912] loop3: detected capacity change from 0 to 32768 [ 408.424546] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 408.432495] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 408.444453] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 408.450734] loop5: detected capacity change from 0 to 1048576 [ 408.472732] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 408.474708] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 408.476707] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 408.482180] EXT4-fs error (device loop5): __ext4_get_inode_loc:4412: comm syz-executor.5: Invalid inode table block 0 in block_group 0 [ 408.487239] EXT4-fs (loop5): get root inode failed [ 408.488353] EXT4-fs (loop5): mount failed [ 422.418963] loop5: detected capacity change from 0 to 32768 [ 422.424358] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 422.427118] Invalid option length (516885) for dns_resolver key 14:43:58 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '.\x00'}) dup2(0xffffffffffffffff, r0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xe, &(0x7f0000000240)={&(0x7f0000000a00)={0x3f8, 0x1d, 0xc21, 0x70bd2d, 0x0, {0x4, 0x0, 0x2}}, 0x3f8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14:43:58 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) sendfile(r0, r1, 0x0, 0x100000001) fork() 14:43:58 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 14:43:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) unlink(&(0x7f0000000200)='./file0\x00') 14:43:58 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 23) 14:43:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) r1 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(0x0, r3, 0x0, 0xfffffffa) setfsgid(0xee01) syz_io_uring_setup(0x52e1, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8000000000000005}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) r6 = socket(0x11, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000140)=ANY=[@ANYBLOB="0100e700010875562b00006c473b6f1f893e0f0c35d400", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x125d, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) 14:43:58 executing program 6: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000400)={0x2, 'veth1_to_bond\x00', {0x991}, 0x3}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e00)={0xec, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_PROBE_RESP={0xca, 0x91, "0754cf87425c83b16e24cf3604d4b4d6e46ea168ebec9340edf369131fd0ad9965228285ce89cabba03c0822ec8c98152cb5fc15cc81ed3fe2375e491f8edab9c0c3b7fdaddac6f8554085c962182be622deca76c8ecfb73eb8dcb4d32094a4500dfd34706a0630befdca1bf63a1b366d3bce40bed0960de0c97cc88d2e0683956ef8b9f5512cc66b1c36a9610005bbc0c5cd44fec744c20c4cd8230ceae6ebd37d0e0c25749714546f205985d8c7e5b32aa5fb6d816e37bd6704989e1303743cb5bff370b23"}]}, 0xec}}, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000200)="0100", 0x80000, r1) socketpair(0x3d, 0xa, 0x7, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$nl_generic(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x154, 0x2e, 0x10, 0x70bd27, 0x25dfdbfc, {0x16}, [@generic="f4a96dfdbfdb7e2aa1cadf2c6641c30cee0447a294909b588d601f7e03b1b92956a41e93e75ed0d37f683032f4d163b9729c7ef6a6624c8863fb94c17786ef6550b33b800934576f683a1623fb4291830c0d5d10c2ed63a18ce5892b121ffdd52fbe34cd6d9730f50f61d63e8c3be7f0f003f35635009fdf235f303b7b6607a2e51ac6b22e570a11afff14aef8eec8f043dd4d7fed553ddae99b622080e5c11ea5aaad3868821597e4c0d9f88e6493", @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x67, 0x0, 0x0, @u32=0x7}, @nested={0x72, 0x29, 0x0, 0x1, [@generic="67f38ed8c13d9beb42f1878e08a79a061633c2a6eaaedabb2bedd8b10ff43a4b3d6d70e77d15cd0cead8434a39c5f3a0296d07d378738bc827f46b27db723a39f8efc8635c62f3a5c6026486e2f85f99894098b21bebf29c2d12514840dad5d6f1cb853ca0319572cf0c40579728"]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000040}, 0x20048086) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xac, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xea, 0x15}}}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x4, 0x6}, {0x10, 0x2}, {0x3, 0x6}, {0xd, 0x2}, {0x5, 0x1}, {0x4, 0x7}, {0xdb, 0x7}, {0x1f}, {0x7f, 0x5}, {0x6}, {0x0, 0x6}, {0x1c, 0xfa}, {0x1d, 0x6}, {0x8b, 0x1}, {0x2}, {0x0, 0x5}, {0x1f, 0x3}, {0x72, 0x6}, {0x8, 0x5}, {0xcc, 0x7}], "dea3f1e1577f0828"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xff, 0x3}, {0x8, 0x3}, {0x1, 0x5}, {0xff}, {0x3, 0x6}, {0x6, 0x1}, {0x7}, {0x2, 0x5}], "96a677ad0cbd2e9d"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x7, 0x4}, {0x40, 0x4}, {0xe, 0x6}, {0x80}, {0x80}, {0x4, 0x5}, {0xe0, 0x5}, {0x3f, 0x4}, {0x0, 0x4}, {0x1}, {0xe4, 0x2}, {0x64, 0x6}, {0x7, 0x3}], "07a0230837531b27"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x9, 0x2}, {0xea, 0x5}, {0x3f, 0x6}, {0x1, 0x1}], "c5d235f733ec1916"}}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x40) 14:43:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) mknod(&(0x7f0000000040)='./file1/file0\x00', 0x8000, 0x9) pidfd_open(0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) [ 422.458185] FAULT_INJECTION: forcing a failure. [ 422.458185] name failslab, interval 1, probability 0, space 0, times 0 [ 422.460951] CPU: 1 PID: 5369 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 422.462502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 422.464393] Call Trace: [ 422.464989] dump_stack+0x107/0x167 [ 422.465825] should_fail.cold+0x5/0xa [ 422.466690] ? io_rsrc_data_alloc+0x10e/0x520 [ 422.467719] should_failslab+0x5/0x20 [ 422.468583] __kmalloc+0x72/0x390 [ 422.469369] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 422.470522] io_rsrc_data_alloc+0x10e/0x520 [ 422.471499] ? io_buffer_unmap+0x2d0/0x2d0 [ 422.472470] io_sqe_buffers_register+0x136/0x880 [ 422.473549] ? io_sqd_handle_event+0x350/0x350 [ 422.474587] ? __fget_files+0x2f8/0x520 [ 422.475508] __do_sys_io_uring_register+0x1648/0x2fa0 [ 422.476681] ? io_recvmsg+0xd70/0xd70 [ 422.477547] ? fput_many+0x2f/0x1a0 [ 422.478371] ? ksys_write+0x1a9/0x260 [ 422.479252] ? __ia32_sys_read+0xb0/0xb0 [ 422.480189] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 422.481379] ? syscall_enter_from_user_mode+0x1d/0x50 [ 422.482550] do_syscall_64+0x33/0x40 [ 422.483400] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 422.484545] RIP: 0033:0x7f748a34ab19 [ 422.485373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 422.489508] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 422.491231] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 422.492839] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 422.494447] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 422.496059] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 422.497664] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:43:59 executing program 6: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0x278) sendfile(r1, r2, 0x0, 0x100000001) fork() dup(r0) [ 422.521314] netlink: 996 bytes leftover after parsing attributes in process `syz-executor.1'. 14:43:59 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) sendfile(r0, r1, 0x0, 0x100000001) 14:43:59 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 24) 14:43:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) mknod(&(0x7f0000000040)='./file1/file0\x00', 0x8000, 0x9) pidfd_open(0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) [ 422.586178] FAULT_INJECTION: forcing a failure. [ 422.586178] name failslab, interval 1, probability 0, space 0, times 0 [ 422.587679] CPU: 0 PID: 5387 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 422.588511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 422.589521] Call Trace: [ 422.589851] dump_stack+0x107/0x167 [ 422.590304] should_fail.cold+0x5/0xa [ 422.590773] ? create_object.isra.0+0x3a/0xa30 [ 422.591337] should_failslab+0x5/0x20 [ 422.591804] kmem_cache_alloc+0x5b/0x310 [ 422.592317] create_object.isra.0+0x3a/0xa30 [ 422.592852] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 422.593474] __kmalloc+0x16e/0x390 [ 422.593914] io_rsrc_data_alloc+0x10e/0x520 [ 422.594439] ? io_buffer_unmap+0x2d0/0x2d0 [ 422.594966] io_sqe_buffers_register+0x136/0x880 [ 422.595550] ? lock_downgrade+0x6d0/0x6d0 [ 422.596058] ? io_sqd_handle_event+0x350/0x350 [ 422.596620] ? __fget_files+0x2f8/0x520 [ 422.597116] __do_sys_io_uring_register+0x1648/0x2fa0 [ 422.597746] ? io_recvmsg+0xd70/0xd70 [ 422.598208] ? io_schedule_timeout+0x140/0x140 [ 422.598767] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 422.599325] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 422.599978] ? ksys_write+0x1a9/0x260 [ 422.600443] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 422.601076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 422.601704] do_syscall_64+0x33/0x40 [ 422.602155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 422.602781] RIP: 0033:0x7f748a34ab19 [ 422.603232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 422.605454] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 422.606376] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 422.607251] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 422.608114] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 422.608984] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 422.609849] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 422.611923] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 14:43:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) unlink(&(0x7f0000000200)='./file0\x00') [ 422.629331] cgroup2: Unknown parameter '' 14:43:59 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 25) 14:43:59 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_io_uring_setup(0x2b68, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) [ 422.711846] loop5: detected capacity change from 0 to 32768 14:43:59 executing program 6: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0x278) sendfile(r1, r2, 0x0, 0x100000001) fork() dup(r0) [ 422.751347] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 422.760757] FAULT_INJECTION: forcing a failure. [ 422.760757] name failslab, interval 1, probability 0, space 0, times 0 [ 422.762035] CPU: 0 PID: 5406 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 422.762805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 422.763741] Call Trace: [ 422.764041] dump_stack+0x107/0x167 [ 422.764453] should_fail.cold+0x5/0xa [ 422.764883] ? create_object.isra.0+0x3a/0xa30 [ 422.765398] should_failslab+0x5/0x20 [ 422.765827] kmem_cache_alloc+0x5b/0x310 [ 422.766292] create_object.isra.0+0x3a/0xa30 [ 422.766787] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 422.767357] __kmalloc+0x16e/0x390 [ 422.767759] io_rsrc_data_alloc+0x10e/0x520 [ 422.768238] ? io_buffer_unmap+0x2d0/0x2d0 [ 422.768714] io_sqe_buffers_register+0x136/0x880 [ 422.769249] ? io_sqd_handle_event+0x350/0x350 [ 422.769760] ? __fget_files+0x2f8/0x520 [ 422.770215] __do_sys_io_uring_register+0x1648/0x2fa0 [ 422.770801] ? io_recvmsg+0xd70/0xd70 [ 422.771226] ? fput_many+0x2f/0x1a0 [ 422.771633] ? ksys_write+0x1a9/0x260 [ 422.772058] ? __ia32_sys_read+0xb0/0xb0 [ 422.772520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 422.773105] ? syscall_enter_from_user_mode+0x1d/0x50 [ 422.773699] do_syscall_64+0x33/0x40 [ 422.774115] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 422.774695] RIP: 0033:0x7f748a34ab19 [ 422.775115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 422.777175] RSP: 