1, 0x54, 0x65, 0x0, 0x40, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @multicast1, {[@cipso={0x86, 0x3f, 0x1, [{0x7, 0x11, "d0d5ac1de7bb5d660152f11e0d58cc"}, {0x7, 0x0, "02a3"}, {0x7, 0x12, "9ce3d9ca52b67a6c9c51e2061eec553b"}, {0x2, 0x12, "cdef8af09b619883b6517b05da01345f"}, {0x5, 0x0, "a812d220e9c83e"}, {0x2, 0x0, "e1090f9ac3e46a3fb9a11317dc2a33"}, {0x5, 0x0, "0a455aca1fafd6"}]}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000001740)={&(0x7f0000001440), 0xc, &(0x7f0000001700)={&(0x7f0000001600)={0xdc, 0x13, 0x10, 0x70bd2b, 0x25dfdbfe, {0x5, 0x9, 0x1, 0x3f, {0x4e20, 0x4e20, [0x800000, 0x9, 0x1, 0xf8000000], [0xb06, 0x3, 0x5, 0x4], r3, [0x1, 0x9]}, 0x30, 0xb7e}, [@INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "cc13a57268200d39bc879f2b75e1455e8303a44fdd8f74e44fcc1d1950f259a480e2d8828c60beef5264742c3ff61f79fffe49ceffe6633af1254b2652ab2442f9fdf347e96d5465b8b4cef8c5f22b5a4f3cec0ffaf5b587ff9697c402c91ecce9d310e0201d774894c54bd0b2b01ad226117979e671a3d40657121b435ceb3cecb2ae93d9589394d20b"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="0f23c463120aedd409d22cbdb2e8b457a7d05e05b2c1575e56ca6e6b5bca272a9de92593512f9a02377eb12792bb5d7002d3ab0192ddd54783771da30d94f1afd87a1afcc008799b9621984b79828fcc139451e13c65e55fcbe9e68e3c5a9a951ed9826678150821ab0fd41883b9774b4280ec11d31db4984dd583531547837b00f4e517d3ee2928e95dad1bae84b0f6ab16bb37327732ef1b4d3a781b1e5125bd2ad015d77d05c1a698d0bbc84d9227f3dd1fbf73a7b66ab83c0450e0aec18f424a8efe8d23de592315e7da4c1a7d04893bc983d848d5447d0049", 0xdb}, {&(0x7f00000001c0)="558a07c54023db09ac8a1b80727cf803e919512fa97c3026fd4729290ecfff007173cb891fb7cd065e09141897512be93cd01b0f5ec449223282179c410a50c203f2562006ee05c1a6f1558d13f8cb62171a9140afdd1ea4ab7a348e7be3c31887be9166762b5a9a04903ff6cefd038173fd74b54df26da062c2c51ec0dab5", 0x7f, 0x1}], 0x1b82803, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d5461696c5c302c6e6e6f6e756dba53be2e3d312c00"]) copy_file_range(r5, 0x0, r4, 0x0, 0x0, 0x0) [ 3352.040386] Call Trace: [ 3352.041068] dump_stack+0x107/0x167 [ 3352.041852] should_fail.cold+0x5/0xa [ 3352.042656] should_failslab+0x5/0x20 [ 3352.043460] __kmalloc_track_caller+0x79/0x370 [ 3352.044413] ? kstrdup_const+0x53/0x80 [ 3352.045233] ? kasprintf+0xbb/0xf0 [ 3352.045987] kstrdup+0x36/0x70 [ 3352.046666] kstrdup_const+0x53/0x80 [ 3352.047459] kmem_cache_create_usercopy+0x12f/0x2f0 [ 3352.048517] p9_client_create+0xc6a/0x1230 [ 3352.049412] ? p9_client_flush+0x430/0x430 [ 3352.050309] ? trace_hardirqs_on+0x5b/0x180 [ 3352.051223] ? lockdep_init_map_type+0x2c7/0x780 [ 3352.052215] ? __raw_spin_lock_init+0x36/0x110 [ 3352.053189] v9fs_session_init+0x1dd/0x1680 [ 3352.054113] ? lock_release+0x680/0x680 [ 3352.054966] ? kmem_cache_alloc_trace+0x151/0x320 [ 3352.055981] ? v9fs_show_options+0x690/0x690 [ 3352.056915] ? trace_hardirqs_on+0x5b/0x180 [ 3352.057837] ? kasan_unpoison_shadow+0x33/0x50 [ 3352.058800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3352.059875] v9fs_mount+0x79/0x8f0 [ 3352.060630] ? v9fs_write_inode+0x60/0x60 [ 3352.061501] legacy_get_tree+0x105/0x220 [ 3352.062371] vfs_get_tree+0x8e/0x300 [ 3352.063156] path_mount+0x1490/0x21e0 [ 3352.063972] ? strncpy_from_user+0x9e/0x470 [ 3352.064882] ? finish_automount+0xa90/0xa90 [ 3352.065803] ? getname_flags.part.0+0x1dd/0x4f0 [ 3352.066785] ? _copy_from_user+0xfb/0x1b0 [ 3352.067676] __x64_sys_mount+0x282/0x300 [ 3352.067720] ? copy_mnt_ns+0xa00/0xa00 [ 3352.067743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3352.067764] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3352.067786] do_syscall_64+0x33/0x40 [ 3352.067806] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3352.067819] RIP: 0033:0x7f3826f8db19 [ 3352.067836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3352.067846] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3352.067867] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3352.067878] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3352.067888] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3352.067899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3352.067910] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3352.068086] kmem_cache_create(9p-fcall-cache-1373) failed with error -12 [ 3352.068102] CPU: 0 PID: 28135 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3352.068111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3352.068115] Call Trace: [ 3352.068133] dump_stack+0x107/0x167 [ 3352.068157] kmem_cache_create_usercopy.cold+0x17/0x65 [ 3352.068186] p9_client_create+0xc6a/0x1230 [ 3352.068211] ? p9_client_flush+0x430/0x430 [ 3352.068229] ? trace_hardirqs_on+0x5b/0x180 [ 3352.068249] ? lockdep_init_map_type+0x2c7/0x780 [ 3352.068269] ? __raw_spin_lock_init+0x36/0x110 [ 3352.068292] v9fs_session_init+0x1dd/0x1680 [ 3352.068312] ? lock_release+0x680/0x680 [ 3352.068338] ? kmem_cache_alloc_trace+0x151/0x320 [ 3352.068356] ? v9fs_show_options+0x690/0x690 [ 3352.068382] ? trace_hardirqs_on+0x5b/0x180 [ 3352.068400] ? kasan_unpoison_shadow+0x33/0x50 [ 3352.068417] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3352.068436] v9fs_mount+0x79/0x8f0 [ 3352.068454] ? v9fs_write_inode+0x60/0x60 [ 3352.068469] legacy_get_tree+0x105/0x220 [ 3352.068489] vfs_get_tree+0x8e/0x300 [ 3352.068506] path_mount+0x1490/0x21e0 [ 3352.068529] ? strncpy_from_user+0x9e/0x470 [ 3352.068555] ? finish_automount+0xa90/0xa90 [ 3352.111440] ? getname_flags.part.0+0x1dd/0x4f0 [ 3352.112420] ? _copy_from_user+0xfb/0x1b0 [ 3352.113303] __x64_sys_mount+0x282/0x300 [ 3352.114165] ? copy_mnt_ns+0xa00/0xa00 [ 3352.114996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3352.116098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3352.117182] do_syscall_64+0x33/0x40 [ 3352.117979] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3352.119057] RIP: 0033:0x7f3826f8db19 [ 3352.119840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3352.123743] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3352.125339] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3352.126853] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3352.128336] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3352.129829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:10:06 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) syz_open_dev$vcsn(&(0x7f0000000000), 0x23, 0x2000) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000000c0)=0x8) preadv(r1, &(0x7f0000000580), 0x0, 0x8, 0xfffffffd) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xfffffef3) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0xfffffd4f) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000100)={0x4, 0x1, 0x40}) 13:10:06 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 2) [ 3352.129987] FAULT_INJECTION: forcing a failure. [ 3352.129987] name failslab, interval 1, probability 0, space 0, times 0 [ 3352.131331] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3352.135436] CPU: 1 PID: 28236 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3352.136346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3352.137428] Call Trace: [ 3352.137804] dump_stack+0x107/0x167 [ 3352.138302] should_fail.cold+0x5/0xa [ 3352.138822] ? create_object.isra.0+0x3a/0xa30 [ 3352.139415] should_failslab+0x5/0x20 [ 3352.139908] kmem_cache_alloc+0x5b/0x310 [ 3352.140434] create_object.isra.0+0x3a/0xa30 [ 3352.141014] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3352.141711] __kmalloc_track_caller+0x177/0x370 [ 3352.142321] ? strndup_user+0x74/0xe0 [ 3352.142821] memdup_user+0x22/0xd0 [ 3352.143297] strndup_user+0x74/0xe0 [ 3352.143766] __x64_sys_mount+0x133/0x300 [ 3352.144305] ? copy_mnt_ns+0xa00/0xa00 [ 3352.144815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3352.145491] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3352.146183] do_syscall_64+0x33/0x40 [ 3352.146672] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3352.147335] RIP: 0033:0x7fc8902beb19 [ 3352.147816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3352.150231] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3352.151214] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3352.152137] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3352.153073] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 [ 3352.154038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3352.154957] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 13:10:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0xa0}]}) 13:10:06 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfdef) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f00000001c0)={0x0, 0x4}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syncfs(r4) write$tcp_congestion(r1, 0x0, 0x0) 13:10:06 executing program 3: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x6020c1, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x16c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x52}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d714fb6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9b83}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}]}]}, 0x16c}}, 0x20000000) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r1, 0x0, 0x0) 13:10:06 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="3317000000cf00000000000000a73ec2e4e8c7de938edddd856bad476f442eacb198cb2cc7af8cd79f215706c4eebe2dfa4708fc9d1a441c4049da897402cd28a892bbb66226325a16daab2482709455fb10735e2162f3263067851b17a7b1751fba663f08632f2c84e5d78d9ce7d61c65093b74810999782b628fe7da4ea23bb39573c55fee8a148473454a8e7eab2ecd3856b93eb2dc3c457caca74f0132"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) r1 = signalfd4(r0, &(0x7f00000000c0)={[0x7]}, 0x8, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000680)=0xe8) syz_io_uring_setup(0x506b, &(0x7f0000000200)={0x0, 0x622e, 0x4, 0x3, 0x16c}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000380)) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x4e24, 0xffff, 0x4e21, 0x0, 0x2, 0x40, 0x0, 0x84, r4}, {0x7ff, 0x1, 0x1, 0x20, 0x8000, 0x400, 0x8000, 0x9}, {0x1, 0x8, 0xc024, 0x2}, 0x2, 0x6e6bb9, 0x2, 0x1, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffc, 0x0, 0x2, 0x9, 0x1010001, 0x4, 0x99e4}}, 0xe8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6_vti0\x00', r4, 0x4, 0xbd, 0xff, 0xfffffffc, 0x8, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x700, 0x10, 0x80000000, 0x9}}) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r3, r7, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766642303388c4fd0f5ebfbf6f42ee0", @ANYRESHEX=r0, @ANYBLOB="2c616e616d653d2afa28282a2c6163636573733d636c69656e742c667363616368652c756e616d653d2c7569643c", @ANYRESDEC=r2, @ANYBLOB=',obj_role=\\-.)\\+,seclabel,permit_directio,measure,\x00']) write$tcp_congestion(0xffffffffffffffff, 0x0, 0xeffd) 13:10:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:10:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x2}]}) 13:10:06 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140), 0x0, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:10:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 51) 13:10:22 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 3) 13:10:22 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r0, &(0x7f0000000100)="4b3bf93e0a0f24b05937eed0b3894d7b9bb609038f35d089f7cb1f86d00e0ca24a73097f89efca06e12647bc93347d309ac9e58e820f39ee6be683928d9c72f0748cbbdb1362c8856101fded880e7ff708e49f9e7a", 0x55) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x7fffffff, 0xbca) write$tcp_congestion(r0, 0x0, 0x0) 13:10:22 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) 13:10:22 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140), 0x0, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:10:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151c7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:10:22 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x9}]}) 13:10:22 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x26) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) r2 = perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000640), 0x6e, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/153, 0x99}, {0x0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/96, 0x60}, {&(0x7f0000001840)=""/39, 0x27}, {&(0x7f0000001880)=""/123, 0x7b}], 0x6, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x201) perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x7, 0x7, 0x48, 0x0, 0x1, 0x900a0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0xaba}, 0xc000, 0x4, 0x1, 0x6, 0x6, 0xfffffff7, 0x401, 0x0, 0x7, 0x0, 0x3}, r3, 0x10, r2, 0xb) r4 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="d0598dc15794712f992b84c7dd96ba0a71cd1cdca5848ffec483315599fe85f30afc0688a1961461aadca1ba736f8ebdd14e0f8b2a998919140bdcdaa1184eed812b4294246a7af7701439d25a1b17e30dd4db1e8db4349e7e1a83ca9f54af86959f6898e275cb58a5299e7b3e2a9b0bb61f097787c329629a2f47094dcdd58cbd47f819d63e1083df0c6a98dfbf130f93b64541277b0372d12d63a99ee637f8fd85", 0xa2, 0x5}, {&(0x7f0000000240)="169ebb29aae55cc827095024ffed7b7f636655736a9ecca7dfd573fd0eeba5dbab903183c1aa3de95d6c8143afd89fa878470f93e4f11fb00afe3c7a4a4a310635c4000ed8129a6700f27b139a66b6ad165da79619260405be767b8f7d7a51647c47225bfcbead5e2056a66d4499fa23c5396350f50762656f8dd844887a0921b51f947f7cf0099a6a219f6303e8dda8636c75e22160fc2491ce65e7b28bca56187b54554a47dd513f8186c92d58ea94632a8c8a5af8bd034f87a8fcb44b29bd21984ae35e417e418e03769bdb97e1f761c043a583ef249b6bac462bc401ea053b", 0xe1, 0xdaf}, {&(0x7f0000000340)="42a7a2a46c8959f8028136ae11928d33ef4db751ec2a4b1f31314f92280e10f47f7c97ef9c9066a27810a5f1049109aa7f1065ce917068f02fb10b5d5be0fcae4b2432f44f1ef0be37399c9552e72239428ca747cf9266bb20ef16e07814b96cc32c95744a273d5a16c7378b343171f06112f6f6ca4a4099", 0x78}], 0x80, &(0x7f0000000440)={[{@nr_inodes={'nr_inodes', 0x3d, [0x74]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x34, 0x36, 0x39]}}, {@huge_always}], [{@smackfshat={'smackfshat', 0x3d, '-^'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@uid_eq}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfstransmute}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@context={'context', 0x3d, 'root'}}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x1ff, 0x2}) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 13:10:22 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0xa0}]}) [ 3368.536405] FAULT_INJECTION: forcing a failure. [ 3368.536405] name failslab, interval 1, probability 0, space 0, times 0 [ 3368.539063] CPU: 0 PID: 28882 Comm: syz-executor.4 Not tainted 5.10.247 #1 13:10:22 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140), 0x0, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 3368.540605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3368.542619] Call Trace: [ 3368.543220] dump_stack+0x107/0x167 [ 3368.544043] should_fail.cold+0x5/0xa [ 3368.544896] ? create_object.isra.0+0x3a/0xa30 [ 3368.545933] should_failslab+0x5/0x20 [ 3368.546788] kmem_cache_alloc+0x5b/0x310 [ 3368.547698] ? lock_acquire+0x197/0x470 [ 3368.548590] create_object.isra.0+0x3a/0xa30 [ 3368.549578] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3368.550727] __kmalloc_track_caller+0x177/0x370 [ 3368.551756] ? kstrdup_const+0x53/0x80 [ 3368.552619] ? kasprintf+0xbb/0xf0 [ 3368.553415] kstrdup+0x36/0x70 [ 3368.554135] kstrdup_const+0x53/0x80 [ 3368.554959] kmem_cache_create_usercopy+0x12f/0x2f0 [ 3368.556071] p9_client_create+0xc6a/0x1230 [ 3368.557027] ? p9_client_flush+0x430/0x430 [ 3368.557988] ? trace_hardirqs_on+0x5b/0x180 [ 3368.558968] ? lockdep_init_map_type+0x2c7/0x780 [ 3368.560038] ? __raw_spin_lock_init+0x36/0x110 [ 3368.561073] v9fs_session_init+0x1dd/0x1680 [ 3368.562050] ? lock_release+0x680/0x680 [ 3368.562961] ? kmem_cache_alloc_trace+0x151/0x320 [ 3368.564039] ? v9fs_show_options+0x690/0x690 [ 3368.565032] ? trace_hardirqs_on+0x5b/0x180 [ 3368.566013] ? kasan_unpoison_shadow+0x33/0x50 [ 3368.567037] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3368.568181] v9fs_mount+0x79/0x8f0 [ 3368.568979] ? v9fs_write_inode+0x60/0x60 [ 3368.569915] legacy_get_tree+0x105/0x220 [ 3368.570845] vfs_get_tree+0x8e/0x300 [ 3368.571688] path_mount+0x1490/0x21e0 [ 3368.572560] ? strncpy_from_user+0x9e/0x470 [ 3368.573532] ? finish_automount+0xa90/0xa90 [ 3368.574514] ? getname_flags.part.0+0x1dd/0x4f0 [ 3368.575570] ? _copy_from_user+0xfb/0x1b0 [ 3368.576509] __x64_sys_mount+0x282/0x300 [ 3368.577422] ? copy_mnt_ns+0xa00/0xa00 [ 3368.578301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3368.579469] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3368.580616] do_syscall_64+0x33/0x40 [ 3368.581445] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3368.582598] RIP: 0033:0x7f3826f8db19 [ 3368.583428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3368.587527] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3368.589204] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3368.590795] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3368.592387] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3368.593981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3368.595569] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:10:22 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x900}]}) [ 3368.608885] FAULT_INJECTION: forcing a failure. [ 3368.608885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3368.610252] CPU: 1 PID: 28886 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3368.611018] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3368.611946] Call Trace: [ 3368.612249] dump_stack+0x107/0x167 [ 3368.612661] should_fail.cold+0x5/0xa [ 3368.613093] _copy_from_user+0x2e/0x1b0 [ 3368.613541] memdup_user+0x65/0xd0 [ 3368.613945] strndup_user+0x74/0xe0 [ 3368.614358] __x64_sys_mount+0x133/0x300 [ 3368.614812] ? copy_mnt_ns+0xa00/0xa00 [ 3368.615257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3368.615843] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3368.616423] do_syscall_64+0x33/0x40 [ 3368.616840] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3368.617418] RIP: 0033:0x7fc8902beb19 [ 3368.617848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3368.619913] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3368.620767] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3368.621571] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3368.622376] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 [ 3368.623173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3368.623975] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 13:10:22 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x2000}]}) 13:10:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151c8, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:10:22 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 4) [ 3368.747724] FAULT_INJECTION: forcing a failure. [ 3368.747724] name failslab, interval 1, probability 0, space 0, times 0 [ 3368.749056] CPU: 1 PID: 29217 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3368.749838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3368.750758] Call Trace: [ 3368.751069] dump_stack+0x107/0x167 [ 3368.751481] should_fail.cold+0x5/0xa [ 3368.751915] ? copy_mount_options+0x55/0x180 [ 3368.752407] should_failslab+0x5/0x20 [ 3368.752834] kmem_cache_alloc_trace+0x55/0x320 [ 3368.753349] ? _copy_from_user+0xfb/0x1b0 [ 3368.753826] copy_mount_options+0x55/0x180 [ 3368.754301] __x64_sys_mount+0x1a8/0x300 [ 3368.754758] ? copy_mnt_ns+0xa00/0xa00 [ 3368.755201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3368.755794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3368.756377] do_syscall_64+0x33/0x40 [ 3368.756796] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3368.757373] RIP: 0033:0x7fc8902beb19 [ 3368.757797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3368.759863] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3368.760733] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3368.761536] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3368.762346] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 [ 3368.763153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3368.763954] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 13:10:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151c9, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:10:37 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000000c0)='reno\x00', 0x5) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2, 0x3}}, './file0\x00'}) write$tcp_congestion(r1, &(0x7f0000000080)='lp\x00', 0x3) write$tcp_congestion(r0, 0x0, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='illinois\x00', 0x9) 13:10:37 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 5) 13:10:37 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='hybla\x00', 0x6) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000000)) write$tcp_congestion(r0, 0x0, 0xeffd) 13:10:37 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c84bf5c386848ec350c27b5ef2c49f11e93b908fa74c682da5127a484ded15dacd8e04e36b3207295f6450d7a294918b4ecacc8", 0x68, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:10:37 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = eventfd(0xfff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x8, 0x0, 0x1, 0x3f, 0x6, @broadcast}, 0x14) r4 = socket(0x29, 0x80000, 0x50c80cab) ppoll(&(0x7f0000000080)=[{r1, 0x2}, {r0, 0x1012}, {r0}, {r2, 0x80}, {r0, 0x40}, {r4, 0x80}, {0xffffffffffffffff, 0x410}, {r0, 0x103}, {r0, 0x4020}, {r0}], 0xa, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000100)={[0x9]}, 0x8) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 13:10:37 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x4000}]}) 13:10:37 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 52) [ 3383.720139] FAULT_INJECTION: forcing a failure. [ 3383.720139] name failslab, interval 1, probability 0, space 0, times 0 [ 3383.722589] CPU: 0 PID: 29320 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3383.724058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3383.725810] Call Trace: [ 3383.726387] dump_stack+0x107/0x167 [ 3383.727168] should_fail.cold+0x5/0xa [ 3383.727983] ? create_object.isra.0+0x3a/0xa30 [ 3383.728949] should_failslab+0x5/0x20 [ 3383.729747] kmem_cache_alloc+0x5b/0x310 [ 3383.730623] create_object.isra.0+0x3a/0xa30 [ 3383.731562] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3383.732638] kmem_cache_alloc_trace+0x151/0x320 [ 3383.733622] ? _copy_from_user+0xfb/0x1b0 [ 3383.734508] copy_mount_options+0x55/0x180 [ 3383.735408] __x64_sys_mount+0x1a8/0x300 [ 3383.736268] ? copy_mnt_ns+0xa00/0xa00 [ 3383.737097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3383.738211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3383.739295] do_syscall_64+0x33/0x40 [ 3383.740090] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3383.741180] RIP: 0033:0x7fc8902beb19 [ 3383.741965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3383.745851] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3383.747474] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3383.748970] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3383.750489] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 13:10:38 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0xa000}]}) [ 3383.751999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3383.753673] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 [ 3383.769400] FAULT_INJECTION: forcing a failure. [ 3383.769400] name failslab, interval 1, probability 0, space 0, times 0 [ 3383.771851] CPU: 1 PID: 29348 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3383.773315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3383.775066] Call Trace: [ 3383.775624] dump_stack+0x107/0x167 [ 3383.776391] should_fail.cold+0x5/0xa [ 3383.777199] ? create_object.isra.0+0x3a/0xa30 [ 3383.778275] should_failslab+0x5/0x20 [ 3383.778899] kmem_cache_alloc+0x5b/0x310 [ 3383.779561] create_object.isra.0+0x3a/0xa30 [ 3383.780265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3383.781082] kmem_cache_alloc+0x159/0x310 [ 3383.781746] kmem_cache_create_usercopy+0x190/0x2f0 [ 3383.782542] p9_client_create+0xc6a/0x1230 [ 3383.783211] ? p9_client_flush+0x430/0x430 [ 3383.783879] ? trace_hardirqs_on+0x5b/0x180 [ 3383.784576] ? lockdep_init_map_type+0x2c7/0x780 [ 3383.785335] ? __raw_spin_lock_init+0x36/0x110 [ 3383.786081] v9fs_session_init+0x1dd/0x1680 [ 3383.786651] ? lock_release+0x680/0x680 [ 3383.787134] ? kmem_cache_alloc_trace+0x151/0x320 [ 3383.787708] ? v9fs_show_options+0x690/0x690 [ 3383.788238] ? trace_hardirqs_on+0x5b/0x180 [ 3383.788754] ? kasan_unpoison_shadow+0x33/0x50 [ 3383.789299] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3383.789883] v9fs_mount+0x79/0x8f0 [ 3383.790308] ? v9fs_write_inode+0x60/0x60 [ 3383.790802] legacy_get_tree+0x105/0x220 [ 3383.791293] vfs_get_tree+0x8e/0x300 [ 3383.791716] path_mount+0x1490/0x21e0 [ 3383.792174] ? strncpy_from_user+0x9e/0x470 [ 3383.792688] ? finish_automount+0xa90/0xa90 [ 3383.793208] ? getname_flags.part.0+0x1dd/0x4f0 [ 3383.793770] ? _copy_from_user+0xfb/0x1b0 [ 3383.794276] __x64_sys_mount+0x282/0x300 [ 3383.794758] ? copy_mnt_ns+0xa00/0xa00 [ 3383.795214] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3383.795839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3383.796458] do_syscall_64+0x33/0x40 [ 3383.796881] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3383.797492] RIP: 0033:0x7f3826f8db19 [ 3383.797946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3383.800130] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3383.801033] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3383.801876] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3383.802726] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3383.803533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3383.804378] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3398.840954] FAULT_INJECTION: forcing a failure. [ 3398.840954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3398.843521] CPU: 1 PID: 29745 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3398.844971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3398.846754] Call Trace: [ 3398.847315] dump_stack+0x107/0x167 [ 3398.848332] should_fail.cold+0x5/0xa [ 3398.849321] _copy_from_user+0x2e/0x1b0 [ 3398.850205] copy_mount_options+0x76/0x180 [ 3398.851094] __x64_sys_mount+0x1a8/0x300 [ 3398.851951] ? copy_mnt_ns+0xa00/0xa00 13:10:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 53) 13:10:53 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="14", 0x1, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:10:53 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 6) 13:10:53 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/204, 0xcc}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000200)=""/23, 0x17}], 0x4, 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xc) 13:10:53 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x453, 0x4, 0x70bd25, 0x25dfdbfb, "af03560d6d86d66bc9484096c8116b8ea1a397f7f8372624096d5ba0dc6e1c826b7086f33c40d50d98e705121524c70ed386cad5a6", [""]}, 0x48}, 0x1, 0x0, 0x0, 0x24000014}, 0x48000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="33180000000000000724bd2a07ffef99d34bba28faa9a15826defeff739f1ad2832e61310c4bd2ffd7d84091f3ef9e21659896299a2020a5e179c0726170801895b9585c4c1987f344ea77b961007bbfa6ee99f5328636fdd4f0d91af2083ce552185a57ce47dc7c0fbee3f0b425bb5a918d986c5d8c824b2a1400000000375e5eca1369b14f591ba05d5270037fde343d3f57c34d9f4ad9ddd3"], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e20, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb05}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="025fed113f2a7ec24e1a66f6e8463b77d46260ac7b2382", 0x17}], 0x1}, 0x8000) lseek(0xffffffffffffffff, 0x3, 0x1) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x80, @ipv4={'\x00', '\xff\xff', @loopback}, 0x81}, 0x1c) [ 3398.852957] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3398.854274] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3398.855510] do_syscall_64+0x33/0x40 [ 3398.856296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3398.857381] RIP: 0033:0x7fc8902beb19 [ 3398.858174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3398.862087] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 sendmmsg$inet6(r1, &(0x7f0000002080)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x95}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000540)="12a429c1cf753a5e2914260bdb2bf3edfcea89f04c21599449ce4b2257353cbe7445578ffb5fcdcc733cb8d7c944c264c829f63fa999f1a6134651e716", 0x3d}, {&(0x7f0000000580)="534f766e9a3da82064ca09468d7ae326c65e33d39a8c598f8982f758fbad5527f7b0de40fb98ea605302b720ed948b1ab69edcd0f2d0ae68ce7381c9de94fc2a0048d3eeb21b7ad275e8a7d0c011abba4c7eee0f2ec46a634736fbaad0570bfbf91584eff7b667f857f997e7d61150bf8d0775c4b2b8d8d41e4c570247b5eae63c84eca639ccd6f17493dd3b62039bc645000d34ed68c60180e237fa8a8372a8bb74876c56407f3079d083386c", 