002b:00007f748789f188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 422.778029] RAX: ffffffffffffffda RBX: 00007f748a45e020 RCX: 00007f748a34ab19 [ 422.778832] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 422.779632] RBP: 00007f748789f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 422.780428] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 422.781225] R13: 00007fff636a0a9f R14: 00007f748789f300 R15: 0000000000022000 14:43:59 executing program 1: ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x0, @multicast2}}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0xba2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000140)=""/74, 0x4a, 0x1ff) openat(r0, &(0x7f0000000040)='./file0\x00', 0x50d040, 0x160) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000001ac1e000101000000070000000211df3bfc00"/33], 0x2c) 14:43:59 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xc8b02, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$DVD_AUTH(r0, 0x324, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/73, 0x49}, {&(0x7f00000000c0)=""/168, 0xa8}, {&(0x7f0000000180)=""/116, 0x74}], 0x3, 0x9, 0x7a) 14:43:59 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) 14:43:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') 14:43:59 executing program 7: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0171c200000000000000000086dd6096033f00303a00fc020000000000800000000000000000ff120000000000007800000000600009e60000000000000000000000000000ffffac1e0001fe8000000008000000000000000000bb"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)={@link_local, @empty, @void, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0x20, 0x2, 0x0, 0x0, "025711870210f26444ecf2c61b17c44f1057a8118f57c29797e40a40c74857dbdbd55bbdb1b733c2710df4ae4742be2908f508a516e13542c8c4225f03f5fe0a"}}}}, &(0x7f00000000c0)={0x0, 0x4, [0x565, 0xbff, 0xbb9, 0xbd1]}) syz_emit_ethernet(0x1d, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000440)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@canfd={0xd, {{0x2, 0x1, 0x0, 0x1}, 0x38, 0x3, 0x0, 0x0, "599b7a665046264ee5621dcf28dad5b4474711775218f7c3f38c6b5bb66a055f5f0cd3bea8e64584fa41ef4bceb707186269893c6609120adacba8cef20dedaf"}}}}, &(0x7f0000000200)={0xffffffff, 0x2003, [0x9f1, 0x7, 0xf, 0x1c]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfe, 0x3, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000001, 0x0, @perf_bp={0x0}, 0x1808, 0x0, 0x0, 0x3, 0x0, 0x66, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpgid(0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x37f, 0xca4}, &(0x7f0000000100)) r0 = gettid() prlimit64(r0, 0xf, 0x0, &(0x7f0000000400)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@multicast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @remote, @loopback, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @loopback}}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) rt_tgsigqueueinfo(0x0, r2, 0x7, &(0x7f0000000280)={0x23, 0x9, 0x80000001}) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) 14:43:59 executing program 5: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x5b, "20086eebb5bbc98b037c6eaac1173e59b136b9bc2d54a50817b6e9fc9fd5a562b8320b2a4d463fb039268e54a03da6a3d2ac94dc6fdc31071c1e8a9e4b55d37be1390c9032fc777928500923896b14037dfe95c3a1617083f8eb22"}, &(0x7f0000000240)=0x7f) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r2, r3, 0x0, 0x10000000c) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fspick(r1, &(0x7f0000000140)='./file2\x00', 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c0a, 0x0) [ 422.913645] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 14:43:59 executing program 1: setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) ioctl$sock_bt_hci(r3, 0x400448ee, &(0x7f00000001c0)="a430617e68c2c301b7f972687ff5577485bdf1f8041fe19013c6968702f12277dd3c4bae24c113176c09ac9dc1d464d4b118e907d2faf26c6ead6d1ae4494bd73860d54fa7b8a3c46931") r4 = dup2(r0, r2) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="18b2da1d0722cab05b33f71bb3c15d4d58feb983b99d9d9df62b39b79ea8c7c16805460e09d789f6ee859863f9de98c8c655d135fd531a1496d6b334ebf904dd7c2346e86c7531968bf08f181530a9d6975d38b88703402c9ebdd9df20dcb43ca17994b25fcc3d48f8eb4617450da2407e9e2d948d8fa3b8e5e9899d2d655f0325589b3f1a4b24b48c5e63cb3811fe970e609584cf2af8cca2afed1c1b8f88cd", 0xa0}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000001e00)=ANY=[@ANYRESHEX=r4, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES64, @ANYRES16=r0, @ANYRESOCT, @ANYBLOB="08000300000000001400020076657468315f6d61637674617000000008000100", @ANYRES32, @ANYBLOB="0900030001000000e6b3820a031709fe6c5787a16a129d5d9e734a8cad0738e85ca6400000002e167bddb700"], 0x12b8}, 0x1, 0x0, 0x0, 0x40040}, 0x40045) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'xfrm0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, 0x0, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb8, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5e}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x4}]}, 0xb8}}, 0x8040) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x300603d4661b39f2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x45189, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 422.926310] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 422.927435] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 422.928202] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 422.928935] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 422.929794] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 422.932802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 422.933621] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 422.934755] Buffer I/O error on dev sr0, logical block 0, async page read [ 422.935658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 422.936261] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 422.937374] Buffer I/O error on dev sr0, logical block 1, async page read [ 422.938234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 422.938862] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 422.939969] Buffer I/O error on dev sr0, logical block 2, async page read [ 422.942628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 422.943240] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 422.944356] Buffer I/O error on dev sr0, logical block 3, async page read [ 422.945207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 422.945825] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 422.946944] Buffer I/O error on dev sr0, logical block 4, async page read [ 422.947795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 422.948395] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 422.949518] Buffer I/O error on dev sr0, logical block 5, async page read [ 422.950401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 422.951035] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 422.952151] Buffer I/O error on dev sr0, logical block 6, async page read [ 422.956612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 422.957218] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 422.958328] Buffer I/O error on dev sr0, logical block 7, async page read [ 423.033545] loop5: detected capacity change from 0 to 32768 [ 423.041067] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 423.140761] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 14:44:12 executing program 5: r0 = mq_open(&(0x7f0000000000)=':\x00', 0x1, 0x48, &(0x7f0000000040)={0xd2f, 0x5, 0xed4e, 0x400}) read(r0, &(0x7f0000000080)=""/45, 0x2d) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mq_timedreceive(r0, &(0x7f00000000c0)=""/216, 0xd8, 0x8000, &(0x7f00000001c0)) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) close(0x4) 14:44:12 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) socketpair(0x0, 0x0, 0x2, 0x0) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x0) 14:44:12 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @rand_addr=0xe4010105}}}, 0x108) close(r1) read(r0, &(0x7f0000000000)=""/226, 0xe2) 14:44:12 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') 14:44:12 executing program 6: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0x278) sendfile(r1, r2, 0x0, 0x100000001) fork() dup(r0) 14:44:12 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:44:12 executing program 1: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x409401, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c00000000000633bf00000000000000000000000000189078010000006c54ad14a92fce8b4d9ded40"], 0x0) syz_emit_ethernet(0x10c, &(0x7f0000000200)={@broadcast, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0x8001, 0x0, 0x1}, {0xc5e}, {0x8}, {0x5, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x40}, {0x6}], @llc={@llc={0xfe, 0xe, "d2a6", "cdf02c9d5dec7261b73efc5c920290c07dd8aeb3ca7f3b9442d23174081671d2c4560ab2f96903049f3799276825e61a9fc294eb215076be9d2781b333e9b3fa255367711f5ea09f0ab5a77a88c46b9c45ed1214514178f924634c0f57e474f8a4041ac3839927ae95277f8122d0222adaa739e29ba9d7902ea2318487a3d964937f50a06bd02566e31c6194d8c6263654c818d4d2349de78773ace07f3606f7bfd0f7aeb4133eefd42e027fda274f1924ac3e5c6f1ee0d34226ca4ccc2cfd6aad68ff6f9fc4a8c735dc135651f9fab68fc5d5dedba319410824"}}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x60, 0xa8, 0xa89, 0x206]}) prlimit64(0x0, 0x9, 0x0, &(0x7f00000000c0)) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000180)=0x1c, 0x800) recvfrom(r1, &(0x7f0000000340)=""/199, 0xc7, 0x10060, &(0x7f0000000440)=@pppoe={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'ip6tnl0\x00'}}, 0x80) 14:44:12 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 26) [ 435.931383] FAULT_INJECTION: forcing a failure. [ 435.931383] name failslab, interval 1, probability 0, space 0, times 0 [ 435.932839] CPU: 0 PID: 5455 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 435.933683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 435.934707] Call Trace: [ 435.935052] dump_stack+0x107/0x167 [ 435.935502] should_fail.cold+0x5/0xa [ 435.935976] ? create_object.isra.0+0x3a/0xa30 [ 435.936539] should_failslab+0x5/0x20 [ 435.937007] kmem_cache_alloc+0x5b/0x310 [ 435.937511] create_object.isra.0+0x3a/0xa30 [ 435.938063] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 435.938693] __kmalloc+0x16e/0x390 [ 435.939146] io_rsrc_data_alloc+0x10e/0x520 [ 435.939676] ? io_buffer_unmap+0x2d0/0x2d0 [ 435.940201] io_sqe_buffers_register+0x136/0x880 [ 435.940791] ? io_sqd_handle_event+0x350/0x350 [ 435.941358] ? __fget_files+0x2f8/0x520 [ 435.941860] __do_sys_io_uring_register+0x1648/0x2fa0 [ 435.942506] ? io_recvmsg+0xd70/0xd70 [ 435.942990] ? fput_many+0x2f/0x1a0 [ 435.943432] ? ksys_write+0x1a9/0x260 [ 435.943901] ? __ia32_sys_read+0xb0/0xb0 [ 435.944404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 435.945046] ? syscall_enter_from_user_mode+0x1d/0x50 [ 435.945678] do_syscall_64+0x33/0x40 [ 435.946131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 435.946761] RIP: 0033:0x7f748a34ab19 [ 435.947221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 435.949469] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 435.950402] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 435.951295] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 435.952166] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 435.953035] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 435.953911] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:44:12 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x20a280, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 14:44:12 executing program 7: finit_module(0xffffffffffffffff, &(0x7f0000000580)='/,[\\\x00', 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe44584e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f707e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82bf6b"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="01008a527bb46ecd14ae0000", @ANYRES32=r1, @ANYBLOB="08040000000000002e2f66696c653100"]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r4 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000440)={0xcd7a, 0x28, '\x00', 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file1\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffc, 0x2, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010025b42453158f4c75f6bd710000000000030000000500627c4712aa3086137d209bc3dc695d2aa800072c359e3cb520b9265af4fd780020fbb35351142c7d3355a2791220bec74643bbd3a4c603f0e19935a3300d3498ca3a5b520bf27ab8fd83f62ff074008501d03c58a80414819ce31b0f1efdc88c22"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000800)={0x0, 0x0, "17f042"}) [ 436.078537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 436.106738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 436.120982] syz-executor.7 (5464) used greatest stack depth: 23608 bytes left 14:44:27 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:44:27 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000180)={0x3, 0x3, 0x5b, &(0x7f0000000240)=""/91}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file1\x00', 0x40000010) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)={0x2001}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x208201, 0x0) io_uring_enter(r4, 0x7fd5, 0x679e, 0x0, &(0x7f00000000c0)={[0x2]}, 0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000004c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4007, @fd_index=0x2, 0x100000000, 0x7, 0x7fff, 0x15, 0x1, {0x2}}, 0x5) 14:44:27 executing program 7: ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000200)) clone3(&(0x7f0000001200)={0x20001000, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/printk', 0x10001, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2869400, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@mmap}, {@aname={'aname', 0x3d, '&+'}}, {@cache_mmap}, {@posixacl}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@obj_user}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@audit}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, '\\.'}}, {@obj_role={'obj_role', 0x3d, '/%-[q\xcb:,'}}]}}) [ 450.689789] 9pnet: Insufficient options for proto=fd 14:44:27 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') 14:44:27 executing program 1: mknod$loop(&(0x7f0000000a40)='./file0\x00', 0x0, 0x1) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x8000, 0xa8) removexattr(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=@known='user.incfs.id\x00') lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x0, 0x3, 0x1, 0x9, 0xfe, "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"}, 0x107, 0x1) 14:44:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) ftruncate(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="b15ed7ae33fc"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1, 0x7820}}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x3, 0x75c, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) 14:44:27 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 27) 14:44:27 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) sendfile(r0, r1, 0x0, 0x100000001) fork() [ 450.722697] FAULT_INJECTION: forcing a failure. [ 450.722697] name failslab, interval 1, probability 0, space 0, times 0 [ 450.725327] CPU: 1 PID: 5486 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 450.726751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 450.728502] Call Trace: [ 450.729056] dump_stack+0x107/0x167 [ 450.729823] should_fail.cold+0x5/0xa [ 450.730627] ? create_object.isra.0+0x3a/0xa30 [ 450.731605] should_failslab+0x5/0x20 [ 450.732399] kmem_cache_alloc+0x5b/0x310 [ 450.733250] create_object.isra.0+0x3a/0xa30 [ 450.734162] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 450.735253] __kmalloc+0x16e/0x390 [ 450.736002] io_rsrc_data_alloc+0x10e/0x520 [ 450.736897] ? io_buffer_unmap+0x2d0/0x2d0 [ 450.737789] io_sqe_buffers_register+0x136/0x880 [ 450.738782] ? io_sqd_handle_event+0x350/0x350 [ 450.739759] ? __fget_files+0x2f8/0x520 [ 450.740605] __do_sys_io_uring_register+0x1648/0x2fa0 [ 450.741688] ? io_recvmsg+0xd70/0xd70 [ 450.742488] ? fput_many+0x2f/0x1a0 [ 450.743270] ? ksys_write+0x1a9/0x260 [ 450.744062] ? __ia32_sys_read+0xb0/0xb0 [ 450.744920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 450.746014] ? syscall_enter_from_user_mode+0x1d/0x50 [ 450.747105] do_syscall_64+0x33/0x40 [ 450.747901] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 450.748964] RIP: 0033:0x7f748a34ab19 [ 450.749734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 450.753597] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 450.755204] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 450.756684] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 450.758174] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 450.759685] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 450.761166] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:44:27 executing program 1: ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000300)={{}, "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"}) r0 = getpgrp(0x0) pidfd_open(r0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x306040, 0xb0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder-control\x00', 0x27eb8cb38fa3d54f, 0x0) fcntl$dupfd(r5, 0x406, r1) pidfd_send_signal(r4, 0x18, &(0x7f0000000180)={0x2b, 0x7fffffff, 0x1}, 0x0) fallocate(r4, 0x0, 0x0, 0x8000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x7f, 0x40, 0x40, 0x2, 0x0, 0x9, 0x20146, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x60, 0x4, @perf_config_ext={0xd6b, 0x1}, 0x45, 0xfffffffffffffffe, 0x0, 0x3, 0x7, 0xaa, 0x4, 0x0, 0x9, 0x0, 0xb0}, r0, 0x6, 0xffffffffffffffff, 0xf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x2}) 14:44:27 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') 14:44:27 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:44:27 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') [ 450.929401] 9pnet: Insufficient options for proto=fd 14:44:27 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 28) 14:44:27 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) sendfile(r0, r1, 0x0, 0x100000001) 14:44:27 executing program 7: syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c485cd4b87a0348b7aaaaaaaaaaaaaaaaaaaaaabb8100320008004600003400000003000190780a010101ac1414aa44040003040090780040000045000000000000000000000000000000ac1414aa81f5d40143bf047f9a0ada7a00816a7d0f84c75612291ec25a35dc1ec982c5cb8a4c1a2784bc1b6800d54c00e5376a9720711558ccb534f1233b30233c59659c775a2150c9"], 0x0) 14:44:27 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) ioctl$TCSETSF2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000400)={0x0, 0x0, 0x85, 0x0, 0x0, "b029c2d289880433c7e3773236ffd122724295"}) syz_open_pts(0xffffffffffffffff, 0x80000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) syz_open_pts(0xffffffffffffffff, 0x440) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x840, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'tunl0\x00'}) dup3(r1, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) dup3(r1, 0xffffffffffffffff, 0x492e399b1200ffa4) dup(r0) [ 450.996026] FAULT_INJECTION: forcing a failure. [ 450.996026] name failslab, interval 1, probability 0, space 0, times 0 [ 450.998443] CPU: 1 PID: 5505 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 450.999916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 451.001683] Call Trace: [ 451.002258] dump_stack+0x107/0x167 [ 451.003049] should_fail.cold+0x5/0xa [ 451.003895] ? create_object.isra.0+0x3a/0xa30 [ 451.004877] should_failslab+0x5/0x20 [ 451.005692] kmem_cache_alloc+0x5b/0x310 [ 451.006555] create_object.isra.0+0x3a/0xa30 [ 451.007532] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 451.008631] __kmalloc+0x16e/0x390 [ 451.009408] io_rsrc_data_alloc+0x10e/0x520 [ 451.010343] ? io_buffer_unmap+0x2d0/0x2d0 [ 451.011290] io_sqe_buffers_register+0x136/0x880 [ 451.012321] ? io_sqd_handle_event+0x350/0x350 [ 451.013308] ? __fget_files+0x2f8/0x520 [ 451.014185] __do_sys_io_uring_register+0x1648/0x2fa0 [ 451.015341] ? io_recvmsg+0xd70/0xd70 [ 451.016160] ? fput_many+0x2f/0x1a0 [ 451.016939] ? ksys_write+0x1a9/0x260 [ 451.017758] ? __ia32_sys_read+0xb0/0xb0 [ 451.018638] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 451.019793] ? syscall_enter_from_user_mode+0x1d/0x50 [ 451.020914] do_syscall_64+0x33/0x40 [ 451.021719] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 451.022825] RIP: 0033:0x7f748a34ab19 [ 451.023649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 451.027637] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 451.029277] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 451.030811] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 451.032362] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 451.033889] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 451.035438] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:44:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) inotify_init1(0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x2000003) read(r1, &(0x7f0000000500)=""/251, 0xfb) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r4, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x7a}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "34f39fc59777a2b4c6975080636c6651"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffff8000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40085) 14:44:27 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') 14:44:27 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:44:27 executing program 7: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) fcntl$notify(r1, 0x402, 0x8) 14:44:27 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x278) [ 451.198474] 9pnet: Insufficient options for proto=fd 14:44:41 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 29) 14:44:41 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x8d}, [@typed={0x8, 0x2000, 0x0, 0x0, @fd=r1}]}, 0x1c}}, 0x0) 14:44:41 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') 14:44:41 executing program 3: perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x4) 14:44:41 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:44:41 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:44:41 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xc8b03, 0x0) ioctl$SG_IO(r1, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0xa6d, &(0x7f0000000000)=0x0) io_pgetevents(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x8]}, 0x8}) r3 = open_tree(r1, &(0x7f0000000280)='./file0\x00', 0x1) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x80, r0, &(0x7f0000000100)="bc4968dd4ca1c4dc410f933bc7eff3223d765a20610d9a6bd3285b6d4bd1", 0x1e, 0xfffffffffffffffe, 0x0, 