0xad}, {&(0x7f0000000640)="9d3565aa94519300912fe91a3bea6163a0671e3b8978362864cb224ac1f895cfae98976501a582d3462e263b30a239c773c6c0302b6ca732426f83c0ed73597946ef98aa52822561b442", 0x4a}, {&(0x7f00000006c0)="bbeef39e72fd14b2bbdaed7888bc5332d02d0c57f5a89d4c2d7f1bbf7e9cbf579c2233d7ca20236f04ce29eb120665ba2cbaa1faf788b6808d8bdaff756850b7162eac3b5b7f569064321fe8e7083a213be116b2f38dbd65b1177b4e348f966ab64331f04a53dfe948b7739f2c881304272652d8752442d3e76a8db4b18a2580426fdc42d83189b2a806e90b7dab2115b0663a3f57254af9aacf56d0a9d01dfc26503b101edee178306091ad0ac662d2d4dc8bda1bf8855f49dafd5333573d0c08b032cd03eb1e933eaad81d9085605731fcee61fc1bdfa35c55544a7b5e84964d1333dc861dc3238635a09c75cb", 0xee}, {&(0x7f00000007c0)="5c18622c55e4f3864756f18d881a10880e38d182fd13d289cb13b4066c507fb1b7bd1ae1c44f26d1b2496fe6da9865970d3fb080b67713878ba82fe68a77eb4b891e1e60ba6d44c89917f836345d9bf6eb2ee6518783164d59ff16b84d31947a7bf7d5319b28ef810a46653acf1f3f33e93465296227fb0dd17c45577a1c104ddc0a90241ded6b43d740f5968584c1594f1d03b6b61fdbbe47be906bd278b90c5c257a1fa8235a60", 0xa8}, {&(0x7f0000000880)="8d468ab511db67821245d866747d443f777a912fa8e09cbafe2e0ca6e393a7c8a8b497baddcfd6a05f0aef3cc74132f6eb1b2d4f5dc73e3942c89ed76c12c9247592cd16421838734ea355ab7a4dc9e728b6c18732135833e9bb0b2ce9", 0x5d}, {&(0x7f0000000900)="d37055dd1d51178de998ac2472b6c12675c6f52095d3ac6d362d926466895c439d20a83ae0145725391c4ec85df9161492309b91fa67bbd847e5b81d965bd2d75622bb1a2513fde5de91e5d9ebfadb877bf721d1f470311e7ffbd9063baf0d42e8633cec826e1969d3464ee3ca6e83ce228d02ef6d3f40290dc6af547b2891fbe217d2", 0x83}], 0x7}}, {{&(0x7f0000000a40)={0xa, 0x4e20, 0xcd99, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffff8}, 0x1c, &(0x7f0000001d80)=[{&(0x7f0000000a80)="8a8fe8b89880f97539878d80f9bd66c868c596278d5a0fd0aa897eefcb78ce0de44772d9d1e70ddd17545e5633d451bcb8bfe130a84cc5a2ded6a654f5e481109b70be3909176acc7a46de561e47cf96a87e7d7c579098989c007ad11e73b845b3e7d86e237611cb343b8c7b34bf49364229b9a92c33856ff8f5ff700af47eb2d2fdd0c7a0af5955c1d00f3ea7edc9fe78da37cf75544019c0aa1db143917216c7e8a42d4342f50b093e5237f748a3b0cd63773d75293ac2846c20", 0xbb}, {&(0x7f0000000b40)="0f9508aae02c41b41c92ce63d14f6414ae39e3eda44089fa2e236d1f9613de69a9baf399fdadefc0df85da37e0245777855a021e43519e158f1e8c548b5264fa865997369daae19b9c0f84840665affe812950050adf8eca1c2265ba91d3e5348c85079cafcb8db6bd", 0x69}, {&(0x7f0000000bc0)="5bfa3522f2ea1e32237d6af604fb495b2c9e4cca59d67d110eff345f02e47d9c1e65e561b7f9caa7cde4b428c08d26db57b3b3ab8e594cba59e4ff6ad571ff117dbe1096ed49745bc7752821a51e7217ce3443dd74e0f120f98f4a8b3e74abbf363167f60fab022fc50f00e378f82c2de3d9631c7f9615bbf26f42c3f796c43af8e6986b48339efafcfc612dfd0037f2c608bacbb8f98debb58eca5fc2e6e7f723e268612f05b59d7d8c9a77e1aff734ed2e9201345773c3", 0xb8}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="18ab167a420ee91417789bf20bd06145952c7e1e64ddd55ab883e187eeefa4c44a2b0a4976f2d36548ddf02f4f7e87adfa54a232e8868ff91f8338a951c0f2f723ceb07d514a6570698a369e18101f238bdc3af760", 0x55}, {&(0x7f0000001d00)="edb9d3ec95bbc0e48def890f180c6a", 0xf}, {&(0x7f0000001d40)="0d421c04ff4df7e75c7a7b788af2db9808ce286c33a1c5513b", 0x19}], 0x7, &(0x7f0000001e00)=[@hopopts_2292={{0x78, 0x29, 0x36, {0x6c, 0xb, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x20, {0x2, 0x6, 0x7, 0x2, [0x5, 0x85, 0x10000]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x1, 0x438e, [0x5, 0x200, 0x3, 0xfffffffffffffff9]}}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x96, 0xe, 0x0, 0x80, 0x0, [@dev={0xfe, 0x80, '\x00', 0x17}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x27}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hopopts_2292={{0xa0, 0x29, 0x36, {0x2f, 0x10, '\x00', [@generic={0x1, 0x61, "f989f8f3106a6df7a68bd212ea1d77fbbdb1b42757146151fa3fc2eb24196464ae3cdc6dc343cbb2e12cfbe027287a9831b21611d74b165260efa67cc7c15d919486edc1da160777f0e12ecec10a44c35a4d1cf4144c45677982e07c258a68045b"}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x18, {0x2, 0x4, 0x80, 0x100, [0x1, 0x80000001]}}]}}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x89, 0x9, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x1f, 0x6, [0x100, 0xfffffffffffeffff, 0x8001, 0x4, 0x4]}}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xcfa}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x40}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x248}}], 0x2, 0x20000080) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) fallocate(r3, 0x0, 0x40, 0x2) copy_file_range(r2, 0x0, r2, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@dev, @remote}, &(0x7f0000000080)=0xc) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000240)=@srh={0xdd, 0x10, 0x4, 0x8, 0x80, 0x10, 0x20, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3f}, @private0, @rand_addr=' \x01\x00', @mcast2, @private1]}, 0x88) 13:10:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151ca, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:10:53 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0xff0f}]}) 13:10:53 executing program 7: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x4e24, 0xffff, 0x4e21, 0x0, 0x2, 0x40, 0x0, 0x84}, {0x7ff, 0x1, 0x1, 0x20, 0x8000, 0x400, 0x8000, 0x9}, {0x1, 0x8, 0xc024, 0x2}, 0x2, 0x6e6bb9, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffc, 0x0, 0x2, 0x9, 0x1010001, 0x4, 0x99e4}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg2\x00', 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x4e24, 0xffff, 0x4e21, 0x0, 0x2, 0x40, 0x0, 0x84, r2}, {0x7ff, 0x1, 0x1, 0x20, 0x8000, 0x400, 0x8000, 0x9}, {0x1, 0x8, 0xc024, 0x2}, 0x2, 0x6e6bb9, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffc, 0x0, 0x2, 0x9, 0x1010001, 0x4, 0x99e4}}, 0xe8) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0x23) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x4e24, 0xffff, 0x4e21, 0x0, 0x2, 0x40, 0x0, 0x84, r4}, {0x7ff, 0x1, 0x1, 0x20, 0x8000, 0x400, 0x8000, 0x9}, {0x1, 0x8, 0xc024, 0x2}, 0x2, 0x6e6bb9, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffc, 0x0, 0x2, 0x9, 0x1010001, 0x4, 0x99e4}}, 0xe8) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0x23) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x4e24, 0xffff, 0x4e21, 0x0, 0x2, 0x40, 0x0, 0x84, r6}, {0x7ff, 0x1, 0x1, 0x20, 0x8000, 0x400, 0x8000, 0x9}, {0x1, 0x8, 0xc024, 0x2}, 0x2, 0x6e6bb9, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffc, 0x0, 0x2, 0x9, 0x1010001, 0x4, 0x99e4}}, 0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000dc0)={0x6e4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x46278262}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0xff30}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_method={{}, {}, {0x0, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1872}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x968}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @mcast_rejoin_count={{}, {}, {0x0, 0x4, 0x1f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x4008010}, 0x40) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r7, 0x0, 0xeffd) [ 3398.863688] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3398.865372] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3398.866870] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 [ 3398.868350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3398.869828] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 [ 3398.881066] FAULT_INJECTION: forcing a failure. [ 3398.881066] name failslab, interval 1, probability 0, space 0, times 0 [ 3398.884004] CPU: 1 PID: 29754 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3398.885436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3398.887161] Call Trace: [ 3398.887713] dump_stack+0x107/0x167 [ 3398.888469] should_fail.cold+0x5/0xa [ 3398.889251] ? __kmem_cache_create+0x10e/0x520 [ 3398.890216] should_failslab+0x5/0x20 [ 3398.891003] kmem_cache_alloc_node+0x55/0x330 [ 3398.891944] __kmem_cache_create+0x10e/0x520 [ 3398.892871] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3398.893897] p9_client_create+0xc6a/0x1230 [ 3398.894783] ? p9_client_flush+0x430/0x430 [ 3398.895659] ? trace_hardirqs_on+0x5b/0x180 [ 3398.896550] ? lockdep_init_map_type+0x2c7/0x780 [ 3398.897531] ? __raw_spin_lock_init+0x36/0x110 [ 3398.898527] v9fs_session_init+0x1dd/0x1680 [ 3398.899423] ? lock_release+0x680/0x680 [ 3398.900269] ? kmem_cache_alloc_trace+0x151/0x320 [ 3398.901265] ? v9fs_show_options+0x690/0x690 [ 3398.902214] ? trace_hardirqs_on+0x5b/0x180 [ 3398.903108] ? kasan_unpoison_shadow+0x33/0x50 [ 3398.904064] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3398.905118] v9fs_mount+0x79/0x8f0 [ 3398.905854] ? v9fs_write_inode+0x60/0x60 [ 3398.906741] legacy_get_tree+0x105/0x220 [ 3398.907584] vfs_get_tree+0x8e/0x300 [ 3398.908359] path_mount+0x1490/0x21e0 [ 3398.909158] ? strncpy_from_user+0x9e/0x470 [ 3398.910068] ? finish_automount+0xa90/0xa90 [ 3398.910980] ? getname_flags.part.0+0x1dd/0x4f0 [ 3398.911936] ? _copy_from_user+0xfb/0x1b0 [ 3398.912802] __x64_sys_mount+0x282/0x300 [ 3398.913644] ? copy_mnt_ns+0xa00/0xa00 [ 3398.914462] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3398.915558] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3398.916632] do_syscall_64+0x33/0x40 [ 3398.917403] entry_SYSCALL_64_after_hwframe+0x67/0xd1 13:10:53 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x200000}]}) [ 3398.918471] RIP: 0033:0x7f3826f8db19 [ 3398.919388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3398.923257] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3398.924868] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3398.926386] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3398.927889] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3398.929390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3398.930900] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3398.932540] kmem_cache_create(9p-fcall-cache-1378) failed with error -22 [ 3398.934000] CPU: 1 PID: 29754 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3398.935460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3398.937201] Call Trace: [ 3398.937753] dump_stack+0x107/0x167 [ 3398.938536] kmem_cache_create_usercopy.cold+0x17/0x65 [ 3398.939639] p9_client_create+0xc6a/0x1230 [ 3398.940527] ? p9_client_flush+0x430/0x430 [ 3398.941424] ? trace_hardirqs_on+0x5b/0x180 [ 3398.942342] ? lockdep_init_map_type+0x2c7/0x780 [ 3398.943340] ? __raw_spin_lock_init+0x36/0x110 [ 3398.944309] v9fs_session_init+0x1dd/0x1680 [ 3398.945222] ? lock_release+0x680/0x680 [ 3398.946071] ? kmem_cache_alloc_trace+0x151/0x320 [ 3398.947095] ? v9fs_show_options+0x690/0x690 [ 3398.948028] ? trace_hardirqs_on+0x5b/0x180 [ 3398.948937] ? kasan_unpoison_shadow+0x33/0x50 [ 3398.949907] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3398.950991] v9fs_mount+0x79/0x8f0 [ 3398.951739] ? v9fs_write_inode+0x60/0x60 [ 3398.952611] legacy_get_tree+0x105/0x220 [ 3398.953468] vfs_get_tree+0x8e/0x300 [ 3398.954254] path_mount+0x1490/0x21e0 [ 3398.955045] ? strncpy_from_user+0x9e/0x470 [ 3398.955957] ? finish_automount+0xa90/0xa90 [ 3398.956865] ? getname_flags.part.0+0x1dd/0x4f0 [ 3398.957837] ? _copy_from_user+0xfb/0x1b0 [ 3398.958719] __x64_sys_mount+0x282/0x300 [ 3398.959570] ? copy_mnt_ns+0xa00/0xa00 [ 3398.960396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3398.961499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3398.962598] do_syscall_64+0x33/0x40 [ 3398.963385] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3398.964447] RIP: 0033:0x7f3826f8db19 [ 3398.965228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3398.969064] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3398.970677] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3398.972174] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3398.973677] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3398.975200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3398.976708] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:10:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151cb, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:10:53 executing program 3: r0 = semget(0x2, 0x2, 0x4) semtimedop(r0, 0xfffffffffffffffd, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="e8000000f91af8cdcd16d173e3478eb7c4da29c418da058c3ff2c6870a97a4624991fb16dc33", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf252b00000008000300", @ANYRES32=r1, @ANYBLOB="0c009900050000002300000076ff940000100a020000000000000000000800120000000800050000000100001e001f00000811400000000000000001007f00190000000003e60a00000800007a002a001001b8ff61716f888bb52fa6ec9014715d738acd7f44a50a6d1128bc462d8420b5cd1df781b3be0eb48f757e9a489bc3551302eab4ec3ef6f7ed5bf075cb6c8378a4ff7d69802e0d7b4ab15866f31aa1b5dafeb603318303f4f94e84428982ae332d42959455760604004400"], 0xe8}, 0x1, 0x0, 0x0, 0x20000880}, 0x24004081) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syncfs(r3) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7c}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x80000001, 0x19}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x100) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), r4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x312, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) write$tcp_congestion(r2, 0x0, 0x0) 13:10:53 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x1000000}]}) 13:10:53 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 7) [ 3399.159791] FAULT_INJECTION: forcing a failure. [ 3399.159791] name failslab, interval 1, probability 0, space 0, times 0 [ 3399.162524] CPU: 0 PID: 30308 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3399.163977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3399.165717] Call Trace: [ 3399.166281] dump_stack+0x107/0x167 [ 3399.167054] should_fail.cold+0x5/0xa [ 3399.167919] ? getname_flags.part.0+0x50/0x4f0 [ 3399.168932] should_failslab+0x5/0x20 [ 3399.169732] kmem_cache_alloc+0x5b/0x310 [ 3399.170610] getname_flags.part.0+0x50/0x4f0 [ 3399.171538] ? _copy_from_user+0xfb/0x1b0 [ 3399.172412] user_path_at_empty+0xa1/0x100 [ 3399.173310] __x64_sys_mount+0x1e9/0x300 [ 3399.174181] ? copy_mnt_ns+0xa00/0xa00 [ 3399.175007] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3399.176110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3399.177203] do_syscall_64+0x33/0x40 [ 3399.177992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3399.179071] RIP: 0033:0x7fc8902beb19 [ 3399.179851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3399.183716] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3399.185326] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3399.186824] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3399.188320] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 [ 3399.189816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3399.191319] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 13:10:53 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="14", 0x1, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:10:53 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 13:10:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 54) 13:10:53 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 8) 13:10:53 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="14", 0x1, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 3399.376513] FAULT_INJECTION: forcing a failure. [ 3399.376513] name failslab, interval 1, probability 0, space 0, times 0 [ 3399.378987] CPU: 1 PID: 30523 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3399.380438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3399.382196] Call Trace: [ 3399.382759] dump_stack+0x107/0x167 [ 3399.383530] should_fail.cold+0x5/0xa [ 3399.384329] ? create_object.isra.0+0x3a/0xa30 [ 3399.385286] should_failslab+0x5/0x20 [ 3399.386091] kmem_cache_alloc+0x5b/0x310 [ 3399.386953] create_object.isra.0+0x3a/0xa30 [ 3399.387874] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3399.388942] kmem_cache_alloc+0x159/0x310 [ 3399.389816] getname_flags.part.0+0x50/0x4f0 [ 3399.390747] ? _copy_from_user+0xfb/0x1b0 [ 3399.391627] user_path_at_empty+0xa1/0x100 [ 3399.392512] __x64_sys_mount+0x1e9/0x300 [ 3399.393367] ? copy_mnt_ns+0xa00/0xa00 [ 3399.394196] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3399.395296] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3399.396375] do_syscall_64+0x33/0x40 [ 3399.397154] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3399.398242] RIP: 0033:0x7fc8902beb19 [ 3399.399022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3399.402902] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3399.404498] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3399.406001] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3399.407512] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 [ 3399.409017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3399.410540] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 [ 3399.424439] FAULT_INJECTION: forcing a failure. [ 3399.424439] name failslab, interval 1, probability 0, space 0, times 0 [ 3399.427016] CPU: 1 PID: 30551 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3399.428474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3399.430213] Call Trace: [ 3399.430767] dump_stack+0x107/0x167 [ 3399.431537] should_fail.cold+0x5/0xa [ 3399.432342] ? create_object.isra.0+0x3a/0xa30 [ 3399.433292] should_failslab+0x5/0x20 [ 3399.434095] kmem_cache_alloc+0x5b/0x310 [ 3399.434953] create_object.isra.0+0x3a/0xa30 [ 3399.435867] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3399.436938] kmem_cache_alloc_node+0x169/0x330 [ 3399.437903] __kmem_cache_create+0x10e/0x520 [ 3399.438836] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3399.439901] p9_client_create+0xc6a/0x1230 [ 3399.440963] ? p9_client_flush+0x430/0x430 [ 3399.442025] ? trace_hardirqs_on+0x5b/0x180 [ 3399.443121] ? lockdep_init_map_type+0x2c7/0x780 [ 3399.444316] ? __raw_spin_lock_init+0x36/0x110 [ 3399.445450] v9fs_session_init+0x1dd/0x1680 [ 3399.446538] ? lock_release+0x680/0x680 [ 3399.447532] ? kmem_cache_alloc_trace+0x151/0x320 [ 3399.448731] ? v9fs_show_options+0x690/0x690 [ 3399.449826] ? trace_hardirqs_on+0x5b/0x180 [ 3399.450911] ? kasan_unpoison_shadow+0x33/0x50 [ 3399.452036] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3399.453302] v9fs_mount+0x79/0x8f0 [ 3399.454195] ? v9fs_write_inode+0x60/0x60 [ 3399.455224] legacy_get_tree+0x105/0x220 [ 3399.456230] vfs_get_tree+0x8e/0x300 [ 3399.457161] path_mount+0x1490/0x21e0 [ 3399.458135] ? strncpy_from_user+0x9e/0x470 [ 3399.459215] ? finish_automount+0xa90/0xa90 [ 3399.460292] ? getname_flags.part.0+0x1dd/0x4f0 [ 3399.461461] ? _copy_from_user+0xfb/0x1b0 [ 3399.462506] __x64_sys_mount+0x282/0x300 [ 3399.463515] ? copy_mnt_ns+0xa00/0xa00 [ 3399.464483] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3399.465793] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3399.467091] do_syscall_64+0x33/0x40 [ 3399.468035] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3399.469306] RIP: 0033:0x7f3826f8db19 [ 3399.470238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3399.474789] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3399.476673] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3399.478451] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3399.480208] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3399.481973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3399.483740] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:11:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 55) 13:11:07 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151cc, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:11:07 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 9) 13:11:07 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) [ 3412.912423] FAULT_INJECTION: forcing a failure. [ 3412.912423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3412.915046] CPU: 1 PID: 30596 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3412.916621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3412.918438] Call Trace: 13:11:07 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991f09e2623fd0179980ceacfc673c4e36abe03daa4364e22592c", 0x35, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:11:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x2000000}]}) 13:11:07 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x412082, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x8081, 0x0, 0x800, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x0, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000000)) [ 3412.919023] dump_stack+0x107/0x167 [ 3412.920026] should_fail.cold+0x5/0xa [ 3412.920894] strncpy_from_user+0x34/0x470 [ 3412.921837] getname_flags.part.0+0x95/0x4f0 [ 3412.922851] ? _copy_from_user+0xfb/0x1b0 [ 3412.923469] FAULT_INJECTION: forcing a failure. [ 3412.923469] name failslab, interval 1, probability 0, space 0, times 0 [ 3412.923788] user_path_at_empty+0xa1/0x100 [ 3412.926902] __x64_sys_mount+0x1e9/0x300 [ 3412.927813] ? copy_mnt_ns+0xa00/0xa00 [ 3412.928696] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3412.929879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3412.931056] do_syscall_64+0x33/0x40 [ 3412.931896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3412.933047] RIP: 0033:0x7fc8902beb19 [ 3412.933883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.938013] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3412.939734] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3412.941334] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3412.942944] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 [ 3412.944549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3412.946148] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 [ 3412.947801] CPU: 0 PID: 30602 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3412.949137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3412.950709] Call Trace: [ 3412.951214] dump_stack+0x107/0x167 [ 3412.951904] should_fail.cold+0x5/0xa [ 3412.952632] ? create_object.isra.0+0x3a/0xa30 [ 3412.953495] should_failslab+0x5/0x20 [ 3412.954226] kmem_cache_alloc+0x5b/0x310 [ 3412.954998] create_object.isra.0+0x3a/0xa30 [ 3412.955844] kmemleak_alloc_percpu+0xa0/0x100 [ 3412.956706] pcpu_alloc+0x4e2/0x1240 [ 3412.957428] __kmem_cache_create+0x35a/0x520 [ 3412.958287] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3412.959235] p9_client_create+0xc6a/0x1230 [ 3412.960046] ? p9_client_flush+0x430/0x430 [ 3412.960848] ? trace_hardirqs_on+0x5b/0x180 [ 3412.961671] ? lockdep_init_map_type+0x2c7/0x780 [ 3412.962578] ? __raw_spin_lock_init+0x36/0x110 [ 3412.963450] v9fs_session_init+0x1dd/0x1680 [ 3412.964276] ? lock_release+0x680/0x680 [ 3412.965042] ? kmem_cache_alloc_trace+0x151/0x320 [ 3412.965953] ? v9fs_show_options+0x690/0x690 [ 3412.966792] ? trace_hardirqs_on+0x5b/0x180 [ 3412.967609] ? kasan_unpoison_shadow+0x33/0x50 [ 3412.968460] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3412.969412] v9fs_mount+0x79/0x8f0 [ 3412.970078] ? v9fs_write_inode+0x60/0x60 [ 3412.970866] legacy_get_tree+0x105/0x220 [ 3412.971630] vfs_get_tree+0x8e/0x300 [ 3412.972327] path_mount+0x1490/0x21e0 [ 3412.973047] ? strncpy_from_user+0x9e/0x470 [ 3412.973851] ? finish_automount+0xa90/0xa90 [ 3412.974674] ? getname_flags.part.0+0x1dd/0x4f0 [ 3412.975549] ? _copy_from_user+0xfb/0x1b0 [ 3412.976332] __x64_sys_mount+0x282/0x300 [ 3412.977092] ? copy_mnt_ns+0xa00/0xa00 [ 3412.977828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3412.978825] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3412.979801] do_syscall_64+0x33/0x40 [ 3412.980503] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3412.981473] RIP: 0033:0x7f3826f8db19 [ 3412.982174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.985648] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3412.987089] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3412.988429] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3412.989762] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3412.991094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3412.992431] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:11:07 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003600)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "3995505e4cf491"}) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, r2}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, r7, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000005600)={r13, r9, "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", "f48893365144e23b93774d67faf9620473472a07cd56e886bf4d05b7c398b518f789715df9c4e502d850af73a75ea248ebbd347440b224103b784f8fc574678a25b889e7be603d1dd74f1145953a05b39d3943255a1cba7760499ea1676fe10cd495f534a048aefb470421fc040b622325b8b3caf57c4a276b98e60d61f14114265e3a2e30b98904f020b81ee630f34f678d466fd75dcf65366df09da1abec04919598fbed4d60a7572dd9314cd39981490fb0e44ad23b6a4b82a09281a78be4591e51fd1994ca583d795843369de32abdd0cbfb4e8258570735e2dbe987c41107782c31aa90a66e4d700e029c1f923224de53509c179d8da160b72010b54232fc6829502d28cdca3f8ca6801e5d1e2dfef6123a1a6cecb55b434e74d707123ec8fe8c4e9dafbde7cdce8075fa77fb261686a24a8fcad854569b0cc21c86bb539c98ca42a0b9af90d9c4fc387d34475397255c74048348945e4273ed50c60ef5bbd4be2fe27a6ca5fdf6c3bd539f0292491b36c639b63148122be1000758dc1c49e7841862810269f8324e90948197d35324a3de8c3072176486b65b29ac97b25b522eb14e5e8306bddf4d057d97884c4fbd9ec1b667d5c87023ab3a57c9f8d7f227ea2aa0d4546978c063c3a90f0f2ecdb54ddabc992efe009f190d9020b4de391a6bfc6207f376b711bc4a078bcbef883bd0d8da67f6cede8defa9ecf402dd1082e1f8e5576d6620086cbbda0189c3b95a393e3cf586a02e55711388c0c3c72e151e047063c599bb615ccb0472552a09fcffacbc6130383cbdcb4fabc77a840dc645974c0616ccc34f95a0176f1e7fe89b72a49766a4922c34374c0636793bdb2b5badb9e6bfdc0baca96ee6b3cb823ce6db8b85ca012bf302ad875608b7fa1bbb79308a1fb90a99c19e895fa9a0c7da7d5bc4ca87913ee148c21305fb0cbd8cdd0b623ec94d496775cb4c952e6035ec9f7888ce08d6e4505b80b4755ea35ce144f23f0a65631dcd921faf46baec1e90a5f1e0a6ebfbc0015ecdc4b5eb23358d08e47d93459d1e1eb9bdff3e836f1b6b8089435a316d2ae4a8ae5df5f48f5d852136bd253a0f4efcb8bf3b7c85754bedc1662bcb21c1b8e9c19bee6365e5e3e20a5753d3074ec41a8698a8b06bea8098fa116c87c8bbcdcf9e3d4653c9845ca2362daa3c62cf7da94abf686f3ef99e636116e1aeea93b72d7b6fa55659a21ae812eb9fcd6531e41fd2b555a924647832ed65761aa59c1a1f5a208175f8f19381c834793b43b2cffa7478a7fe522fcd80be0508fb63730fa5a584ba101bfd3d5fa4c0fc7e79176b03dd8040474c4fa3e2e9520fe6875eac8bda631c12a4231c0aaacf5a033aaed3da1319d35478f0ed78180b2bf53cae7548af93260822d6360514bd5461a954f4f34fef62464cbe775931e670ad055c02a4d414e6acd636cb6e9a32d8a1dd382a0932ae2bf47e40de1a23e3ed25fb037f71a7f21605755d6772d7eb07ff1f8a39794c8444fd7294b3982fe413ed01054f64349429c86549249b04f673747a3f73de8be844d11eb90d98730e07113231ae0b98f4ab5c711b0a20445afb381b51b4c09a374aa7df1c5c752250289554055f3991e53d166cec938e50f2d6dadf3e587c7c2625f3cb23fb8f8074f1da6c7cee8cc6c3236e78d73d93c555520e112f375e3b469b2a2e9ae5d8d2495763220c44a03a298777c1882ace3e960bf6a5636a58354949cfdd266002e63655250466a1d6879a70dc0b720ba9f149964bae474737e639f2d0a9eab0b361d987dbf2e7353cb563f45d520a4b546593253afb4ec4787020a9150d0c226ae62300e078c288868ae7238997da22230c62ee538919d012905739d1f294ed0d63b891f2fbe08b9747113a2f21a822bb7cad78598b1f24082134d3ad3881b5a5244750a5e1a5241c8de8de39617c3e2ecf31334221802d66cad37031d2bc09cb8770251dfad43a765b889ab08dc2fe66cc75242fe31920e6d23996a900ed848d9fbd799e95ad0df6b9c279ef7827c631bd2ab153aae925394c2e336168173a9faaa7043ca2c95cb2cee09df4cd4982f7c47217bc94072c165590d3abdb39bb1834b4b0b092bf83c479b6bf42c071a728375f7298d7d461164e2f98c20cd9f2c9aefa44f9bebeecedbba1490dcee64955735e5701f25dea12bdf5ab41acf5ed34a6757aac98a7da9fdb8c334d382916cc3941263a8f4b9c9c9f5d3b9b7985533a2e38582b01fe6180a6b75f5ba8289a02cab7193b46efd3db86a95786ee990153a2ec5a7db68dc4f91c08e1a9e303ef50d7fce92dde0cae56cab8dc5c7a3f976212bd572f45a0f2d559e1d9e68e3a2fe1b68e7045a7334d86fb9f860d44405b2e4be0632535327d557bfb02fbf3258888831331f4dd098c99dffe9498a885c0393fc43ce48458f5be2df88ba47d72377ff9a6e0208e5689f6e918887d1029bfa548ec076bc2f440bdfc93a63f976ec80b0a0a8f90efea3cffeb9faa8a65bb00279d283ade15c66027d9729e11994a6db81f00085629f51c273456cc78a8b3be1c9ecbc17a0e37fe253c446c6ccad7c42bcbb16b1f1002000fe8245c1174982bfc038e662ba1312124360f3a470d852e4583c4830772493648b99888084559dbfbdc52920c237c2b893f7b07a99039ed67e7c72756cc7a05341ac61deeb5056dd673d7dd61f06792393ded4174379c63a3c50010e04816b3822c92b2cb7a7c47939948816b2533cb959835cfa7b566fcd7dbc33aee44593b9f894fa83a7ca9caaccfd3b9139902251a81bd38f514e7b48f6b73075d65b2bfbf919e295d61863ebeef1fc3daf4c8cce47f84c815400f908c1a6c1ceb85e3db13f7933ca72d1cfc67c884a9253efde1f6c2658e22b22bedbe524f7be4c83b00ad560cd40628d3e91760233daa1f86a8ea08d14a9ac22bab828eb68856813a4d53b50fef48a685eff8e07c62fedf94c779c5a7661d821bc1635c75273eff02477054cfd24720004fdd3fc8be42c55f36f1ea03a656ee8fae4f5a3354856a0e8fe87eeabcb49f7d6e94dc6174bffda719e0c14d135617ccd1a71899126cac8d0332977888bbfa8bd792dc1d2b12dfaa96593a8cee5bf3147f124bb283c75af90f513eefbbbd41b7b99ec43640f07b085357a76af88c3e6cf9a1a9b801981f4858f0d25d1ab235ab49c64cc3a34dfe578