0x1, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000000440)="709f9e0fc45d9a6462338f5826b001a1e03b2cdb803378a2b02c5ad40fc52c6d242c0425e684436b621e195b870be09916547c09c980b20cc532cfcf57a917c212f88e5befe79744e2640457ee60a070cfc97dfe60a6e2c6a8400cf5ac30ab0a1f0e4b4714f0ad75b72579c8251cf3a4fb6a0661a9ea9cbfa3c9bb528585aa940fe14cbad1f8730e8bf0870151199a7447a442e16f2b670e9ca673663ed03fee68d4c6879ddfaa6ad8c651b5f349acb62dc4195ac74cebc9b7ae5c86be30d8a3857e12c5185e88ff6e7dd1f7f73b12769e54fa2cf5bbee2f7788e95796ab0d90d4cdea5a8cc6", 0xe6, 0x5, 0x0, 0x1}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$incfs(r1, &(0x7f0000000040)='.log\x00', 0x0, 0x10) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x16000, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ffffffff3e302f27092f63796c653000"]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="00000000000000002e2f66e96c653000"]) fallocate(r1, 0x0, 0x200, 0x100) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x12}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000) r8 = io_uring_setup(0x396d, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000c00), 0x1312) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000380)={0x0, r8, 0x2, 0x3, 0x3f, 0x2}) 14:44:41 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x5c1000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x3f, 0x90000, 0x1, 'queue0\x00', 0x800}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 464.538450] FAULT_INJECTION: forcing a failure. [ 464.538450] name failslab, interval 1, probability 0, space 0, times 0 [ 464.541230] CPU: 1 PID: 5548 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 464.542777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 464.544696] Call Trace: [ 464.545295] dump_stack+0x107/0x167 [ 464.546141] should_fail.cold+0x5/0xa [ 464.547018] ? io_rsrc_data_alloc+0x10e/0x520 [ 464.548064] should_failslab+0x5/0x20 [ 464.548934] __kmalloc+0x72/0x390 [ 464.549747] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 464.550895] io_rsrc_data_alloc+0x10e/0x520 [ 464.551896] ? io_buffer_unmap+0x2d0/0x2d0 [ 464.552904] io_sqe_buffers_register+0x136/0x880 [ 464.553978] ? io_sqd_handle_event+0x350/0x350 [ 464.555028] ? __fget_files+0x2f8/0x520 [ 464.555947] __do_sys_io_uring_register+0x1648/0x2fa0 [ 464.557120] ? io_recvmsg+0xd70/0xd70 [ 464.557982] ? fput_many+0x2f/0x1a0 [ 464.558804] ? ksys_write+0x1a9/0x260 [ 464.559672] ? __ia32_sys_read+0xb0/0xb0 [ 464.560600] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 464.561791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 464.562971] do_syscall_64+0x33/0x40 [ 464.563835] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 464.565003] RIP: 0033:0x7f748a34ab19 [ 464.565870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 464.570026] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 464.571761] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 464.573378] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 464.575022] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 464.576657] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 464.578318] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:44:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') 14:44:41 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:44:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') r1 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x0, 0x3, 0x5}) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000080)={0x1, 0x7fa, 0x2bf9e2ba, 0x8001, 0x1, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200}, 0x0, 0x6, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4084, 0xff4, 0xf0ff21) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x1}, &(0x7f0000000140)=0x28) 14:44:41 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 464.677043] 9pnet: Insufficient options for proto=fd 14:44:55 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 30) 14:44:55 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x5c1000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x3f, 0x90000, 0x1, 'queue0\x00', 0x800}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 14:44:55 executing program 3: keyctl$get_keyring_id(0x0, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/35, 0x23) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) timer_create(0x0, 0x0, &(0x7f00000004c0)=0x0) timer_gettime(r0, &(0x7f0000000500)) timer_gettime(r0, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000180)={0x0, 0xb, 0x0, @thr={0x0, &(0x7f0000000640)}}, &(0x7f00000004c0)=0x0) timer_gettime(r1, &(0x7f0000000500)) timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000080)) sendto$packet(0xffffffffffffffff, &(0x7f0000000700)="5e849e5bb8bb0b9668541f79a9257f70b7cb684356de88e126831a2432c01b2ed4e5ab7ca99a0243e7a65ebed19d0a47f2d955ebcf64c4ae620c", 0x3a, 0x4048054, &(0x7f0000000780)={0x11, 0x2, 0x0, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) syz_usb_connect$uac1(0x2, 0xa0, &(0x7f0000000240)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x90, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0x1f}, [@mixer_unit={0x9, 0x24, 0x4, 0x2, 0x7e, "3342040f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x3, 0x3}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x40, 0x7, 0x9, "99b54693"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x80, 0x3, 0x3f, 0x7, "cf1531"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x8, 0x80, {0x7, 0x25, 0x1, 0x180, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x55, 0x1, 0x0, {0x7, 0x25, 0x1, 0x1, 0xff, 0x2}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x3, 0x1, 0x7, 0x8, 0x7f}, 0xb0, &(0x7f0000000300)={0x5, 0xf, 0xb0, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x50, 0x5, 0x50, 0x7fff, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "eff9c29e8f614139ffaa5d64f8068e3b"}, @generic={0x7f, 0x10, 0xb, "481919b2fa182f6674ad0c5a325bf24b846aea8460788646e907118bbd1ba874c09f78fca1d9e104bcf94d6985b5f5e2095ffbf5df674880efc95d6edb72ae75b4e879c130407d2fe6e5c46b17d9694da4115c11f03a4cf0278b841c3e2a2514c960ec191befe7155b6b5531c2c953549794b58a5fe5c021270bea80"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0x6, 0x4}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44e}}, {0x49, &(0x7f00000003c0)=@string={0x49, 0x3, "5d95436ea102863c8e3fdc05aef4a135a319f851c87c344023c8e26297e185ae82bd7a4f6b0198dacba57d2d4b900a7b1c9b26a9de755bc11fac8ad3caf7fffcd0b847e032dd74"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf8ff}}]}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 478.516711] FAULT_INJECTION: forcing a failure. [ 478.516711] name failslab, interval 1, probability 0, space 0, times 0 [ 478.518361] CPU: 0 PID: 5571 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 478.519286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 478.520418] Call Trace: [ 478.520781] dump_stack+0x107/0x167 [ 478.521298] should_fail.cold+0x5/0xa [ 478.521819] ? create_object.isra.0+0x3a/0xa30 [ 478.522450] should_failslab+0x5/0x20 [ 478.522977] kmem_cache_alloc+0x5b/0x310 [ 478.523540] create_object.isra.0+0x3a/0xa30 [ 478.524136] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 478.524218] 9pnet: Insufficient options for proto=fd [ 478.524833] __kmalloc+0x16e/0x390 [ 478.524852] io_rsrc_data_alloc+0x10e/0x520 [ 478.524873] ? io_buffer_unmap+0x2d0/0x2d0 [ 478.527677] io_sqe_buffers_register+0x136/0x880 [ 478.528329] ? io_sqd_handle_event+0x350/0x350 [ 478.528978] ? __fget_files+0x2f8/0x520 [ 478.529550] __do_sys_io_uring_register+0x1648/0x2fa0 [ 478.530284] ? io_recvmsg+0xd70/0xd70 [ 478.530829] ? fput_many+0x2f/0x1a0 [ 478.531343] ? ksys_write+0x1a9/0x260 [ 478.531892] ? __ia32_sys_read+0xb0/0xb0 [ 478.532476] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 478.533222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 478.533956] do_syscall_64+0x33/0x40 [ 478.534467] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 478.535192] RIP: 0033:0x7f748a34ab19 [ 478.535724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 478.538243] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 478.539268] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 478.540234] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 478.541204] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 478.542184] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 478.543155] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:44:55 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:44:55 executing program 7: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1) keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/43, 0x2b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000580)=0xc) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) keyctl$reject(0x13, 0x0, 0xcd15260, 0x8, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000002c0)={0x0, 0x9, 0x7d}, &(0x7f00000006c0)=ANY=[@ANYBLOB="656e63d269ffbb3d6f61657020686173683d736861332d3338340007000000000000000000000000000000000000000000000000000000000000000000000000000000000000420c3803622214d72ce6c882b2a79c0ce1344b0c0f42fa62a3b7ec8689304ef3d6c8c544c0cecbf088524c0ea629ae6852973890ea352bbee8ab0d1045e6c77533c2e6fd06fbba3ec9bf59e0a1f966e0a4e2b63d2ca81fb911189e8c2f45ba317d762971309c07860ab7e8a3e2995f63e4f01552f58ea614013fb76d903ec132c465454c9edfac4cb66307391d8b134618c4100a1790958e72cbdf369a6f3f9dcf73000000000000076e9dac5ac7ae34d9cc88ed43b9aba5715f91ae2272f4314e19b91e864259502fb228b21b07bb3d29f3129178c16cd1a96a63c5ac210525fc272634bcaf601dd2875487d0e9dca910c74ed660546c1fb8a7ae78d80e17fc8b5ea0e3789c1f6c4409d8796cbf10803e38571044"], &(0x7f0000000340)="7c5ffe08c4bf58c836", &(0x7f0000000640)=""/125) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000100)="d20aac399f1cddfa356e3bd293db801abb1b67b90e00d2ef9042cb5fee30fb5037a582e80b74a56b1f97385f104ea0435c13fe577cea2a6341f3dbd7dd9f510afa9cc81930bdab5aa0b4eb9b0117192ba835aa89079d297b5a8bbd0beeeb1239088f0260ac1b1ada75a1b3baaa", &(0x7f0000000080)="045d3edfad2632ea4e1be55313b10b130fde72374224ffe61a13dce94b201525047f13cb31a6b5b64059f5"}}, &(0x7f00000004c0)=0x0) timer_gettime(r1, &(0x7f0000000500)) timer_delete(r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(r0, &(0x7f0000000400)) timer_delete(0x0) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000540)={0x800, 0x3, 0x7, 0xd7, 0x8000, 0x6}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:44:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') 14:44:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x101, 0x0, 0x0, {0x7}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x38}}, 0x0) 14:44:55 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 478.554198] udc-core: couldn't find an available UDC or it's busy [ 478.555111] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 14:44:55 executing program 1: r0 = add_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000006c0)="3faec5e9c8d0341de05948661d22ba06b530373cf672f6ff72e06a0cb40043efff2023cf28d097a554ffa9d52035feacb634c19bd3bb424716cd49bc7ec2edc40b5d6df3756a6861759f500513771a6c58073419edb658228303b5c2c61c25343bbbe0d3b43cec367db71839adcf040cc3a7394ab2327d93635b47e116baa3b532b7948dfd6765285863c1c86006554b16ade7f852a793c96920481515cd9c22af07afa0bad9bcb736e9b99fb829f679d43ae8c9fbef82828180e0662620d9e6a447caae34cfec92b2b8dc9ea48bf6e185fb22567d7854fe429866de21232579f65bb27e9818ef2854a7f4b3c41e973da702e27f7d3c9993554303660d5c454393bd3756c54fd52cc0618219899dfe68674bab6ce7121c43709fef43f5afb72c604374586e0c37899a60b9ebf81638faf69535b81e66633934abb11c231631a7dcabddc2feb883ccb895f5df5588b6852bf6c34137c3ea4b376aa14317a86d8d700dd9d6ff4161e579c47b0f46cabbbe6b10f934172f61dc651f0c300f3da1a424934950c5cfdc71fb226cf2a0e241c6eee1a7adda173c7e5e191e47447e7eaa6076fabe5196aa1d519db139f84920f5c68c96aa7f2dd4a67a42c74e5116cc6f14b989529744e021796d51d8d04ccdbc6170b971120b03b764668109330f0435745a89f1efebfe78c5ca1674b9e5dd38b0abde760fe8573eb667a191cf05a023199333165a6ed0a81f713624381c124b2e5528cd426fd44501796022f52ba1d66b22877549f08a5f93305f98c7ecbac3233844cf7a35ca81622d1a2947ab52ff96afad9872632d4943878d4b19840b2cd1b538785bf3d89b05d440cc6ddba7f533f0df8c126ce1cba480d1be65d1ae22bea74acf49f640d4c5e3d12f0f8ababadf8fe02205afd4b5db0ff42c660eea57d9e62f1d0b0717f23f44dfebb58ea64c235cd51c184278b21eae1e31bf5fead7b1958fe874aab82e21076078551d7d5cb0a65f4ae66b64525d937c751d552290174e033b8515d7437dc14e68927402ff73f5fdb6d878335c1a262fe210885b1be35b52dc9982b568980ee02c4155088d3f604b994fcba08e286f075abbc57e755d015d2f05dcf15129ffd75c451103b792f9035d9d2e0286fedd1704aeec0d26d28e7905ee9deecdf7f90e81bcec65b11ed5b6dde76a5e1e2856e1de47dfe8fa02792e2bd50cf6838c46ed9ba75fc79eea080bfec8312099fc87edc9696b430f41de5dc79e2eb0516b94c3c76e1dfe0f6633ffb8dc8080db347fcfc9464884b0501447fe8968e809608d2b174398b6c703b6a82dd58ed3cf88342434736c13d143e69e0ce0038daf1dbff235da2ced5ae58a6c8f29d68f32f29c16a64310dbe96daadb76794748ca716ac48bb2bff94623619ec80b6187d266eab4ef4ad43af0e11aa3d7ce15f79176396d73608e33bc91dd1aa47344a006064947d875624ace19d60acac724721bd0efbe58708735932ee753f573e5fd6abe7bd7a8a812cd64274b6a1668a1e666ed7fe74b14b22181815c8068f0ed15b4980e6dc8679a24165cfd4cc6c53fa81486cae8b1e4e802018d368f889aa5b515f4c26b25b8baaaf6f313d64e6e9c7621125caae3f40b42af31c954a6b7298e4382ca2d8ab328e02247aa027aeda701e2084fa8167599471b5ffeadb962b6b12b90eed8459c4fc5887c3c2f0421ae2ad9a3c800920f1b6246c22372b079c1ce3230ef7d5807894eab022f59b58569aa5516c3cc2630fdcbba784dcde0254efd24d966972b9a9c16d32c527eaad02254c61745d5697df1215d4db637bb1a46c71540946b2cd34b65e45121c58f4e2c72c10e66c29df5f3befb757921f0362c76d0af4c64dcad93184ce23223d80a4b297a2b0de4691daa12415a2502438f9cfd018d1c61f7d36fce04ddd33919eaa655adc3783aaf1e6f276476a8969c9265cdd0848d24a377635d6003ea6594648cf7df14cc1fb037bb723deff770747d702375ff2a6158cf0131153daace4243a6f6853c904ce97719dafef7fe87eae44cc62a39ea2eeff65d934a948e2982c6593a3e727e8980a464edaf91883af73541472761919269fd532aa4241fea11df291339c6f3b6eb750698b4de01e736350544dfd5e58d126eb5ad1bcfc04c56480e575db1057edbc35164198ad4805439a4f1ddfa3b7a49d690c26444ebc318bfa8f6e4d432ca4558c0a64a6ebdb0ee65de5e655e250d05aed1dd2ca650ef9a387ef7e83b73d8179ba7da3bad80fb2e3a921e9064dffd2e3d589bf35cfdfdd159862d733afb90c285072b5fe2f878ac5e8aad5bf70b50b012693d403b81735ec004819ec042e5952bacf68c4756dfd97a62f7b65aec75c8c3042099895a0ed91563d710f4e675750bf183b372bd12bf2f595a8f93a958b3839c3036fb44c44d2a8c604cf4219b12d8f85e20802317c4277b6e2e01dea4423b4f5be1c267d6a993ac6259830b75867440025c6d78c6a23a6d6c9504f37e69145628e05fe17bd5dd37e74d2e7dfc02abb6d00d197c79af0dfa39e84c8a4a1a2a88d9e056b9d9a102647d95a6fbcd8a6438d78587b79b3cda8dda26d3528bd2cea76ba879c87335580f3474292a4b3e037a8c5679733015e935a3d04ed39f73b4b17b078e2c2bcb508f5835d639497a1f5eb6e9aa93b91718209b6e08a627630eebeb7d81a788c6d8d14bbbc2baa946a4d064b3b95c72a98a37d530ea251e932843f9d9be6a2fea24a4dd23c33e559273d6457abf8c9e9d751264642d56de49e5d9f66187abd7fc6585071e07ce597722ab00a7de92e056b3f85ce4d918c513763558610be6b87c501e5a83fb208fdbfdad8d4bd932dc531ab6216284e5644488a6563f073cbb0a4831f2a82651ddf583ee5520dee6cc5f22a36121375d6df2603e00659c43fe3f084738ac66d50bee7f18376a6990b00ee2498bde273865cbdd8fdcfba572c87a65edc7a11a893e01d9675b4aaa61fea83b9cef0959b73db9f3b0965b16c6ca7923409354d5cdae62c418cb05dc0e806570426c537150821f0be2c2fad46dac78c00e0570a1d2ec8024b435593b3196eda53737aae0cfbf571881fc0b04a9f7aa28811f11a4c23cb93a037fa75aba996a7c42344203c06d93eb0fc9a278bd5df724a3869f60bd1964501139d859ff57358712e1ff29587f6be060ec3b2852f0a15b34961c27bfaef1c06dc1a0b8ebbf32de48d4b56f70e852e01e4716a5e70cf1b7f1c71649f95b6f360c5ac8fd19fcea63a3c086527e046191b3255164a233f6ec82ef5542d37045eabe5f8189b30826bb7675398a0a17463ddaf9f9d23f3a44bb45a30fea9cbfd90cdfec4a746b1403e7d282cc9598f352570147bb2c2637dce023ea1d8656bae86fc4beb0d89075d7735d28dfde20e7d9ea9ef921beb5b083c9edd8124e3fdae758e2674ab26faa86069a35d9c32ca5bb28905caf22ae67eefdd9ab61d42b0ec2d2a4d7767f35bfe0e0cb526ee54335f16bb50a0ed48585e9f9d5770a7b4c3b8df1a1f8743531d57517c0128e46882127503b8eba80e1c63006d3cea3b9d29f233c4414a5989bfc7bd8316481424552d734b946800be8d5e3d7bc6b98f3c5035b28269907a3438581041c56f46d274340492c6de173d41661706bc1c855abf5270c925a04e344f9e7ef4867c96e07e6e67b43206a67412f584515fa705a19e515f4cb25d22cae9354fadda728f44ee14780621ff38730755d35da7aa91d728d7641ac2225a1f886597f4144217bf4481a2770295af4d7d07d1eac098fb5e90e66f1220862b26fc392cd54cc004ab30bb77635de0cbc7be91073cd3c4f63012d7e2284da07112156a28bece3051811e502736800ee3d49aee2207320283b93a5fa0937bbe61d54eaf52c6529e95afe6c466fb49bcce2e1a995841d30b361320845db8595c9ec16cf6b673e7dae737829b7a53950184f8f4624fcf84209437eff8ddab461a03aa45252250bfe6e596158ee6af2c811c4013aa9258bbcb6b2868c93528205c6e0cb0a9e74516aea20d417d688f8ce8356d4e5541b85658f881cf8a6533ce4d95527740ea019ca69e1436cc5343be2caba38a04a45c1f3f1224fbd1853db2a1c0d831ad901f661cd2822d31f2a67fd86c8d5ef72dc6f9686f5eb3a33d986f2b20efcfd8bf494e69499cc304c40ea1cdba1ecb37fd87063b69c098d179762805278d17ed1e2f69ad1e8565485806a3f062d49fd36c6750a6a5bd2fa54c63219d87eb22122404952fe48236c90980259799bcdd8b4e30578772835e6c528d7ff4d3b8c67af30baf6f4e007ed31d53835b8775405cd45139f51da813bfc5b7cafcf4d0e6f26f04e66274c796f6a42e4c33625c08d4c289d167abb94ee4a8f6266fd4399775269371a023ed3addccfe13d85a7a6fb107143f523bcbff8531a9c9e661e524fbe858006a8d4daf32d6099bcefc12b0a4bca0cb2be2ee49f94ebcd42850e3fbaa4679cb6601965900644c0bc9ef024e48b45c2beb6791d49dfb2846be1cbc1bcdebb4439058edcd1b577f9f15af33d5542a0ee0540ad7ee2241766bd48893541ae5c7f9958047e510e7ab6560782ee2fb4ab5c9fb74376cd9532a290e0ffb3a37d780a97855ea4ed21c5f08c0db04e303fce4ad807e8568a5db3a1640be95f5fa509af05c22b33ec5dfb06e4bcc8259cdb7d6c0a59f50e8510b5b04047d9cef690ba2819b763bf84af655c6aed19fcf1909a1177a2bbf27479a1fecae08a10b5bab25187717828da5efe2b2f49dfed2efc709aea7b344719896265aa2a9b7712634feef2689ce6779d8c6bb5edf564774bb6c8894a26d367cee2c239f793147e3057c87a0b1f86d30a87b3df068749e9df2f235368e7a5f9e28949879d69fac259dcafaddf8b90f4d2d88008c2b5b116d76421d3c122878225f15bd24681684cf65c6b57e6841944165ffa3077812a7f87705070bba7c296a5e9a5d3638a9dc830aa0c2ac7d91795f7fd302858b6ee267fed0f918c7098d7c6a8b7a29b0aadd924d4b5de71d418a3cb48cf7c06f89dde37156c65a1ccb94b84c07c595d8d47f67fd1173ef2b04993067af4b76d90d605bd05c492758a5d144ae17e34e89f3a1e32d9ed0fbfc528830c7bfb7766ae63c599bf2ac9afa65fee0336fe796ad5479c5fb6668ecb832279efc2981d227ea1445776ee40ccead8e3d21a3c3a03fc658b689a1df0d6c4963eaab2a6f85fb72161a6ce6d4236a00ed0626ceeb122a0ff9c53164925923b9582c9c3c7cf2f44650b349dd1d26a9f83e30e6f76e72714046f9b586bc9a89c15b5e3beae4a94718cb317020f2986cb23ae30e4a27f3fb73bcfe62326b1892138c9da66a543c3876f290df369c3a3e523f7477c6811f41a72cce1c426142068424e4ebf991296d85ff07912d9f68cf0b73cbb310618063b3a4b3bb7afc56a1f1ec7c63a1683dc4bbcfca1dc71cf81687edfc6a80ad5b62133547dc79c4af119777fda3a6e8ce537cf7aed7db2f4f816508636aee00661c50d08ce48c4edf5e393bce90a1aba428f72221acbc0c084d909322e9f02dff7f17531fe8090a5a48c6e87482f842954ffeef5257911c0acc93810e0a87d8683706ddb13f855debb5e7b6dcf8d9c37910fcffb0cee00c55ada551ee42f6ef16aa656c85a238f3a6f5116216f7a2464dd8c8c502664e1b5f07c04e498a6f8a6dda9f0bc0adf7d1a490c9e2d36e3c3a90788a11bfe0a778e982f1a1b5224ed43adbe4ac905bca1494e33d9f5cfc8852ac7a5304a310398e836a8eb6740aa92e093", 0xfffff, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) 14:44:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = fspick(r0, &(0x7f0000000000)='./file1\x00', 0x0) sendfile(r0, r2, 0x0, 0x100000001) 14:44:55 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 31) 14:44:55 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:44:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') 14:44:55 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 478.712385] FAULT_INJECTION: forcing a failure. [ 478.712385] name failslab, interval 1, probability 0, space 0, times 0 [ 478.715207] CPU: 1 PID: 5593 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 478.716866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 478.718810] Call Trace: [ 478.719428] dump_stack+0x107/0x167 [ 478.719445] 9pnet: Insufficient options for proto=fd [ 478.720280] should_fail.cold+0x5/0xa [ 478.720304] ? io_rsrc_data_alloc+0x10e/0x520 [ 478.720326] should_failslab+0x5/0x20 [ 478.723753] __kmalloc+0x72/0x390 [ 478.724543] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 478.725706] io_rsrc_data_alloc+0x10e/0x520 [ 478.726703] ? io_buffer_unmap+0x2d0/0x2d0 [ 478.727700] io_sqe_buffers_register+0x136/0x880 [ 478.728802] ? io_sqd_handle_event+0x350/0x350 [ 478.729857] ? __fget_files+0x2f8/0x520 [ 478.730793] __do_sys_io_uring_register+0x1648/0x2fa0 [ 478.732011] ? io_recvmsg+0xd70/0xd70 [ 478.732890] ? fput_many+0x2f/0x1a0 [ 478.733733] ? ksys_write+0x1a9/0x260 [ 478.734612] ? __ia32_sys_read+0xb0/0xb0 [ 478.735566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 478.736776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 478.737968] do_syscall_64+0x33/0x40 [ 478.738828] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 478.739994] RIP: 0033:0x7f748a34ab19 [ 478.740830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 478.744960] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 478.746668] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 478.748282] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 478.749912] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 478.751519] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 478.753133] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:44:55 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:44:55 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') 14:44:55 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000001440)={[{@fat=@debug}], [{@uid_eq}]}) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x28) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat(r2, &(0x7f0000000100)='./file0\x00', 0x241001, 0x0) 14:44:55 executing program 3: shmctl$IPC_RMID(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$packet(0x11, 0x2, 0x300) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x2f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x182, 0x80) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000140)=0xffff, 0x4) r3 = syz_io_uring_setup(0x24, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index}, 0xfffffff9) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) fstatfs(r3, &(0x7f00000001c0)) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x11, 0x1}, 0x9) syz_io_uring_setup(0x8003a75, &(0x7f0000000080)={0x0, 0xa91f, 0x10, 0x0, 0x3be}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000100)) dup3(r0, r1, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000200), &(0x7f0000000240)=0x4) 14:44:55 executing program 5: r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x80000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000480)="7066883cc230625d4542d00d4c8dcdd0d38f9c4a679bbdc21ba654f21d841c403939f45d399707bf366d9e453a527c1f50a6977710c51605b6c52d89041407fd5f35f0afc145e724ee9b91c1e9eec3486ab9345d7056d09c3e293bd9053d2c0b6eedb6d2e667", 0x66, 0x4}], 0x100400, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'cp866'}}, {@uni_xlate}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@shortname_lower}], [{@dont_appraise}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]}) syz_open_pts(0xffffffffffffffff, 0x4000) syz_io_uring_setup(0x7211, &(0x7f00000002c0)={0x0, 0x8cb, 0x20, 0x2, 0x9d}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f00000007c0)) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000280)) r3 = openat(r1, &(0x7f0000000140)='./file1\x00', 0x60002, 0xc0) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"a6419a69118e94f938b171fd926bf720", 0x0, r4, {0x2, 0x9e}, {0x0, 0x6}, 0x10000, [0x2b, 0x10001, 0x21, 0x0, 0xc5, 0x6, 0x9, 0x2, 0xfffffffffffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x2, 0x1f, 0x4, 0x101]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4003}], 0x14, &(0x7f00000004c0)=ANY=[]) [ 478.841845] loop5: detected capacity change from 0 to 135266304 14:44:55 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') [ 478.878175] loop5: detected capacity change from 0 to 32768 [ 478.882024] FAT-fs (loop5): Unrecognized mount option "_5ð¯ÁEç$ÁéîÃHj¹4]pVМ>);Ù=" or missing value [ 478.901900] loop5: detected capacity change from 0 to 135266304 14:45:08 executing program 5: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000048}, 0x49b50c35a994bde) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0x94, r0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "517de4e9688f114056a810922b9bb3260944088c7e520a29"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x94}}, 0x44000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2434}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}], 0x10, &(0x7f00000003c0)=ANY=[]) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='reiserfs\x00', 0x1280d0, 0x0) 14:45:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:08 executing program 1: semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x4000}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) r4 = accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) r5 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000c00), 0x1312) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r1, r0, 0xffffffffffffffff, r2, r0, r3, r4, r5, r0], 0x9) 14:45:08 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:08 executing program 3: semget$private(0x0, 0x0, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="7472616edf000000000000006e6f3d91e31b121a4ded3205dc49bb21857810b4ba747892f71f3ac842db783e431d605372ea606c253e7c4ff3d013e13614b38210b49077cca3b953d867fd849b8fe2ff2f49a2849f897aa0aa580d91f1b381e218f7c241c047d0a0ef6ba946c262de8447d2ec926ffc3aaadd9660fff9cea9b11f2ff3704df391d2bdb33465bfa785d15ef401e901c59cb0dfc75ae84a5ce85db5f2f363979cb7", @ANYRESHEX, @ANYBLOB="2c7766646e6f3da085136b65260980d8b4f76bc260f22f75216106e24696bb670573c93a9a760d87c304a422a663f99c7f8ad490324684383c28b6be9d97aa62d92a9303a55f9da66e2517da34604b1871cad5dd", @ANYRESHEX, @ANYBLOB="2c63616368653d6d6d61702c636163687874656e642c6e6f64b2236d41702c646f6e745f61707072616973652c646f6e4c2cab0a41ec9815652c7375626a5f747970653d2c6461737572652c6673636f6e746578743d73797374656d5f752c66736d616769633d3078303030303030303030303030343038632c7569643d000000000000e7913abef33db2ae29aa88caa44bcc0cbd0473eda11ff286187683c5f3cc1fc1e5b67dde28f14f1ce45a32f95410666010c6c641868f79eab35c27eca7423d16539d1df4f52fdd3e32f8f44f72ab0f1f1831728e04d1fc1bcea002565b28a1fc522200"/241, @ANYRESDEC, @ANYBLOB="2c61cb7aaf0f944da35506e9543ee3ff756469742c726c6f74636f4e746578752c00000000000000"]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x19, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) semctl$IPC_RMID(0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)={r0, r1+10000000}) unshare(0x48020200) 14:45:08 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 32) 14:45:08 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="9400005a1a0000000100000007000000c4048f01000000001c000000000000000000000008000000f8ffffff5c0f7125971efcfdcedc076c47ace75c479d4a295e9ef066a5b045fe01470bc77835f010435a0c024adb2a08347703f7742b623818fa9289da2d044bac470c1befc9457eed85d0a24aa030bd5881ac3387d38c6865057db53d28f6c369ccfdb71d6da1488f77d6344ea4ddaa9300204d919ff61f503b576745e3e8cc45beaf28de0000000000000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x18, r5, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(r1, r0, 0x0, 0x500000001) r7 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000c00), 0x1312) fallocate(r7, 0x0, 0x28c, 0x9) [ 491.854731] FAULT_INJECTION: forcing a failure. [ 491.854731] name failslab, interval 1, probability 0, space 0, times 0 [ 491.857323] CPU: 1 PID: 5636 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 491.858873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 491.860763] Call Trace: [ 491.861365] dump_stack+0x107/0x167 [ 491.862190] should_fail.cold+0x5/0xa [ 491.863053] ? create_object.isra.0+0x3a/0xa30 [ 491.864093] should_failslab+0x5/0x20 [ 491.864954] kmem_cache_alloc+0x5b/0x310 [ 491.865886] create_object.isra.0+0x3a/0xa30 [ 491.866881] ? kasan_unpoison_shadow+0x33/0x50 [ 491.867926] kmalloc_order+0xfe/0x160 [ 491.868792] kmalloc_order_trace+0x14/0xa0 [ 491.869758] io_sqe_buffers_register+0x1bd/0x880 [ 491.870837] ? io_sqd_handle_event+0x350/0x350 [ 491.871907] __do_sys_io_uring_register+0x1648/0x2fa0 [ 491.873076] ? io_recvmsg+0xd70/0xd70 [ 491.873941] ? fput_many+0x2f/0x1a0 [ 491.874762] ? ksys_write+0x1a9/0x260 [ 491.875630] ? __ia32_sys_read+0xb0/0xb0 [ 491.876559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 491.877744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 491.878917] do_syscall_64+0x33/0x40 [ 491.879768] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 491.880930] RIP: 0033:0x7f748a34ab19 [ 491.881767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 491.885926] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 491.887657] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 491.889268] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 491.890886] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 491.892498] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 491.894099] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:45:08 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') 14:45:08 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:08 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 492.017068] loop5: detected capacity change from 0 to 2048 [ 492.021497] EXT4-fs (loop5): Unrecognized mount option "À" or missing value [ 492.116238] loop5: detected capacity change from 0 to 2048 [ 492.133468] EXT4-fs (loop5): Unrecognized mount option "À" or missing value 14:45:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) unlink(&(0x7f0000000200)='./file0\x00') 14:45:21 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f00000001c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x610000, 0x8) 14:45:21 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 33) 14:45:21 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c00), 0x1312) io_uring_enter(0xffffffffffffffff, 0x7b7b, 0xc18a, 0x2, &(0x7f0000000140)={[0x6d]}, 0x8) r3 = syz_io_uring_setup(0x5e4e, &(0x7f0000000280)={0x0, 0x8001, 0x2, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000b21000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r1, 0x800}, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x20, 0x3, 0x0, 0x0, 0x7, 0x200, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x2, 0xfffffffffffffffe}, 0x4005, 0x3, 0x80000000, 0x3, 0x3, 0x34, 0x3, 0x0, 0x1000, 0x0, 0x6}, 0xffffffffffffffff, 0x1, r6, 0x5) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = fork() ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3f, 0xe7, 0x0, 0x7d, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x6, 0x7a9}, 0x808, 0x6, 0x0, 0x1, 0x5, 0xfffffff9, 0xfff9, 0x0, 0x8f0, 0x0, 0x400}, r7, 0xa, r8, 0x3) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 505.161063] loop3: detected capacity change from 0 to 41948160 14:45:21 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:21 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:21 executing program 7: keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x80) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/97, 0x61) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) r0 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r0, &(0x7f0000001600)=[{&(0x7f0000000540)="0fe4886ad7be51eb200ee5a73d531b9fbd9af4fb", 0x14}, {&(0x7f00000015c0)="f3834376a8f45267b5215a183817af6c82d4c76946", 0x15}], 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x19, 0x4, @thr={&(0x7f00000005c0)="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", &(0x7f0000000240)="7e45c614acb8fab3e28d30bf4f8731c0ff86aadd060a1760d4463e7e8e64ca1160a4ae0978ae124e5216042cbf537d8836450e3c32f2dee08976a5261d86865fbb65bb7595fd14d8d91d3bc1ce98ef14fd697599fcc220d877b9e818a6b1c4e8f7331edde3ec7c490c0afc42a56381b2730531bc8bca69d8eed18eb74e66f56520fbdb644ef094bed5bbe6e925d8f70f0d47070ff35045e68884ad99e5d01e2a0e5025913a39a531dd1807114c81fa8c1448861323f5bb5b5319a4d2f87f14a876a853526bb2469183d2c784bb23a85ead17da508665f94ed65afa20422886ffcb01c7526981e2aa5d"}}, &(0x7f0000000140)=0x0) timer_gettime(r2, &(0x7f0000000340)) timer_gettime(0x0, &(0x7f0000000000)) timer_gettime(0x0, &(0x7f0000000440)) timer_create(0x0, &(0x7f0000000180)={0x0, 0xb, 0x0, @thr={0x0, &(0x7f0000000640)}}, &(0x7f00000004c0)=0x0) timer_gettime(r3, &(0x7f0000000500)) timer_delete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000080)) r4 = open(&(0x7f0000001640)='./file0\x00', 0xf2a4381f34c8d8e0, 0x0) clone3(&(0x7f00000001c0)={0x140186180, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 14:45:21 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00003ca000/0x2000)=nil, 0x2000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x100, 0x80) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x2000}, &(0x7f000031e000/0x2000)=nil, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x3432, &(0x7f0000000240)={0x0, 0xfd1c, 0x10, 0x3, 0x14d}, &(0x7f000085c000/0x3000)=nil, &(0x7f000085d000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') pread64(r0, &(0x7f0000000000)=""/105, 0x69, 0x257f6b68) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200, 0x45) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote}) [ 505.182335] FAULT_INJECTION: forcing a failure. [ 505.182335] name failslab, interval 1, probability 0, space 0, times 0 [ 505.183659] CPU: 1 PID: 5685 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 505.184448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 505.185427] Call Trace: [ 505.185739] dump_stack+0x107/0x167 [ 505.186162] should_fail.cold+0x5/0xa [ 505.186602] ? create_object.isra.0+0x3a/0xa30 [ 505.187125] should_failslab+0x5/0x20 [ 505.187568] kmem_cache_alloc+0x5b/0x310 [ 505.188042] create_object.isra.0+0x3a/0xa30 [ 505.188545] ? kasan_unpoison_shadow+0x33/0x50 [ 505.189067] kmalloc_order+0xfe/0x160 [ 505.189505] kmalloc_order_trace+0x14/0xa0 [ 505.190000] io_sqe_buffers_register+0x1bd/0x880 [ 505.190551] ? io_sqd_handle_event+0x350/0x350 [ 505.191091] __do_sys_io_uring_register+0x1648/0x2fa0 [ 505.191686] ? io_recvmsg+0xd70/0xd70 [ 505.192130] ? fput_many+0x2f/0x1a0 [ 505.192541] ? ksys_write+0x1a9/0x260 [ 505.192979] ? __ia32_sys_read+0xb0/0xb0 [ 505.193455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 505.194067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 505.194659] do_syscall_64+0x33/0x40 [ 505.195088] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 505.195673] RIP: 