719a16b84b8979068f44d60646a0e424fc78305910c569b3edb6c7d92511e0238560efa8f30ccb5a47f7bfa78872ecb96c0f457fe37a772652d828f34003dbdf92da6e1b152795f53e3be4144cb01a87d9202914e5bc381d0f46f96224b4bc1f84ae75b4f87b76e90fa036f0d52e91b94b2187032cbd883435f8b96543d04602a20e2f2e06b918eb96ede471ee738e2876a47b67b4f0aadac4d1b1bad63bd6833cb2deb57868b64a93946488085c2fdb602041e5f87ef43c8d5357fc5b39eceb13a42d1bf964128d05b5660259e5b15f250f2c29433b4ce105b64debea74486824ecd46994cf72e1ea166eb8c0d6b803d6d1dc559ae91ab436c798719f1ffb18196dd14d2524f984f0ec75da3eb63b2dab4ac5436ff34de23013dcecb8a9dd9d7e7fc53ad467353731a9ea76bd6ab59a1c2a5b7340cd997627453350d128954e5177e2d4c131e5b01d1a08aed99b3fd7d8bcccf3e12d9b71e4202811b3894cd8cfc17cba68e6b540deb618b81a72f26d4f0dd23027ca3b3d6597fac944b4fcb115618a792e4f7c64195af077b1c78040d802db6f8083f7ba619921bf23d6ee0cd8f3b92503d7bb5303a03a3722f9e0abbe8db1d34fd0b7b5c8ab5a94760198a777caa6b3be1a3b1a6244b5dbdc5b6e53e050a1419e09690060f2315a2ebfd9207dd53991983c3621e6a8eb96429b5d36f003889fa39ca65c3fb02dbab8ab48561febb311b707b63535c068cf4c67f03e4180e66d0ccdd262a2c2cf26f8295fa0c15409aaf2913b3f06eb3c0962683ac2b16d7b810eefd2df23750df98e7dffeb1492d9e437279d2390b2d55cd2c5ae144b87599df82bf67224e9444d7ecf13a161ff65087d5a341ab6ca267ec297be3951001a8d8fd2aa92f7a69f3dda0aa687de3ea6c53cf3147335253f733c317e58b06ae16de39575cf3c425e308b8da7232b361df097168925f645ad6e7f3e6eb73d0208aee14bf4baa9fd125efbdf19655a2432ba4eb6b9c7660f9c2fb307bad3d90ecdc371364e61032bb9f9ac225e00620f8ea7faa6f50ffe45742fddace84fc4f93cfe823316fb039863c1c2191e89f9cec8f10869d739e094383606e886b87661d1ab90ab4443889dbcc3f9294303e26eacefc11f5ad82818c5190cb98884bfed7d5ce64f8240e554c7268daac05fbf85c7105081d1bce5823dded03681c6cce0e864dd51ebd3fb3924747cddedb7721cc48eb2e1b0f75e9ab372f3b9ecceec2732c50bcb3c642e83a6ef1890353cb9263afef4b509dc4ce21d5ca88f94b2a239b1f792d6693bc86876009bc17fcfd0a33fb29fd95592e944e127cbbb557fdfe839ff1e22987d562e6760f7bc172e78a9bc7195a68cc370c2a53cd1ee3c58732c646a7489e42f5f50c8e0e4afb8d0455377fc12ed9a57cbf3936bb13c7336033d7f1f3bf261569910049806bbb9b1338e1e40d63d961aab4ddf86bba2b4dd17ab9208d1b01fafe54b28ae379f8ffe831d158fb5cbc5b6883e69991f577d236483a03af93a1fbbca6972f3d8e5d9f659f97f15992c6168e9d0eb09c1dad1c06338257aacf6ee017d034cf68a288c91b27002af7c9387119463f860dc6d1c2f386889c14c855463ba1dc1abac536aae12f5d2356636fa435f6a9d19474362e69a24a739dec7942d514adb9bca987aa9558c1df91f200a09fe9dc558d649e5cb573a3137de864b7a7c2d826fe6ef5cc76f44f0b759523d4f378c9d2a08a5f5782e93273c443049847a0ff07f3778660a9719f1a15d990d29448ed405225308794b26c16b8188bcd6aa1a341ef9585f9e7c113e1625b528579c468e73d66572e6b34c3d0f9ccaf83007bdaccb65c5180f015a65e0bf9b7785af716aebb5f26358fd50e086c6043cc8d2423805bb6d67df32f32baad1ee3a1df13e8940a0b125aeef96e80148a01775014d92ad22d054cb8f2c392dd48430dea5a53943df00d102f3841b934ab0d70fbf5127e19a1f70fe9de5585ae0a75d7c7c8f36de5534e81a9b9052b874f887ef9826911ab417a3127c6144f7cba08479bf8f29bbd24c5f379a3de0fb4b0af3f53323023236b3f167e81bb8f4298f8daa152fa08619d3ae48fea219fc7295b66bd2ee6ba5ca4dd2ae9e59821bf15e0c8666975ca90ecc2b183459019487c6d4c591ca9f7fd6a222e92c8ad95134e71b961b8b41ffca5ed83f86a6104c38ce227e7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000006600)={r14, r11, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000007600)={r10, r12, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "7374bf600a2dbb0a10a4446998c60bc654676f080ecee8672b9b990319e9f34b4c45be9b1cbb8fbe1f4541599e2a8deeedad6067575d671432b4ba4028542704ab850b2cd326bd5a16431e3e06cbefba068d34f999e863befaed31fe2f898bdfe4043148f4d1cc27af274cc202dd9cd92b1891ba85c4048baa5cf0aa7a3d5dbef19adb89a7123a5c5cf1f42650df4c63aa25c0c5f606a072b8c1910206999409a39439cacd824f129adb4177e14f533050e77cfd6b9e760c12899b047feb4c8e5b746e5570db48fc8fafeccf98bad6d99a585091b403666ded97ce43cdf6dd1791052bc149861ea2585dfb28b538cc9fe6ffc5e07182615951fd668085ed124af574a07e3495491f19b1aa2a3b69028ccacd78524d988b224ab17ed905da0b840b4a9939e2af6efdf4221126075a8964d904883db014031e0924681a4ef3795071b256b75002a7df298c87c565b1d8a331e7d0c1000e1d707100917dfe107f87ebea9dca1b708b01cacf1c9f348c0d0fd64aa64193637c7169264d06f613c41be60f39b0cc9d813ae5fca2222832f86f2ae87e883efd48df36d16e6c1ca5c378f6ff0fbace91eb3099d744b16171fcc1ab7d5456392f0878ecf27e8caad7386663de490c3044eed7e7cb83e675716eda0cc09f219aadddd814c88048a7c6cefe69a79f2f7a234cfffbf19ac7a9f6ef59faf2776ac3d636904ec1bda09b1c9d8caeafa918983215d866f5cb6f1088e7e99a43425913d258a3dc8550fcbca3e0bec47503e24d709dd1fd1bb3cd92837d10387a0eebb98aab27950a2a66dc0b9bad3e4ef6393036d64949931ffe6479073790b3b885ac8563d4018e9227d644864c17f048daefbb192d15b56a2a440ad6d4ef5af2ac9904d8b69c64d2368928d7595594e6c3fd23229cb6aa80ec308301b1c94777900d34b1b3eea03dca765036a3f5351551affb585f22541074380b60ca062bf8a8a2324fe61ecad5733aec51e0c5ddc648280556b8a038b5816947b1637ef598cfd134cf9833d875fd23d22f5f74e74a4634d50a3ac908eed128f4297924296d95361b9504c08df4a0603eff93ee34bd45ed12e8d06b8f399fefef4ced732aad15b70f3e276101fa4b5a5c17435d0999b3345ccfe853c955e8b7927c7a171506b8e5b4de8a68cb5e80c3709a0e15643b5772d82d04859133e09fa8ab81ac042e67bc918f2847af14a4eb77c3fcac3132ec1af5a57d85acb9ce91d9d15019904396737ade63df938e6f054f8ee21e8994d45b0801ccd8ae8bda90128cb05eddd297d800412bc01fc5cfdfa9d473641fffc793b513da3f7565a27c4ff3678ac6f71560cc6cc95fb4d20f85b7934cb4a4f614182d331ab53b6a09ff47fc272b6c1f5aaca477bfdfed3fac942d639773b7a5656c526eb595d6fa9d301c425947f37088447cb4400c37750b76eb6c1f7933e43b27224c2fdc053e55125d00ab11428af674f58bd5c3ea1ce4762856afccbd37dd59a5e726f2e5e770bcc8372304fc2a33611234e3b0d411fcae8691e621b64581dc32b3d97c02920877b2c995018dcfff2da8687bc64332cffc3d355931561dc799d169f61d121f242dd3605e3fef8a46bf73998202d6a87671719896c61d729006104bdb7e926020f28260c75c2c754e5f073097d7031567e62cbfcbff541702cdaf498bbfe01e2948e6e164271ca4ab4df68a1569d29d3ce7029c0b58d2a1e6d179fa817ec9df17195c8b83a7a7508f18f0e3d07e8871f331d7a151bc11301c7dce402e6a5fda6f3096df2ddfeb48b3991e055c55d2a071ed66bf378e5c451f849cdbd7951cacad16d6b5734b71db866e77086bfab1797942633ec688d78bb2fccaae2b0e796b852b278bd4a4648d0811293e1bfe68e30b42eb27ac0a4e435e086b4cfeeb9fa539f0d800b6108e4c7b9d7237746770a3f3477646b7c9bfd2bc111679d40bffe221be492ba984df6cd4d7d8f9cbf7185e79804416be68d8a2bfa28e5bec4b57bf5f08eeecafabccd55744e49bb4a7dd1324908d91762b9884e7268d0bb6290be3b51091ae6ccf2ebbd4945dd7913bd38509a00ce38d955909bfa1f3740fc123a12e15b853b59b9b691460afdcda150d39e566a83eaa0c3b7bac9819bdbc7e0a620206be87ff2f8ea8091dbffa014d2f2eb919040a434cdeb3db68adf845d2ba751dc0e1ce4afd8672a5ecf0653b8c672c3265aa236a174185f4b4a291bda664bb79c13f8b6932a831385773898d194d2500b38fbfff8c4acafa5a80dfd3f1f906132885446f9f7ad787dbbdab593661ab1c255df879eaf4ca739deaa11379a5c6b650472257fa54b646b29ceb3dbe27e3584914f9f766bbbcc67abeffebb0df881a42b8671bba930b04d1d7710cc15d546ee69ad40e66f04eb28af8bd17b739e68ad75a239303fb97b18f8f08d2f95bdae0f245ebdfc3ecf555a6fd53f5a35af8b2dd016b227d209fc8323a7576e66a9913a0ad4f19d30d2b6f25ac8b5b6c762e2c68c76f9bd7818adbb3c9b194c09471482ec6898754469076b8674ab9e26b5977a0fa693160f18a01d2f2c362186ff75c205cec261d9e6c431ee672e4056b7e458ef02dca1167d09de5977210461758ed506290477a63c5af0698a1f4edf3bc569692bc9febd5fd641860dd34a6926af47ae7bdd3cce59a5b24b6944075e30ec2f2dbd043ebc57a39eaa5559bc4f21f08198e0daa2e8506b21160c8f9b629ad0e80d5e99e5cf4c4ceefb8d9fe5493ebcb066a647269fef2146f1ed55dac66974446e650e49db26ceb24c16c24885a2d2d011d11ec52d5b7a9c8096314d1dc7c992a1dee70be2fc0cc2d9fc94b0d02d479f6f4bfd3fa20df42568e27c0cea6caa1028d5dfbe6a9657053c06132387f9abfbaf93d9b335b69b168bf7fdaa0a44981dadc3358b50f1b24d390f8858d6775fa838388ff8a69b02bf446028485ba9e0c15731288c186b3cdf2fbc088f13f50e5eecc9b3a058d1369b7a254f11aa81a5fabd862bfd5226ce26e0199ef241badd55ba0d6087e9eb1661111a6afef1caf2bd54832bb5a3e8b864c8af220a8a115746c1646e78471ba2edb7c63fcff7f6be047a5f740525fbe5e259beee146dc2a609d3fd576e826ee1e4fce8ccbf75aa713514bda04ed4086cdd11a770cbe5782bca23f5f3ad8682609d5c5d4e5ca4e117d7423740b41081c6945b446223bb435c6ae2314552b7bf53a8b2c8a7a2a961d17315e0f7a660624b119c89ae81d2214b03cd79bc3eb355bf06811d7186b1f0a7219dd8d4096cb0df940719279357b853bc7c5bcf645aa65c12227859ce0851953fcefa6051f2a31e3666abde9ef1ece3eba658de696edf5d87a7d562dfe1f6bb9ac5e6773bc9069c732683715868cf14825345fb60665982549b9bb7c5b7d934ed0c4d136fa089f8459d473bf1ee678cf88c26f4f5ac681aa6dbe6ef78c26e7a3649ae0574f550f9fc64e8caa14586cbc43d8ec72a3170fc4f6c78fdbd40332c1f35adfc04be68a067f2c03325d624e21fa0e1fa6ea879caa84665bedefcd19759872824a0053a110af2b6099d8ea572b0c81cea39147bb2dca0eaefd4be8c3b59b98c27049f04ae5f3652ade0e1561238296d17979581b93d0ee26464fb5675b968cbc397558207fb1d5365f73994c0c8f2bcae0164e74d602a4856355b214af58b6357b2505779260ec73929eb4fe1047bbc2a125ff6c88718d2b8b8fb9c0d1cb1760748ffc5e4998dbaf8fad99df26b2eaf99bce2541d287b243d7b9cf0ecb25588d14c6228a6cb5413f48e3d07817d258c45ca0ab3494ca5b59f87abdf38e439b4a31d60d9474a52e465f36dd0cd56f00d4e5e563bfc6421b40a7522eb71894a698c19510fa7dc690b6b3f782d88e61ca635d5efd4c9c1725dbf24e0c8e246a2dc979e4750de8347687038f0441858bdf5a06bcba827d8d1327601943ca9fd004c121034fa6e1c8b9eff5da764961f5700eab97380e99b37f302239b528b36f5c9bbebaff25edae48fbe59dd272099af5c695a19b62f64485ba01ae8416c02f04360be933b8ba8a49c6c1188a78c3d36d0c61f61b4002bfeb669e29bbcb306f573528a749b085500c7649aea469fca867da4ca9eaecc75a70f41baeb80bf803402a9066dc1e8243192b78533e0ad590e14fd2bf2ce3ac943ade1fcefd247406785ee387d18e9afe8845481748fbadf4d081e01ecce50ef1fc5b457fa296b833d77390764e2af12f7930c6334476dc4cf45d9f272e364336810c11318bd0a95233005d66fe81a5708ae5fad8c7db17e6d97d2340651f7aa7a36e132a77a7a6206b36a95ccb5a48cb19bd3bb886ff0e77bc76653912149ca85895c4f80c373cbbd4305a91213e8ec5b7b18d8587d723c18f02854556aaaa540935eab2b7470a7c1c40c7e843ac1221a51e92eb05af2342fea7c853a46182c8384612aadb40145b95de565140003468eaca74b38bdf4dc640d0af80c3dd81747652c5fe15ffff8965a150a4ca6a9d9c91d067b4fac49b23cd2041dfdab22126c97d812b67ed638cc65d75d836bf439807cd7cd3cd0e6b30c81983e3f45a00282a14d401d81ac7c5544510dc7d157eeaa18b09df5ec949a22d7342b5b720b2a47251e995410f9b35d90824c1b19beb8575c9efe2aaa2a2011790a1099a924c01ca835fb7cc561eb2310a5331d4d9c4a9ee03a5f1364c17a7f4511c0c1b929c630cc110696f9e94b4107d0b75338fda2c5e0b8d46d19b98071e328f57debd56b4a0a9009913ac41518a08e6fa533edf20db0dc5eff43cd3ead623fc826ac03925490537d6b6a47f27031faa17f9852a3cb72d2088f33d35846a40758e60dab4b3980d032adc3e4faa61ff8aaea6b08bc9705cf097701e9af550fa43ec06c0ae2257927eebcbbbf4a05ad8097597943d6aed8a950ba32bc0d19827539019397e2fffa5f7379ffd7ec266f0c1cd947aab0c9e73c2796bd4c32fa0a0effbc84570efdebd3ac1eb57cc89cdbed91ed43a64cccfeba427a017a07d84acc850a45e2f26639598ed061ea81b60fb1873983591d446129ba8b27a4aef3311292017e3cbc00533824888ef80ef1a85c86a370dc11694d2f455e04ceb8811afa53aac77c65b38703d18167aedcc077c988dd9832ee1999a82c8752b921bceae484c19cee6828eef373c979b5c3f208080c8dcb38c53e384bebed6c41c3b9d6958bd2b952d82d17b262dbf30f90ab5c5d197ccee9f6b6525928b0100ffdeace644e159500495ff5a0ea7df7b9ab63617e3879818e25341e97d839beefdf248222cadd61a5d76b1ff34704bb78656afef7994904da269f973598217edc3be93157185aa15ef225f6471d7786a5e28d0f145b96566e101bf46723486867b9aa90f9eb4d1f5612d4950160c1504a367daf984"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r22}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "468d0bb064fe92"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000440)={0x0, r22, "13a918f77968f35510e9c2995f8f145b5a993ed98182f0458528c488d13cb059ebdaf35758b6c4a404e740a316f28bbaf2ba1e0be9dc65eb79525ebe533e5cf9a0255e9728c1d77e372b2c36be4b341cba62603bfec2044d3afccc48519863c67001a67e310b20901d1ff651b95f6446cfe5a8529a0d50486e35b928534fd449ef689a49f3ca9fa17c9dcdd79aa5ce8eab24307435c9fa8f1626428abc21b9e44cb07223508500fdaec1f7e9d7fbbfbc3ce39c68ed5779d9e41801f3b314cdf804ad7bbd560b7f6a88686ab581b4650fd6f7ae2e4a3d08c32f1d6ed93a6e655e75b225f5d9b6c254c6147b919e066cff818d816d5f82ef03878d88dba88bd1c7", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000003600)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r25}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r24}, {}, {}, {}, {}, {r20}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {r22}], 0x3, "3995505e4cf491"}) write$tcp_congestion(r0, 0x0, 0xeffd) 13:11:07 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="1464", 0x2, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:11:07 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 10) 13:11:07 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fstat(r0, &(0x7f0000000080)) write$tcp_congestion(r0, 0x0, 0x0) 13:11:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x9000000}]}) 13:11:07 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151cd, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 3413.140068] FAULT_INJECTION: forcing a failure. [ 3413.140068] name failslab, interval 1, probability 0, space 0, times 0 [ 3413.142073] CPU: 0 PID: 30821 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3413.143264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3413.144683] Call Trace: [ 3413.145137] dump_stack+0x107/0x167 [ 3413.145766] should_fail.cold+0x5/0xa [ 3413.146424] ? alloc_fs_context+0x57/0x840 [ 3413.147139] should_failslab+0x5/0x20 [ 3413.147794] kmem_cache_alloc_trace+0x55/0x320 [ 3413.148569] alloc_fs_context+0x57/0x840 [ 3413.149260] path_mount+0xab1/0x21e0 [ 3413.149895] ? strncpy_from_user+0x9e/0x470 [ 3413.150638] ? finish_automount+0xa90/0xa90 [ 3413.151382] ? getname_flags.part.0+0x1dd/0x4f0 [ 3413.152168] ? _copy_from_user+0xfb/0x1b0 [ 3413.152879] __x64_sys_mount+0x282/0x300 [ 3413.153569] ? copy_mnt_ns+0xa00/0xa00 [ 3413.154250] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3413.155148] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3413.156031] do_syscall_64+0x33/0x40 [ 3413.156667] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3413.157528] RIP: 0033:0x7fc8902beb19 [ 3413.158155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3413.161266] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3413.162571] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3413.163773] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3413.164986] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 [ 3413.166196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3413.167407] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 13:11:07 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fstat(r0, &(0x7f0000000080)) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r0}) write(r0, &(0x7f0000000100)="4d484342ecc829ad7ef6b98f7dad0119e845facb87b87938d434e6b7e4425a06671f12237030d21757300ba4ddd92540f6d83dfa1491fc4dd566bf597e22e50f4e6766649c8a93f087377b5ad85dbfe5d73db68e9856fe2215bc34d55916f4acc667b6af0a3e7c1de56e56cf67283bb52f1359c18cb26654b0dc0c755cd66d375feaff10517565f120a73a883032fab5db1fbfe95dc6471a206d2ed0c1b1a08a7947c3e5f72f7f42627a91", 