0033:0x7f748a34ab19 [ 505.196108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.198215] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 505.199091] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 505.199917] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 505.200739] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 505.201558] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 505.202378] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:45:21 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) unlink(&(0x7f0000000200)='./file0\x00') 14:45:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/ieee80211', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x9, 0x9, 0x3, 0x7, 0x0, 0x0, 0x800, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4401, 0x30, 0x6, 0x0, 0x2, 0xffffffc1, 0x8, 0x0, 0xffffffff, 0x0, 0xf88}, 0xffffffffffffffff, 0xd, r0, 0x4) 14:45:21 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r4 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r2, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)={r8, r9+60000000}}, 0x8001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x6) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x3f, 0xa, &(0x7f0000001980)=[{&(0x7f0000000480)="a86825376a908469a3192d19363ba69cebc243fac442b6b0e77cdcbcb7ed873c19ae2c95cb479b99f54363975ff780727dcbcf6b065ae0c25234894ffdefe13d8adfa7d0ed7b7e520993a86938e7611a3ad6e9f29e09fddbba4e366fb4ad4a40ef106498020178f06461a800c227a3d865ac665d670573de11d5f3922e3933fde9cb353cd3530923c2e59ff2e44098c2259091306d83d660182aeb8ab41caeffb409573399484b0853dae41dc1204a5f48a125866c2b692fb6443a46ec51ef45bb4a8d73a2ea98bc18899bc166ae2b", 0xcf, 0xffffffffffffffc1}, {&(0x7f0000000380)="440b10783dda67673d4342a226d7f8127a7728ffa57fb0466cf69f715a6087d531741dc3126cc1e97069e524c368de61d94f6fb64809d2e8d6edd8ac150dff6df7fac5c06f4cdc06f0469d1a1c9443e37f71b9dd52ef738fc28a89b5e6c4fe0dc1647315f04f82c1e3699bb2c1a7cc20f4187095abd167eb3057a198f77594750e3927205839011248347c51966a3149dea17c9913cf089f265ff01d1134db21626b0b5ccccef2eaaf79f3fac923a9c2c9edf32405e3b5b86a", 0xb9, 0x8}, {&(0x7f0000000580)="6c2083a3267d909fe358ff24c50ea1c99d20b7018742fce955bbb3119036d6fae4a91ec2fc66fccfbcb51ba1be0d9f636351ee4324d8cde399b754196aed985e1a0b4c3e95d29ab1305eb3ca39278b8ab6a2c30e3f98e05ab435e95d1b225a7e9887eaa4e0369015506b8a71ca180bbc7e4fd6e1ed7359659260b3791512823437210792df1f1b794783a56e51deb13cb3288d076f75a34aacda5a649838372f0d43bf84c1733c81345c2436720b341f9319a1afd3607c7e522c9ac39ac8becebc06", 0xc2, 0x8000}, {&(0x7f0000000680)="321c6019ada2286f63c6f425c35642f8be084752ae269b596a214fe9b6ccbb2b38b8aa291f84faca02dd3e4bbeba1a7f4edb8c76dd4b18ebe306436e945f3a45760dbfa35d6ad5596b0441b76689d5f70821a0c8f0000cd4644bc7320c4eeebeb589809b37a3e46b4565d4cba936191c21159c1e7456f680277621c19918d58aa7228daf7dfd0cef8dd758f72b4261cb36a1993fb6754157e0bc3e4de9b1e8cf31a823763562b5490aef3f7f313bd6d8b6dbf9ce4ff6c43b28d1322ea4f206029d12", 0xc2, 0x20}, {&(0x7f0000000780)="3a172c2b64ca822497f547c3a1cae1d6dce08dee7d803b914ab1a73643650372baa977d3ce7e97fae06593b1ddb31b954aece838515e2b7829981e2bbc0403e86351bde914d8401cce10a867e8dfb0a2fb150af35d14534b2ad11fe078ab5a94dfab41557111fcb7b8ea84f810ba515f002f2755cc41f6a7ad6af6bcae", 0x7d, 0x40}, {&(0x7f0000000800)="eca134b19692f5b1a40654009a05278e7253eaa7917da6e8345367586c3f0bd0e965a1fea3ae41381458bf7a222a14e644be5fe8624a1b850b2bda2c", 0x3c, 0x1}, {&(0x7f0000000840)="1b9e81b0160b67f7da84428690454362ddd62c42de23b928a2a565f95f687f1e5ade80784570ec0f3be7577896c47a5c32a1e50760009f16c85c461f6d8aaa2f45171d371d88582f6b75dff69df20e", 0x4f, 0x4}, {&(0x7f00000008c0)="c2309116764c98a3950fe23991db249b94870a1402459896a2b65eb46a92ca2775fadc4d9bb16770adad61b925bd9c231e61abd4635766b6f1588139356f575553eda8f06457f64c8a7b3815de653a1f96161307658be31c31d64c0425a7e41bcedd", 0x62, 0x7ff}, {&(0x7f0000000940)="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", 0x1000, 0x30}, {&(0x7f0000001a80)="0850a3", 0x3, 0x9}], 0x20048, &(0x7f0000001b00)={[{@quota}, {@nobarrier}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfshat}, {@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, '/proc/key-users\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'root'}}, {@dont_appraise}, {@appraise}]}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r10, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:45:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:21 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xab}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x22}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1c010}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x28}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="686173682c66736e616d653d65787434002c6673757569643d63396632311f38612d343663392d383932342d620064362d34650034366262372c6673636f6e746578743d737973f94effaad56c0f2ea1d26a11f4c6de9774656d5f752c736d61636b6673726f6f743d65787434002c686173682c6f626a5f757365723d132c61707072616973655f747970653d696d617369672c6d6561737572652c00"]) 14:45:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) unlink(&(0x7f0000000200)='./file0\x00') [ 505.350958] loop3: detected capacity change from 0 to 32768 [ 505.365636] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 14:45:21 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 34) 14:45:21 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 505.384391] loop7: detected capacity change from 0 to 8388096 14:45:21 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd130, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0x7, 0x4, 0x0, 0x3257b6ad, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x3}, {0x2}, 0x105, 0x0, 0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)="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", 0x170, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000081010000000000000c8c00000093d163a334804db7fefdaffc738b6cc7ebf51d4fe65a29156e508a60250ed51e60b244f0da8b66300d3c3bf9f55a96b2672070154043124d91d80cbe8c5158988f119c5879736d1adbf73a4c0ce8768e9e4dfd64e106426be0d5f1dd5bd72547de9a94f06be9119ce27c59d7fe4a9c4bc5e8f7d6d9f47ccd782e000bad41c69b5325a056c64fc076eb4fae00e800000045700a0017225eeff0e6d65624a9f9ee97b451ffd97438056bbe772a590af6a64b9b9c821d98d5705e1acde78dfe7a989fb359d45794ba7a01a47c14cc689dcc6dda7f5960f002e93e426393f9d845fde88e7983a8a308cf7931767a0377b1da5eee2b463333f3353f265b8294fcbd9524c357f2c03dab16ec4f858cdb55c192c11abf289555aaa2ac040200009272f5397b5636357bdd984d114e0c16e41440ac9e765750e460fa56a218bfdb1b3d6513a10e00278aab99aeb3c2ed5b0b7d96f5184f53c7cb8e8adf11d7ef49e9dfcd65a36fb4e7b1af7335553a5b16c187b137c4307d148c7b9363d200000061ba9a5d91a4a887678912c4a4c339a5de275fe9795de0ef1240f9892bb5351f608af64ddd8b6734efdc7c755c9e54c5357df918cc801552d94acf498ba66bea596795f13e4aab1f58b0f702856ac4355b0765cb4556f3a388c315895fc922e36d2bd848fc4fd2f5feba912ebccd87cd41f2eb1d36c17cd84668afd5d66cd35e50375a2393830e63e1fbbf6a064dc93cb8dd58043b6892b8e4b87ba64630f460b66cb99ed3bc21a50d77048820e740f4eb6e541651f0d8bdbaac4291c881b72537e26efa44c7"], 0x25f}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000006c0)=0x1d) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x60000015}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000000c0)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x369000, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000740)={0x1, 0x10, '\x00', 0x0, &(0x7f0000000700)=[0x0, 0x0]}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 505.440214] FAULT_INJECTION: forcing a failure. [ 505.440214] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 505.441653] CPU: 1 PID: 5720 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 505.442436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 505.443380] Call Trace: [ 505.443686] dump_stack+0x107/0x167 [ 505.444118] should_fail.cold+0x5/0xa [ 505.444565] _copy_from_user+0x2e/0x1b0 [ 505.445026] io_copy_iov+0xbf/0x1c0 [ 505.445441] ? io_cancel_task_cb+0x80/0x80 [ 505.445927] ? kmalloc_order+0xfe/0x160 [ 505.446386] io_sqe_buffers_register+0x31d/0x880 [ 505.446935] ? io_sqd_handle_event+0x350/0x350 [ 505.447470] __do_sys_io_uring_register+0x1648/0x2fa0 [ 505.448071] ? io_recvmsg+0xd70/0xd70 [ 505.448509] ? fput_many+0x2f/0x1a0 [ 505.448927] ? ksys_write+0x1a9/0x260 [ 505.449366] ? __ia32_sys_read+0xb0/0xb0 [ 505.449837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 505.450445] ? syscall_enter_from_user_mode+0x1d/0x50 [ 505.451035] do_syscall_64+0x33/0x40 [ 505.451467] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 505.452063] RIP: 0033:0x7f748a34ab19 [ 505.452491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.454598] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 505.455479] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 505.456301] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 505.457119] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 505.457939] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 505.458761] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:45:35 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 35) 14:45:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:35 executing program 1: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x2) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="5b54e8e5b22d"}, 0x14) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x7, 0x4e1d, 0x0, 0x2, 0x80, 0x20, 0x3a, r1}, {0x3e9f, 0xf45, 0x9, 0x5, 0x5, 0x2, 0xffff, 0x7}, {0x0, 0x2, 0x200401, 0x5}, 0x0, 0x6e6bbd, 0x1, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d2, 0x2b}, 0x2, @in6=@empty, 0x34ff, 0x0, 0x2, 0xd2, 0x0, 0xbbd, 0x10000}}, 0xe8) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="5cedd5322b5af61620ed4ea658cc9986f8", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fedbdf2503000010000005002000a313c95301800800030004000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000000000300020000000500020000000000050002000400000005000300010000000500030008000000050003000500000005000200050000000500030006000000"], 0xda}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004800) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x800]}, 0x43) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000900)) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000000c0)={0x6200, 0x23, 0x1}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180)) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) 14:45:35 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x1) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfc2b, 0x0, 0x47, 0x4001}, 0x400c5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r4 = dup(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000180)) r7 = getegid() ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001ec0)=ANY=[@ANYBLOB="0100000001000000180000007a699d5e45e00c5f232d78f696e9f9419cb76a348c0612fa969a4dd2f092042cb9baeb69a1945e73fc21901a7365dcfc9a", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000001740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f00000017c0)="1b14c90f350832f6c23841b6a690426811188619ae203677631a00f6eb2bee8550d96a92fb01eef218920266c425ef219555e928b4a090987238721a82b0ecf7d0be5ac1dd88902e70621cd29e58178ef64386d617bdf756de8a6eb3ba5c9bc5034faaee6b95a41391503c76ad9ed181c743cde0107f9a543498cf51b23052163713638d8b09487abe91cbfa987792eed301ee95d154dda954298823d873f458436df6cab79c24dda45587627bac279494e6f7d4bc5436360aececf426f85c", 