0xab) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) r1 = dup3(r0, r0, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) 13:11:23 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 11) 13:11:23 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) write(r0, &(0x7f00000000c0)="9cebd4162969995623d36ea38024227f5fcba3fa5ebd121998879a048ec6d279408ae946295ac7d7dd3640a968e0779abd8edb617cfec527d367de738ea01e3261b982f6f5706fb5fdef1cce447db4cb9f08af7553636af79e39b70faaf43b5395af8319157964198ee56741cfc288b705a1385e14134611d985c4eddf805077978fb6f454aa", 0x86) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x800, 0x4) 13:11:23 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x40000000}]}) 13:11:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 56) 13:11:23 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="1464", 0x2, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:11:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151ce, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:11:23 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fstat(r1, &(0x7f0000000080)) 13:11:23 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00') write$tcp_congestion(r0, 0x0, 0x0) [ 3429.289371] FAULT_INJECTION: forcing a failure. [ 3429.289371] name failslab, interval 1, probability 0, space 0, times 0 [ 3429.291278] CPU: 0 PID: 31245 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3429.292272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3429.293440] Call Trace: [ 3429.293821] dump_stack+0x107/0x167 [ 3429.294342] should_fail.cold+0x5/0xa [ 3429.294899] ? create_object.isra.0+0x3a/0xa30 [ 3429.295548] should_failslab+0x5/0x20 [ 3429.296091] kmem_cache_alloc+0x5b/0x310 [ 3429.296677] create_object.isra.0+0x3a/0xa30 [ 3429.297310] kmemleak_alloc_percpu+0xa0/0x100 [ 3429.297955] pcpu_alloc+0x4e2/0x1240 [ 3429.298507] __kmem_cache_create+0x35a/0x520 [ 3429.299162] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3429.299881] p9_client_create+0xc6a/0x1230 [ 3429.300488] ? p9_client_flush+0x430/0x430 [ 3429.301102] ? trace_hardirqs_on+0x5b/0x180 [ 3429.301722] ? lockdep_init_map_type+0x2c7/0x780 [ 3429.302410] ? __raw_spin_lock_init+0x36/0x110 [ 3429.303064] v9fs_session_init+0x1dd/0x1680 [ 3429.303679] ? lock_release+0x680/0x680 [ 3429.304251] ? kmem_cache_alloc_trace+0x151/0x320 [ 3429.304939] ? v9fs_show_options+0x690/0x690 [ 3429.305572] ? trace_hardirqs_on+0x5b/0x180 [ 3429.306187] ? kasan_unpoison_shadow+0x33/0x50 [ 3429.306845] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3429.307639] v9fs_mount+0x79/0x8f0 [ 3429.308146] ? v9fs_write_inode+0x60/0x60 [ 3429.308733] legacy_get_tree+0x105/0x220 [ 3429.309317] vfs_get_tree+0x8e/0x300 [ 3429.309850] path_mount+0x1490/0x21e0 [ 3429.310407] ? strncpy_from_user+0x9e/0x470 [ 3429.311019] ? finish_automount+0xa90/0xa90 [ 3429.311643] ? getname_flags.part.0+0x1dd/0x4f0 [ 3429.312306] ? _copy_from_user+0xfb/0x1b0 [ 3429.312905] __x64_sys_mount+0x282/0x300 [ 3429.313487] ? copy_mnt_ns+0xa00/0xa00 [ 3429.314065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3429.314823] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3429.315558] do_syscall_64+0x33/0x40 [ 3429.316089] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3429.316340] FAULT_INJECTION: forcing a failure. [ 3429.316340] name failslab, interval 1, probability 0, space 0, times 0 [ 3429.316866] RIP: 0033:0x7f3826f8db19 [ 3429.316880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3429.316888] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3429.324915] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3429.326225] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3429.327524] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3429.328817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3429.330115] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3429.331447] CPU: 1 PID: 31258 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3429.332937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3429.334731] Call Trace: [ 3429.335300] dump_stack+0x107/0x167 [ 3429.336069] should_fail.cold+0x5/0xa [ 3429.336876] ? alloc_fs_context+0x57/0x840 [ 3429.337806] should_failslab+0x5/0x20 [ 3429.338641] kmem_cache_alloc_trace+0x55/0x320 [ 3429.339622] alloc_fs_context+0x57/0x840 [ 3429.340487] path_mount+0xab1/0x21e0 [ 3429.341299] ? strncpy_from_user+0x9e/0x470 [ 3429.342230] ? finish_automount+0xa90/0xa90 [ 3429.343181] ? getname_flags.part.0+0x1dd/0x4f0 [ 3429.344180] ? _copy_from_user+0xfb/0x1b0 [ 3429.345074] __x64_sys_mount+0x282/0x300 [ 3429.346016] ? copy_mnt_ns+0xa00/0xa00 [ 3429.346895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3429.348057] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3429.349197] do_syscall_64+0x33/0x40 [ 3429.350021] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3429.351167] RIP: 0033:0x7fc8902beb19 [ 3429.351972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3429.355973] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3429.357637] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3429.359191] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3429.360714] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 [ 3429.362267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3429.363805] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 13:11:23 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0xa0000000}]}) 13:11:23 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="1464", 0x2, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:11:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151cf, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:11:23 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02d49124ba60ce36f726318991", 0x1c, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:11:23 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0xff0f0000}]}) 13:11:23 executing program 3: r0 = inotify_init1(0xc00) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r0}, {@void, @actul_num={@void, 0x3, 0x67}}}) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) 13:11:36 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:11:36 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 12) 13:11:36 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x126) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f00000002c0)={0x8dd, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000080)={0x7fffffff, 0x1000, 0x4, 0x0, 0x9, [{0x9, 0x80000000, 0x400, '\x00', 0x200}, {0x7, 0x7, 0x4, '\x00', 0x6}, {0x1, 0xc8, 0x6, '\x00', 0x108}, {0x2, 0x3f, 0x0, '\x00', 0x4}, {0x7, 0x0, 0x6, '\x00', 0x4}, {0x1, 0x3, 0x5, '\x00', 0x4}, {0x9, 0x3, 0x800, '\x00', 0x2000}, {0x0, 0x8b, 0x7, '\x00', 0x80}, {0x1, 0x10000, 0x3, '\x00', 0x2}]}) write$tcp_congestion(r0, 0x0, 0xeffd) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f000000d7c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f000000d800)={{0x1, 0x1, 0x18, r2, @in_args={0x1}}, './file0\x00'}) 13:11:36 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x0, 0x0) 13:11:36 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d3", 0x3, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:11:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 57) 13:11:36 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xffff, 0x7fffffff, 0x80000001, 0x5, 0x7]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xbd}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4055) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000002c0)=""/75) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000000c0)=""/188) r2 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x2000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:11:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151d0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) [ 3442.128088] FAULT_INJECTION: forcing a failure. [ 3442.128088] name failslab, interval 1, probability 0, space 0, times 0 [ 3442.130690] CPU: 1 PID: 31885 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3442.132192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3442.133997] Call Trace: [ 3442.134589] dump_stack+0x107/0x167 [ 3442.135384] should_fail.cold+0x5/0xa [ 3442.136213] ? legacy_init_fs_context+0x44/0xe0 [ 3442.137222] should_failslab+0x5/0x20 [ 3442.138049] kmem_cache_alloc_trace+0x55/0x320 [ 3442.139051] ? lockdep_init_map_type+0x2c7/0x780 [ 3442.140080] legacy_init_fs_context+0x44/0xe0 [ 3442.141047] ? generic_parse_monolithic+0x1f0/0x1f0 [ 3442.142131] alloc_fs_context+0x4fd/0x840 [ 3442.143043] path_mount+0xab1/0x21e0 [ 3442.143859] ? strncpy_from_user+0x9e/0x470 [ 3442.144794] ? finish_automount+0xa90/0xa90 [ 3442.145730] ? getname_flags.part.0+0x1dd/0x4f0 [ 3442.146756] ? _copy_from_user+0xfb/0x1b0 [ 3442.147667] __x64_sys_mount+0x282/0x300 [ 3442.148547] ? copy_mnt_ns+0xa00/0xa00 [ 3442.149396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3442.150545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3442.151669] do_syscall_64+0x33/0x40 [ 3442.152479] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3442.153598] RIP: 0033:0x7fc8902beb19 [ 3442.154411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3442.158423] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3442.160080] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3442.161632] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3442.163188] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 [ 3442.164741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3442.166288] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 [ 3442.178951] FAULT_INJECTION: forcing a failure. [ 3442.178951] name failslab, interval 1, probability 0, space 0, times 0 [ 3442.181499] CPU: 1 PID: 31891 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3442.183019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3442.184818] Call Trace: [ 3442.185393] dump_stack+0x107/0x167 [ 3442.186192] should_fail.cold+0x5/0xa [ 3442.187029] should_failslab+0x5/0x20 [ 3442.187857] __kmalloc_track_caller+0x79/0x370 [ 3442.188845] ? kstrdup_const+0x53/0x80 [ 3442.189691] kstrdup+0x36/0x70 [ 3442.190387] kstrdup_const+0x53/0x80 [ 3442.191198] kvasprintf_const+0x10c/0x1a0 [ 3442.192101] kobject_set_name_vargs+0x56/0x150 [ 3442.193098] kobject_init_and_add+0xc9/0x160 [ 3442.194054] ? kobject_create_and_add+0xb0/0xb0 [ 3442.195076] ? wait_for_completion_io+0x270/0x270 [ 3442.196116] ? kernfs_name_hash+0xe7/0x110 [ 3442.197034] ? kernfs_find_ns+0x256/0x380 [ 3442.197940] sysfs_slab_add+0x172/0x200 [ 3442.198815] __kmem_cache_create+0x3db/0x520 [ 3442.199776] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3442.200862] p9_client_create+0xc6a/0x1230 [ 3442.201791] ? p9_client_flush+0x430/0x430 [ 3442.202717] ? trace_hardirqs_on+0x5b/0x180 [ 3442.203656] ? lockdep_init_map_type+0x2c7/0x780 [ 3442.204689] ? __raw_spin_lock_init+0x36/0x110 [ 3442.205690] v9fs_session_init+0x1dd/0x1680 [ 3442.206642] ? lock_release+0x680/0x680 [ 3442.207518] ? kmem_cache_alloc_trace+0x151/0x320 [ 3442.208565] ? v9fs_show_options+0x690/0x690 [ 3442.209529] ? trace_hardirqs_on+0x5b/0x180 [ 3442.210467] ? kasan_unpoison_shadow+0x33/0x50 [ 3442.211441] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3442.212507] v9fs_mount+0x79/0x8f0 [ 3442.213254] ? v9fs_write_inode+0x60/0x60 [ 3442.214123] legacy_get_tree+0x105/0x220 [ 3442.214984] vfs_get_tree+0x8e/0x300 [ 3442.215773] path_mount+0x1490/0x21e0 [ 3442.216583] ? strncpy_from_user+0x9e/0x470 [ 3442.217488] ? finish_automount+0xa90/0xa90 [ 3442.218398] ? getname_flags.part.0+0x1dd/0x4f0 [ 3442.219397] ? _copy_from_user+0xfb/0x1b0 [ 3442.220274] __x64_sys_mount+0x282/0x300 [ 3442.221140] ? copy_mnt_ns+0xa00/0xa00 [ 3442.221965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3442.223076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3442.224208] do_syscall_64+0x33/0x40 [ 3442.225020] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3442.226134] RIP: 0033:0x7f3826f8db19 [ 3442.226953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3442.230960] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3442.232618] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3442.234173] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3442.235733] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3442.237288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3442.238842] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3442.240556] kobject: can not set name properly! [ 3442.241757] kmem_cache_create(9p-fcall-cache-1384) failed with error -12 [ 3442.243292] CPU: 1 PID: 31891 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3442.244795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3442.246605] Call Trace: [ 3442.247176] dump_stack+0x107/0x167 [ 3442.247972] kmem_cache_create_usercopy.cold+0x17/0x65 [ 3442.249123] p9_client_create+0xc6a/0x1230 [ 3442.250048] ? p9_client_flush+0x430/0x430 [ 3442.250975] ? trace_hardirqs_on+0x5b/0x180 [ 3442.251917] ? lockdep_init_map_type+0x2c7/0x780 [ 3442.252940] ? __raw_spin_lock_init+0x36/0x110 [ 3442.253935] v9fs_session_init+0x1dd/0x1680 [ 3442.254883] ? lock_release+0x680/0x680 [ 3442.255756] ? kmem_cache_alloc_trace+0x151/0x320 [ 3442.256802] ? v9fs_show_options+0x690/0x690 [ 3442.257765] ? trace_hardirqs_on+0x5b/0x180 [ 3442.258714] ? kasan_unpoison_shadow+0x33/0x50 [ 3442.259700] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3442.260802] v9fs_mount+0x79/0x8f0 [ 3442.261576] ? v9fs_write_inode+0x60/0x60 [ 3442.262474] legacy_get_tree+0x105/0x220 [ 3442.263365] vfs_get_tree+0x8e/0x300 [ 3442.264172] path_mount+0x1490/0x21e0 [ 3442.265000] ? strncpy_from_user+0x9e/0x470 [ 3442.265932] ? finish_automount+0xa90/0xa90 [ 3442.266883] ? getname_flags.part.0+0x1dd/0x4f0 [ 3442.267893] ? _copy_from_user+0xfb/0x1b0 [ 3442.268799] __x64_sys_mount+0x282/0x300 [ 3442.269681] ? copy_mnt_ns+0xa00/0xa00 [ 3442.270538] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3442.271684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3442.272807] do_syscall_64+0x33/0x40 [ 3442.273621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3442.274745] RIP: 0033:0x7f3826f8db19 [ 3442.275547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3442.279551] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3442.281204] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3442.282757] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3442.284312] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3442.285860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3442.287416] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:11:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151d1, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:11:36 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x4, 0x0) 13:11:36 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syncfs(r1) write$tcp_congestion(r1, 0x0, 0xfffffec6) copy_file_range(r0, &(0x7f0000000000)=0x3ff, r0, &(0x7f0000000080)=0x8, 0x7, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x7a5540, 0x4) 13:11:36 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d3", 0x3, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:11:36 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 13) 13:11:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151d2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:11:36 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xeffd) r1 = socket(0xb, 0x1, 0x80000000) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x200}}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0xc000) 13:11:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 58) 13:11:36 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x40, 0x9, 0x7fffffff, 0x7, 0x6, "a74a3b50ac7745cdd352cc3a99b6b85821aec1", 0x7fffffff, 0x28d}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) 13:11:36 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d3", 0x3, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 3442.609812] FAULT_INJECTION: forcing a failure. [ 3442.609812] name failslab, interval 1, probability 0, space 0, times 0 [ 3442.612232] CPU: 0 PID: 32603 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3442.613735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3442.615532] Call Trace: [ 3442.616107] dump_stack+0x107/0x167 [ 3442.616895] should_fail.cold+0x5/0xa [ 3442.617721] ? create_object.isra.0+0x3a/0xa30 [ 3442.618711] should_failslab+0x5/0x20 [ 3442.619530] kmem_cache_alloc+0x5b/0x310 [ 3442.620408] create_object.isra.0+0x3a/0xa30 [ 3442.621353] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3442.622448] kmem_cache_alloc_trace+0x151/0x320 [ 3442.623467] ? lockdep_init_map_type+0x2c7/0x780 [ 3442.624493] legacy_init_fs_context+0x44/0xe0 [ 3442.625455] ? generic_parse_monolithic+0x1f0/0x1f0 [ 3442.626535] alloc_fs_context+0x4fd/0x840 [ 3442.627435] path_mount+0xab1/0x21e0 [ 3442.628247] ? strncpy_from_user+0x9e/0x470 [ 3442.629178] ? finish_automount+0xa90/0xa90 [ 3442.630110] ? getname_flags.part.0+0x1dd/0x4f0 [ 3442.631122] ? _copy_from_user+0xfb/0x1b0 [ 3442.632025] __x64_sys_mount+0x282/0x300 [ 3442.632902] ? copy_mnt_ns+0xa00/0xa00 [ 3442.633751] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3442.634890] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3442.636000] do_syscall_64+0x33/0x40 [ 3442.636798] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3442.637898] RIP: 0033:0x7fc8902beb19 13:11:36 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x6, &(0x7f0000000040)=[{0x0, 0x3, 0x8, 0x6}, {0xf19e, 0xa7, 0x0, 0xfffffff9}, {0x0, 0x4b, 0xf7, 0x638c9b9b}, {0x401, 0x7, 0x2, 0x57e2}, {0xc04, 0x7f, 0x3f, 0x7}, {0xfff7, 0x6, 0x5, 0x4}]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/10], 0xc8) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x24) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x250100, 0x0) sendfile(r2, r3, &(0x7f00000001c0)=0x101, 0x9) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000240)=""/120) [ 3442.638699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3442.642861] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3442.644515] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3442.646061] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3442.647605] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 [ 3442.649135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3442.650672] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 [ 3442.688178] FAULT_INJECTION: forcing a failure. [ 3442.688178] name failslab, interval 1, probability 0, space 0, times 0 [ 3442.691286] CPU: 1 PID: 32674 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3442.693000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3442.695080] Call Trace: [ 3442.695739] dump_stack+0x107/0x167 [ 3442.696645] should_fail.cold+0x5/0xa [ 3442.697594] ? create_object.isra.0+0x3a/0xa30 [ 3442.698750] should_failslab+0x5/0x20 [ 3442.699702] kmem_cache_alloc+0x5b/0x310 [ 3442.700722] ? lock_release+0x680/0x680 [ 3442.701715] create_object.isra.0+0x3a/0xa30 [ 3442.702826] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3442.704087] __kmalloc_track_caller+0x177/0x370 [ 3442.705249] ? kstrdup_const+0x53/0x80 [ 3442.706215] kstrdup+0x36/0x70 [ 3442.707030] kstrdup_const+0x53/0x80 [ 3442.707947] kvasprintf_const+0x10c/0x1a0 [ 3442.708991] kobject_set_name_vargs+0x56/0x150 [ 3442.710137] kobject_init_and_add+0xc9/0x160 [ 3442.711250] ? kobject_create_and_add+0xb0/0xb0 [ 3442.712423] ? wait_for_completion_io+0x270/0x270 [ 3442.713628] ? kernfs_name_hash+0xe7/0x110 [ 3442.714698] ? kernfs_find_ns+0x256/0x380 [ 3442.715749] sysfs_slab_add+0x172/0x200 [ 3442.716740] __kmem_cache_create+0x3db/0x520 [ 3442.717840] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3442.719095] p9_client_create+0xc6a/0x1230 [ 3442.720155] ? p9_client_flush+0x430/0x430 [ 3442.721207] ? trace_hardirqs_on+0x5b/0x180 [ 3442.722281] ? lockdep_init_map_type+0x2c7/0x780 [ 3442.723469] ? __raw_spin_lock_init+0x36/0x110 [ 3442.724616] v9fs_session_init+0x1dd/0x1680 [ 3442.725694] ? lock_release+0x680/0x680 [ 3442.726705] ? kmem_cache_alloc_trace+0x151/0x320 [ 3442.727904] ? v9fs_show_options+0x690/0x690 [ 3442.729013] ? trace_hardirqs_on+0x5b/0x180 [ 3442.730087] ? kasan_unpoison_shadow+0x33/0x50 [ 3442.731227] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3442.732485] v9fs_mount+0x79/0x8f0 [ 3442.733366] ? v9fs_write_inode+0x60/0x60 [ 3442.734390] legacy_get_tree+0x105/0x220 [ 3442.735405] vfs_get_tree+0x8e/0x300 [ 3442.736326] path_mount+0x1490/0x21e0 [ 3442.737289] ? strncpy_from_user+0x9e/0x470 [ 3442.738336] ? finish_automount+0xa90/0xa90 [ 3442.739401] ? getname_flags.part.0+0x1dd/0x4f0 [ 3442.740538] ? _copy_from_user+0xfb/0x1b0 [ 3442.741553] __x64_sys_mount+0x282/0x300 [ 3442.742553] ? copy_mnt_ns+0xa00/0xa00 [ 3442.743507] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3442.744787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3442.746035] do_syscall_64+0x33/0x40 [ 3442.746943] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3442.748177] RIP: 0033:0x7f3826f8db19 [ 3442.749073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3442.753498] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3442.755341] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3442.757058] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3442.758779] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3442.760498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3442.762213] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:11:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151d3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:11:50 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 14) 13:11:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 59) 13:11:50 executing program 3: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x330, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x190, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49da931a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x34ec}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d774dbb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e28}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11ebf150}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe00}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x39fb}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbd2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x330}}, 0x20004880) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) write(r1, &(0x7f00000000c0)="9b006922a1266a5f427fae405b4a055ad0fbd8b2a8e5af6ee7db90aea3b556fa79b503a0992d5742f7ecceeefd39c914275315f8d41bdda0ac64572afb23d37952e81c32ea7d7c99877e1aee56ea4026d8c3ef8a1cc735fd02ed36a13d490fbaca5c44a5142d5c4af828b6f447c06d3cc345e0472155bba742da96d9b800020ee63be0156149e1f6cdfeaf", 0x8b) write$tcp_congestion(r0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000580)=0x800, 0x9) write$tcp_congestion(r0, &(0x7f0000000080)='lp\x00', 0x3) 13:11:50 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000000)='scalable\x00', 0x9) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 13:11:50 executing program 7: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000080)={{r0}, "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"}) write$tcp_congestion(r0, 0x0, 0xeffd) 13:11:50 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38dd31a2785b91226073fa0ee02", 0x10, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:11:50 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001002d10fad462c81700c201d4", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) [ 3456.262723] FAULT_INJECTION: forcing a failure. [ 3456.262723] name failslab, interval 1, probability 0, space 0, times 0 [ 3456.265173] CPU: 0 PID: 32943 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3456.266572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3456.268280] Call Trace: [ 3456.268835] dump_stack+0x107/0x167 [ 3456.269585] should_fail.cold+0x5/0xa [ 3456.270373] should_failslab+0x5/0x20 [ 3456.271153] __kmalloc_track_caller+0x79/0x370 [ 3456.272072] ? kstrdup_const+0x53/0x80 [ 3456.272850] kstrdup+0x36/0x70 [ 3456.273497] kstrdup_const+0x53/0x80 [ 3456.274252] __kernfs_new_node+0x9d/0x860 [ 3456.275100] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3456.276087] ? lock_acquire+0x197/0x470 [ 3456.276892] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3456.277954] ? lock_release+0x680/0x680 [ 3456.278756] ? find_held_lock+0x2c/0x110 [ 3456.279561] kernfs_new_node+0x18d/0x250 [ 3456.280375] kernfs_create_dir_ns+0x49/0x160 [ 3456.281246] sysfs_create_dir_ns+0x127/0x290 [ 3456.282123] ? sysfs_create_mount_point+0xb0/0xb0 [ 3456.283083] ? rwlock_bug.part.0+0x90/0x90 [ 3456.283934] ? do_raw_spin_unlock+0x4f/0x220 [ 3456.284811] kobject_add_internal+0x25e/0xa30 [ 3456.285715] kobject_init_and_add+0x101/0x160 [ 3456.286618] ? kobject_create_and_add+0xb0/0xb0 [ 3456.287557] ? wait_for_completion_io+0x270/0x270 [ 3456.288510] ? kernfs_name_hash+0xe7/0x110 [ 3456.289356] ? kernfs_find_ns+0x256/0x380 [ 3456.290194] sysfs_slab_add+0x172/0x200 [ 3456.290996] __kmem_cache_create+0x3db/0x520 [ 3456.291877] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3456.292878] p9_client_create+0xc6a/0x1230 [ 3456.293729] ? p9_client_flush+0x430/0x430 [ 3456.294580] ? trace_hardirqs_on+0x5b/0x180 [ 3456.295448] ? lockdep_init_map_type+0x2c7/0x780 [ 3456.296395] ? __raw_spin_lock_init+0x36/0x110 [ 3456.297312] v9fs_session_init+0x1dd/0x1680 [ 3456.298183] ? lock_release+0x680/0x680 [ 3456.299030] ? kmem_cache_alloc_trace+0x151/0x320 [ 3456.300002] ? v9fs_show_options+0x690/0x690 [ 3456.300881] ? trace_hardirqs_on+0x5b/0x180 [ 3456.301751] ? kasan_unpoison_shadow+0x33/0x50 [ 3456.302674] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3456.303697] v9fs_mount+0x79/0x8f0 [ 3456.304398] ? v9fs_write_inode+0x60/0x60 [ 3456.305222] legacy_get_tree+0x105/0x220 [ 3456.306021] vfs_get_tree+0x8e/0x300 [ 3456.306767] path_mount+0x1490/0x21e0 [ 3456.307522] ? strncpy_from_user+0x9e/0x470 [ 3456.308378] ? finish_automount+0xa90/0xa90 [ 3456.309236] ? getname_flags.part.0+0x1dd/0x4f0 [ 3456.310158] ? _copy_from_user+0xfb/0x1b0 [ 3456.310991] __x64_sys_mount+0x282/0x300 [ 3456.311788] ? copy_mnt_ns+0xa00/0xa00 [ 3456.312556] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3456.313590] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3456.314617] do_syscall_64+0x33/0x40 [ 3456.315368] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3456.316382] RIP: 0033:0x7f3826f8db19 [ 3456.317110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3456.320766] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3456.322277] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3456.323689] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3456.325094] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3456.326516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3456.327927] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3456.329441] kobject_add_internal failed for 9p-fcall-cache-1387 (error: -12 parent: slab) [ 3456.331154] kmem_cache_create(9p-fcall-cache-1387) failed with error -12 [ 3456.332532] CPU: 0 PID: 32943 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3456.333894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3456.335526] Call Trace: [ 3456.336046] dump_stack+0x107/0x167 [ 3456.336769] kmem_cache_create_usercopy.cold+0x17/0x65 [ 3456.337796] p9_client_create+0xc6a/0x1230 [ 3456.338638] ? p9_client_flush+0x430/0x430 [ 3456.339496] ? trace_hardirqs_on+0x5b/0x180 [ 3456.340356] ? lockdep_init_map_type+0x2c7/0x780 [ 3456.341291] ? __raw_spin_lock_init+0x36/0x110 [ 3456.342186] v9fs_session_init+0x1dd/0x1680 [ 3456.343033] ? lock_release+0x680/0x680 [ 3456.343809] ? kmem_cache_alloc_trace+0x151/0x320 [ 3456.344749] ? v9fs_show_options+0x690/0x690 [ 3456.345614] ? trace_hardirqs_on+0x5b/0x180 [ 3456.346454] ? kasan_unpoison_shadow+0x33/0x50 [ 3456.347352] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3456.348347] v9fs_mount+0x79/0x8f0 [ 3456.349037] ? v9fs_write_inode+0x60/0x60 [ 3456.349860] legacy_get_tree+0x105/0x220 [ 3456.350641] vfs_get_tree+0x8e/0x300 [ 3456.351375] path_mount+0x1490/0x21e0 [ 3456.352108] ? strncpy_from_user+0x9e/0x470 [ 3456.352943] ? finish_automount+0xa90/0xa90 [ 3456.353793] ? getname_flags.part.0+0x1dd/0x4f0 [ 3456.354699] ? _copy_from_user+0xfb/0x1b0 [ 3456.355509] __x64_sys_mount+0x282/0x300 [ 3456.356293] ? copy_mnt_ns+0xa00/0xa00 [ 3456.357059] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3456.358078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3456.359084] do_syscall_64+0x33/0x40 [ 3456.359802] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3456.360788] RIP: 0033:0x7f3826f8db19 [ 3456.361505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3456.365077] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3456.366554] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3456.367937] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3456.368693] FAULT_INJECTION: forcing a failure. [ 3456.368693] name failslab, interval 1, probability 0, space 0, times 0 [ 3456.369327] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3456.369337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3456.369348] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 [ 3456.379447] CPU: 1 PID: 32951 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3456.381107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3456.383071] Call Trace: [ 3456.383692] dump_stack+0x107/0x167 [ 3456.384548] should_fail.cold+0x5/0xa [ 3456.385437] ? v9fs_mount+0x5a/0x8f0 [ 3456.386309] should_failslab+0x5/0x20 [ 3456.387223] kmem_cache_alloc_trace+0x55/0x320 [ 3456.388282] ? v9fs_write_inode+0x60/0x60 [ 3456.389250] v9fs_mount+0x5a/0x8f0 [ 3456.390066] ? v9fs_write_inode+0x60/0x60 [ 3456.391022] legacy_get_tree+0x105/0x220 [ 3456.391953] vfs_get_tree+0x8e/0x300 [ 3456.392798] path_mount+0x1490/0x21e0 [ 3456.393687] ? strncpy_from_user+0x9e/0x470 [ 3456.394693] ? finish_automount+0xa90/0xa90 [ 3456.395676] ? getname_flags.part.0+0x1dd/0x4f0 [ 3456.396757] ? _copy_from_user+0xfb/0x1b0 [ 3456.397710] __x64_sys_mount+0x282/0x300 [ 3456.398637] ? copy_mnt_ns+0xa00/0xa00 [ 3456.399583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3456.400768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3456.401927] do_syscall_64+0x33/0x40 [ 3456.402780] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3456.403931] RIP: 0033:0x7fc8902beb19 [ 3456.404781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3456.408942] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3456.410699] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3456.412388] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3456.414103] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 [ 3456.415794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3456.417498] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 13:11:50 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38d", 0x4, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:11:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x151d4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0]) 13:11:50 executing program 7: write$tcp_congestion(0xffffffffffffffff, 0x0, 0xeffd) 13:11:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',', @ANYRESDEC=0x0]) (fail_nth: 60) 13:11:50 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c686173682c666f776e65723d547c34a8baad844afc7c4b39a2ff79ce1b3e687eca2cf99b4cdc6b39b6c2bdf57d23bee07640472ad0e37bffa6369d06b08a881b0482140dd4cb8bb84a1b07e683ef2c95e0de71ce154c0c052cd029135a", @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (fail_nth: 15) 13:11:50 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='cdg\x00', 0x4) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 13:11:50 executing program 3: setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x2}, @sack_perm, @window={0x3, 0x4, 0x6}, @sack_perm, @window={0x3, 0x0, 0x200}, @timestamp], 0x6) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000140)='bic\x00', 0x4) write$tcp_congestion(r0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x400}, {r0, 0x1010}, {r0, 0xe418}, {r2, 0x1}, {r3, 0x410}], 0x5, &(0x7f00000000c0), &(0x7f0000000100)={[0xdc15]}, 0x8) 13:11:50 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38d", 0x4, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) [ 3456.640564] FAULT_INJECTION: forcing a failure. [ 3456.640564] name failslab, interval 1, probability 0, space 0, times 0 [ 3456.642516] CPU: 0 PID: 33480 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 3456.643693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3456.644695] FAULT_INJECTION: forcing a failure. [ 3456.644695] name failslab, interval 1, probability 0, space 0, times 0 [ 3456.645072] Call Trace: [ 3456.645102] dump_stack+0x107/0x167 [ 3456.648814] should_fail.cold+0x5/0xa [ 3456.649441] ? create_object.isra.0+0x3a/0xa30 [ 3456.650150] should_failslab+0x5/0x20 [ 3456.650780] kmem_cache_alloc+0x5b/0x310 [ 3456.651454] ? cred_has_capability.isra.0+0x152/0x2b0 [ 3456.652295] create_object.isra.0+0x3a/0xa30 [ 3456.653023] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3456.653862] kmem_cache_alloc_trace+0x151/0x320 [ 3456.654632] ? v9fs_write_inode+0x60/0x60 [ 3456.655329] v9fs_mount+0x5a/0x8f0 [ 3456.655902] ? v9fs_write_inode+0x60/0x60 [ 3456.656571] legacy_get_tree+0x105/0x220 [ 3456.657244] vfs_get_tree+0x8e/0x300 [ 3456.657844] path_mount+0x1490/0x21e0 [ 3456.658475] ? strncpy_from_user+0x9e/0x470 [ 3456.659190] ? finish_automount+0xa90/0xa90 [ 3456.659886] ? getname_flags.part.0+0x1dd/0x4f0 [ 3456.660640] ? _copy_from_user+0xfb/0x1b0 [ 3456.661321] __x64_sys_mount+0x282/0x300 [ 3456.661949] ? copy_mnt_ns+0xa00/0xa00 [ 3456.662592] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3456.663409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3456.664251] do_syscall_64+0x33/0x40 [ 3456.664859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3456.665698] RIP: 0033:0x7fc8902beb19 [ 3456.666293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3456.669301] RSP: 002b:00007fc88d834188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3456.670534] RAX: ffffffffffffffda RBX: 00007fc8903d1f60 RCX: 00007fc8902beb19 [ 3456.671684] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3456.672827] RBP: 00007fc88d8341d0 R08: 0000000020000540 R09: 0000000000000000 [ 3456.673971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3456.675132] R13: 00007ffc167bcadf R14: 00007fc88d834300 R15: 0000000000022000 [ 3456.676301] CPU: 1 PID: 33474 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 3456.677999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3456.680007] Call Trace: [ 3456.680646] dump_stack+0x107/0x167 [ 3456.681522] should_fail.cold+0x5/0xa [ 3456.682441] ? create_object.isra.0+0x3a/0xa30 [ 3456.683541] should_failslab+0x5/0x20 [ 3456.684454] kmem_cache_alloc+0x5b/0x310 [ 3456.685444] create_object.isra.0+0x3a/0xa30 [ 3456.686499] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3456.687722] __kmalloc_track_caller+0x177/0x370 [ 3456.688833] ? kstrdup_const+0x53/0x80 [ 3456.689766] kstrdup+0x36/0x70 [ 3456.690531] kstrdup_const+0x53/0x80 [ 3456.691414] __kernfs_new_node+0x9d/0x860 [ 3456.692375] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 3456.693489] ? lock_acquire+0x197/0x470 [ 3456.694426] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3456.695673] ? lock_release+0x680/0x680 [ 3456.696611] ? find_held_lock+0x2c/0x110 [ 3456.697583] kernfs_new_node+0x18d/0x250 [ 3456.698544] kernfs_create_dir_ns+0x49/0x160 [ 3456.699608] sysfs_create_dir_ns+0x127/0x290 [ 3456.700691] ? sysfs_create_mount_point+0xb0/0xb0 [ 3456.701824] ? rwlock_bug.part.0+0x90/0x90 [ 3456.702838] ? do_raw_spin_unlock+0x4f/0x220 [ 3456.703889] kobject_add_internal+0x25e/0xa30 [ 3456.704960] kobject_init_and_add+0x101/0x160 [ 3456.706000] ? kobject_create_and_add+0xb0/0xb0 [ 3456.707092] ? wait_for_completion_io+0x270/0x270 [ 3456.708194] ? kernfs_name_hash+0xe7/0x110 [ 3456.709172] ? kernfs_find_ns+0x256/0x380 [ 3456.710134] sysfs_slab_add+0x172/0x200 [ 3456.711058] __kmem_cache_create+0x3db/0x520 [ 3456.712084] kmem_cache_create_usercopy+0x1db/0x2f0 [ 3456.713237] p9_client_create+0xc6a/0x1230 [ 3456.714232] ? p9_client_flush+0x430/0x430 [ 3456.715225] ? trace_hardirqs_on+0x5b/0x180 13:11:50 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x34}]}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x6, &(0x7f0000000140)=[{0x1ff, 0x1f, 0x2, 0xf436}, {0x40, 0x20, 0x9, 0x9}, {0xc7, 0x4}, {0xfff, 0x3f, 0x20, 0x7}, {0xffff, 0x1, 0x6, 0xfff}, {0x1f, 0x1, 0x3, 0x8}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x1, 0xfa, 0x6, 0x800}, {0x0, 0xfb, 0x1, 0x7}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x7, 0x8, 0x4e, 0x2}, {0x4, 0x0, 0x3, 0x10001}, {0x6, 0x7, 0x8, 0x2}]}) [ 3456.716224] ? lockdep_init_map_type+0x2c7/0x780 [ 3456.717541] ? __raw_spin_lock_init+0x36/0x110 [ 3456.718598] v9fs_session_init+0x1dd/0x1680 [ 3456.719610] ? lock_release+0x680/0x680 [ 3456.720560] ? kmem_cache_alloc_trace+0x151/0x320 [ 3456.721692] ? v9fs_show_options+0x690/0x690 [ 3456.722704] ? trace_hardirqs_on+0x5b/0x180 [ 3456.723716] ? kasan_unpoison_shadow+0x33/0x50 [ 3456.724752] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3456.725910] v9fs_mount+0x79/0x8f0 [ 3456.726746] ? v9fs_write_inode+0x60/0x60 [ 3456.727697] legacy_get_tree+0x105/0x220 [ 3456.728614] vfs_get_tree+0x8e/0x300 [ 3456.729479] path_mount+0x1490/0x21e0 [ 3456.730341] ? strncpy_from_user+0x9e/0x470 [ 3456.731332] ? finish_automount+0xa90/0xa90 [ 3456.732302] ? getname_flags.part.0+0x1dd/0x4f0 [ 3456.733357] ? _copy_from_user+0xfb/0x1b0 [ 3456.734301] __x64_sys_mount+0x282/0x300 [ 3456.735231] ? copy_mnt_ns+0xa00/0xa00 [ 3456.736121] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3456.737313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3456.738484] do_syscall_64+0x33/0x40 [ 3456.739332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3456.740485] RIP: 0033:0x7f3826f8db19 [ 3456.741325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3456.745467] RSP: 002b:00007f3824503188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3456.747212] RAX: ffffffffffffffda RBX: 00007f38270a0f60 RCX: 00007f3826f8db19 [ 3456.748819] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3456.750423] RBP: 00007f38245031d0 R08: 0000000020000540 R09: 0000000000000000 [ 3456.752029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3456.753621] R13: 00007ffc0404e89f R14: 00007f3824503300 R15: 0000000000022000 13:11:51 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f0000000140)="1464d38d", 0x4, 0x6}], 0x10000, &(0x7f0000000740)={[{@nocompress}, {@map_acorn}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@uid_gt={'uid>', 0xee01}}, {@euid_lt={'euid<', 0xee01}}]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="33180000000000000724"], 0xc8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 13:11:51 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x2000, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x4, 0x73, &(0x7f0000000100)="81d890a4131b52a0659e7becf4a19e3b8e3f4f8990fba55b93c5ea87bbcc88fc4947b1d137a80e9b71bcd219c0208eb78222c79b671ece0addc04a4e51c7cd12ff08afc059b8146a4d86ccd24bac9747c0355fc85fb6d1c08b9e98326e95d77dc55569559bb1ef5230b8d2b0aefbca2d734488", 0x1, 0x1}, {0x9, 0x88, &(0x7f0000000180)="4788ee94e8a9a5995b6114b8f3e6444e19c488707a129feeab7e43124840f33c5f17e25097ef673969f50dc517ada19a87905a9be2760ed0e9823c902f580dec2019c3e13262139ab7a6db13374c847d0cbb05e8a01152613a556cd945ebd9b7a9ca40958469824669b6e47876c1011c3b3cac7db8556810c28da79ba0498c0e06af0e6695c000e0", 0x1}]}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000640), 0x6e, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/153, 0x99}, {0x0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/96, 0x60}, {&(0x7f0000001840)=""/39, 0x27}, {&(0x7f0000001880)=""/123, 0x7b}], 0x6, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x201) perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x7, 0x7, 0x48, 0x0, 0x1, 0x900a0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0xaba}, 0xc000, 0x4, 0x1, 0x6, 0x6, 0xfffffff7, 0x401, 0x0, 0x7, 0x0, 0x3}, r3, 0x10, r1, 0xb) perf_event_open(&(0x7f0000000080)={0xc402a236714e4bba, 0x80, 0xc6, 0xf4, 0x9, 0x0, 0x0, 0x1, 0x84, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x3f, 0x4}, 0x840, 0xfff, 0x20db, 0x3, 0x3f, 0xc9, 0x1a, 0x0, 0x1ff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x2) write$tcp_congestion(r3, &(0x7f0000000040)='highspeed\x00', 0xa) [ 3457.016677] audit: type=1326 audit(1766927511.269:46): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33579 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6b1db2b19 code=0x0 [ 3469.554513] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88800dc6d240 (size 32): comm "syz-executor.4", pid 32943, jiffies 4298123160 (age 23.047s) hex dump (first 32 bytes): 39 70 2d 66 63 61 6c 6c 2d 63 61 63 68 65 2d 31 9p-fcall-cache-1 33 38 37 00 80 88 ff ff 00 00 00 00 00 00 00 00 387............. backtrace: [<000000004ef6a1bf>] kstrdup+0x36/0x70 [<000000004d858c06>] kstrdup_const+0x53/0x80 [<00000000a62f82d6>] kvasprintf_const+0x10c/0x1a0 [<000000005a1c9c9c>] kobject_set_name_vargs+0x56/0x150 [<00000000814df727>] kobject_init_and_add+0xc9/0x160 [<00000000b9c7b4af>] sysfs_slab_add+0x172/0x200 [<00000000e3317cdd>] __kmem_cache_create+0x3db/0x520 [<000000000311a07d>] kmem_cache_create_usercopy+0x1db/0x2f0 [<0000000067303392>] p9_client_create+0xc6a/0x1230 [<0000000078b41f63>] v9fs_session_init+0x1dd/0x1680 [<00000000f01f4eb6>] v9fs_mount+0x79/0x8f0 [<000000008701cf23>] legacy_get_tree+0x105/0x220 [<0000000029237f7b>] vfs_get_tree+0x8e/0x300 [<000000008ec32ab6>] path_mount+0x1490/0x21e0 [<00000000f1ba9561>] __x64_sys_mount+0x282/0x300 [<00000000ced9b0e8>] do_syscall_64+0x33/0x40 BUG: leak checking failed VM DIAGNOSIS: 13:12:14 Registers: info registers vcpu 0 RAX=ffff800000000000 RBX=0000000000000000 RCX=ffffffff8131ba92 RDX=0000000000000000 RSI=0000000000000118 RDI=ffffffff86c01280 RBP=ffffffff86c01280 RSP=ffff88806ce09c98 R8 =0000000000000000 R9 =ffffffff86c01398 R10=0000000000000000 R11=0000000000000001 R12=0000000000000118 R13=ffffffff85010b38 R14=ffffffff84e88a00 R15=0000000000000000 RIP=ffffffff816ce425 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd0c801ed8 CR3=000000000d058000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000412ce18000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e9c9b0 RBX=0000000000000001 RCX=ffffffff83e8461c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e9d178 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff8567ac88 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e9c9be RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc54f454928 CR3=000000000d058000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0a64656c69616620676e696b63656863 XMM02=31636e75662e6e75522e6c697475736f XMM03=00000000000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=86afadf9c9f83909bfd3901d753f7db7 XMM09=6291a339046faf60c512f9ac98c86569 XMM10=88266fd01d67970ac75260b67c9a60f4 XMM11=20f81381b86264df3b927f6f0efb1d16 XMM12=1464e52a5030717cc2d3436f39a105c0 XMM13=b4f59d33881b1dd23676946b41fe3c5c XMM14=5fa4182c983716fb2b85c6ebb6bb3a5e XMM15=9b01493a5b43975d532a8359b86f1145