0xbf}, {&(0x7f0000001880)="234086af895f8bc14e5e7eca343c5ceb3bfae66b650770978b30e92f9b187e0d2279abe414376a7da63b5fd8d0585d4d", 0x30}, {&(0x7f00000018c0)="8e11e602a90e39c251bfdfee7ce0440ef1721f22bee8dd6ff20855384a41bd127d22713a226152da5646ff1070e146afe996fbe60067f83c4ce66d764e16633096dc16b59a2a9b152849cd0b792abcf3a8be117e22b17117a8cad956eff668f08f9813730eb8b58e321e433617b90b26cf2624d2d5", 0x75}, {&(0x7f0000001940)="821e2ff9af345d18", 0x8}, {&(0x7f0000001980)="98fdc6fbbcbe82fe405755861ea33895780075df2fe35f0c9855b6d1776a22d62473d77e1666dab5069e2d087e1160dd95e3e4a31b6ab83c69dcb473a6a0d1e1b9b43939740650d580923d70d7fddf2ae19be789152a287b878166e5986dedc1ad3c5e8a9f057e95eb77835a89b6e246975e27809515a8390ff6c6a7a51d21e82035b8944126948ea60fc414426ee4484774751334a49268c5252809a6262be10a36a9b2b4db7cc71ab13052afc65e", 0xaf}, {&(0x7f0000001a40)="b96eecebd13cdf51fd0ac0e8af39e9af459e026a18ee0a3326444f6a2ccf53e6b58d539c01ba645c07fdfee57cff5497d38f3dd767e6ee20fe2c7123855b4cb4c45e46d19a305cbc30682c5c47893fd3cc1222f7086f0964412f5e06f654419a648a20abdf18542a800a26ae3baacdea1af88f1bdb2fcaf316945908999338414575d62df4d0f98d7444c676673f6804969e00b72fbb8c13ca1f094bb46331f52ae7d8458718194e724def725113c3b1ed99b96840608eea0ff2efe0e8ac537936f70131f45197da0c55ae676037701f8200f48a6deba606c17d", 0xda}, {&(0x7f0000001b40)="c53da797344169bb28749ee3816979a5ef3534689b0b9197a598e866afb83085b6a35995287de817d9b256ac17bd15cece0d2b0ba29e88034f4901caa8eed51f1ab690eba576d2c2753bc7169bd361512e79611f78de137cef3744a115ee70059ebe3d744281452da03030dd11aa9394bf7ead079eb48cd1aba03d03df51c3572d8aa6cb095f08647fbd1fc772c63a1dabee6b367ab36a79eb917ee674b3e4c0bacd7f5b32a15af5321fc15c0723f21c0da1f0f6d4a7f5712ae7b2999b14ec9a39158efa9f211fe6296ac070e32345fa4c61f8f1e7a508000000000000002807ca1439911c7c1974d9b545bb865d12b70c202af74d5ddce7faf0c4", 0xfb}, {&(0x7f0000001c40)="0f44f51a54c39e6badc7d7c85a7a681d16acb47a77e10c3b913e3cbbb10ebb7e48a4878b1cbd7ec5340c1e26ffcefe1da6f133f301e3342efb7e035036b136cda05b652d34aba1b846c113460fa970c610bd404f6f252dcc0b60698400db590ab7aa98a3ee74", 0x66}, {&(0x7f0000001cc0)="7b41155f4e473c1a520fd568ef291dfe0d485261828dd80809339a371cf48a86c8b0fc9e48c4c701fc41ddcf44ce7478f76fb2e36417dcf20a7091a4f98917b424de47997ce5592fe41551a00e99090940e3521eedcd2aa84d68c2664f3ca64125cde7181ac5f75c75da0ce1a11c962a8e", 0x71}], 0x9, &(0x7f0000002200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r7}}}, @rights={{0x2c, 0x1, 0x1, [r6, r5, r4, r1, r3, r3, r8]}}], 0xc8, 0x88c0}, 0x0) recvmmsg(r4, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000001680)) perf_event_open(&(0x7f0000001600)={0x5, 0x80, 0x4d, 0x7, 0x1, 0x9, 0x0, 0x7fffffff, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0xa0, 0x8, 0xe5, 0x5, 0x6, 0x9, 0x401, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000600)={{r3}, r9, 0x0, @unused=[0x8, 0x2, 0x4000000000000000, 0x4], @name="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"}) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000040)=0x28) openat(0xffffffffffffffff, 0x0, 0x18000, 0x0) 14:45:35 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x7, 0x8, 0x8, @loopback, @private1, 0x700, 0x10, 0x2, 0x8}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@local, r0}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4192, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x20, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000200)="c60d90f0c4de4ea76925ae4b84baa2f3c4672844de3f5edce379efec5851f70115d47131a041186133338bb6fdf410aa17b36595aad12ab229abbc88939a54540cf746254a7e11630fc1449299aab0b33e111ca05ac5a3be2900cea06d15b6e672091081f50568c9deea2cf04d0c279b16344a52ff520461e86be3e3d5251ba0944583fb62cd992c286172b5f6c2882d6f66ebe4efdb9c70421c0dd4f07f2dcbdab6d6bd6f0183a29205c1372947e8545cda1c47cc88dacd0574c273cd63e7ae42667b062488637ad12a892dd5e5", 0xce}, {&(0x7f0000000300)="2aa3aa4a9b19f2795fb19a0f92622cbac13a8feab7235aab716ca345705a4e9f5a4752f306b17eb499547f879b5383345474e7f46013fbaff23711575d1b474d3061ff8836c39735fbd982c272a1ac089948f529507a5163e93c3f7d89b487f872d1fb5ba542", 0x66}, {&(0x7f0000000380)="60cbb1ed13f78199a99d53fc7bc7df617a0b57f280974aa5826e62414da6eb6781d9b4c00061ac8878d022511e0cfa3654e8d7738ac46ed5bfa7b3f15e1d1ce4a69d8618c122c40bcb99a809a551934dd8e8610bac1e74e4855021cfce0d7f099dd6a8d6fd749e640ae2c288c218a8e796ba6d5f07366fd11b563eb31d1e7518d1c2b67dcbd7b425a5c3d9743143279b5dd147a02a57f2d0baaac7db1e5703579fdd55cfefd7708ab4b0ca8d8cb7dcb152c3ee75bb6c9bb9ac6486f046ae1afed5bf20f83680e127d267c5f549e511", 0xcf}, {&(0x7f0000000480)="f083ab3cefa9417ffa716c93f9cb237dcf374e790bebd5f1d825daca582f62230f2852b36e1267fcfc6b7f158f3ce81002cdad2e02b6124e6c17380f339289b2572b23a3ee6123aff0effbf3b59b019102b7c147a5da96474db1e8b7cc9ab2069456b3c5c9d4cc570f812d0186e9", 0x6e}, {&(0x7f0000000500)="cf749f99df0760e8cb529251a79aa49196c2d9d52aa1756ad2bbcefc4fd66c83b660b816ba09cfcf3232ddcec39c368158893c85bb0564a866", 0x39}], 0x5, &(0x7f0000000600)=[@hoplimit={{0x14, 0x29, 0x34, 0x7ff}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x2b, 0xe, 0x2, 0x6, 0x0, [@loopback, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x33}, @remote, @mcast2, @dev={0xfe, 0x80, '\x00', 0x15}]}}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)="8543431b40962271771b660993d8b4db35fe07094d925afd6f9ef09fc24f59d4c8fad1d832eda36bb066075eeb3ebd83f9f862949db4a3af961f8cf117542a09c971b672540d74a9a251b41fc52a86fcdf2e815d1c4c89490806551e95eda88812114dabae58f86248170f04ebabe6ecac58ef1efe0e7806da1e7d10481db2a51c75783502bc5e12c9f5a78ad390ebc2289f36ee566d126adb63052a60b362b1734c92a58e44737fc7f571e59a9a2f775b2e5e044dab5d99296c111cd91e44509c50f782ba36c4fe8b27b6c67241226e605f7659e8b350ff260601bac599e1af3f8e379000ddedd79821", 0xea}, {&(0x7f00000007c0)="696787f3e03fa381b5a222c6edeb466e8651564db56c9e539bc3473e312c4f80a6b66aa4f3a34a52b0673dc8b6cf84", 0x2f}, {&(0x7f0000000800)="859deb7cd3e101b8ffc0491221e3eaebb7a60f9afc2f24be5d15774126b5ee955d614ec8526b0d3f575f60ac19a8f3057dcdb8e671def0c7200d2942facedf295bbb0026b7ddfd745bb1cefb9e03a741d4f60394f9e89e0139e143897c97e47709697b903e980afa4df7b34458dba04c14c82c9ecbe870cfc50ec661279f62cdd4d32b6de41d592325b8487a3e399346ec64ca77b5497ca5962eb7e46dd94f3530095ee51f4bf286f4e0761dfad4a5b8f75631a6ab47840a91559ba9e4c8f82b451b992eebf9829357600fd1544d16407b53d124fa69d6088e4d02f368892cb93df377969f5c976facf2951f1e243d49", 0xf0}], 0x3, &(0x7f0000000940)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x73, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}}}, @hopopts={{0xd8, 0x29, 0x36, {0x3a, 0x17, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x5, 0x9bc9, [0x1, 0x3f]}}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @enc_lim={0x4, 0x1, 0x88}, @generic={0x9, 0x32, "d5d382bb5e5ac30a744937fbe3f9a16ebdee5d7b09cec8dbc6e78b09b1a0e9a275ba54687002cc0f2df33cb9906d84a45bac"}, @calipso={0x7, 0x28, {0x3, 0x8, 0xf9, 0x66, [0x100000001, 0x5, 0x1, 0x10000]}}, @hao={0xc9, 0x10, @empty}, @pad1, @hao={0xc9, 0x10, @private1}, @jumbo={0xc2, 0x4, 0x7ff}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r0}}}], 0x148}}], 0x2, 0x4080) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffffffc, 0x4, 0x0, 0x800000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x0) 14:45:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') 14:45:35 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@mcast1, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2000, 0x4, 0x400, 0x10000000000, 0x4084002c}) 14:45:35 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 519.089751] FAULT_INJECTION: forcing a failure. [ 519.089751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.092303] CPU: 0 PID: 5747 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 519.093776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 519.095570] Call Trace: [ 519.096152] dump_stack+0x107/0x167 [ 519.096941] should_fail.cold+0x5/0xa [ 519.097770] _copy_from_user+0x2e/0x1b0 [ 519.098633] io_copy_iov+0xbf/0x1c0 [ 519.099414] ? io_cancel_task_cb+0x80/0x80 [ 519.100331] ? kmalloc_order+0xfe/0x160 [ 519.101199] io_sqe_buffers_register+0x31d/0x880 [ 519.102233] ? io_sqd_handle_event+0x350/0x350 [ 519.103247] __do_sys_io_uring_register+0x1648/0x2fa0 [ 519.104379] ? io_recvmsg+0xd70/0xd70 [ 519.105206] ? fput_many+0x2f/0x1a0 [ 519.106000] ? ksys_write+0x1a9/0x260 [ 519.106826] ? __ia32_sys_read+0xb0/0xb0 [ 519.107716] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 519.108860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 519.109977] do_syscall_64+0x33/0x40 [ 519.110783] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 519.111902] RIP: 0033:0x7f748a34ab19 [ 519.112700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 519.116703] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 519.118351] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 519.119898] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 519.121441] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 519.122993] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 519.124717] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 519.149432] syz-executor.1 (5733) used greatest stack depth: 23480 bytes left 14:45:35 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:35 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r2 = accept4$packet(r0, 0x0, &(0x7f00000001c0), 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000002c0)="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") ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000100)={0x1ff, 0xa2, "6197b6428638059dfbedc6462131c642206a92eb0a010ed0cea0a9f81b9b59d355dea9ebf1fee7893363fa3fd816e4b6af21336c74ccc988bb89b36c6d8c308de06007a57d3f270842d5bc66df385b088b78e71caba7ba9b38c7f358e75082eac76e0a8874dfd4a3e0cf97773cbfde80690e03e992ea71e4bfdeea89f25a1b02ca3eccc5f2d6e9487dfd09313664c00d7f5705863e3bb17a7a94bef62b34ed5ceb8d"}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000080)) 14:45:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') 14:45:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:35 executing program 5: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x7, 0x8, 0x8, @loopback, @private1, 0x700, 0x10, 0x2, 0x8}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@local, r0}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x4192, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x20, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000200)="c60d90f0c4de4ea76925ae4b84baa2f3c4672844de3f5edce379efec5851f70115d47131a041186133338bb6fdf410aa17b36595aad12ab229abbc88939a54540cf746254a7e11630fc1449299aab0b33e111ca05ac5a3be2900cea06d15b6e672091081f50568c9deea2cf04d0c279b16344a52ff520461e86be3e3d5251ba0944583fb62cd992c286172b5f6c2882d6f66ebe4efdb9c70421c0dd4f07f2dcbdab6d6bd6f0183a29205c1372947e8545cda1c47cc88dacd0574c273cd63e7ae42667b062488637ad12a892dd5e5", 0xce}, {&(0x7f0000000300)="2aa3aa4a9b19f2795fb19a0f92622cbac13a8feab7235aab716ca345705a4e9f5a4752f306b17eb499547f879b5383345474e7f46013fbaff23711575d1b474d3061ff8836c39735fbd982c272a1ac089948f529507a5163e93c3f7d89b487f872d1fb5ba542", 0x66}, {&(0x7f0000000380)="60cbb1ed13f78199a99d53fc7bc7df617a0b57f280974aa5826e62414da6eb6781d9b4c00061ac8878d022511e0cfa3654e8d7738ac46ed5bfa7b3f15e1d1ce4a69d8618c122c40bcb99a809a551934dd8e8610bac1e74e4855021cfce0d7f099dd6a8d6fd749e640ae2c288c218a8e796ba6d5f07366fd11b563eb31d1e7518d1c2b67dcbd7b425a5c3d9743143279b5dd147a02a57f2d0baaac7db1e5703579fdd55cfefd7708ab4b0ca8d8cb7dcb152c3ee75bb6c9bb9ac6486f046ae1afed5bf20f83680e127d267c5f549e511", 0xcf}, {&(0x7f0000000480)="f083ab3cefa9417ffa716c93f9cb237dcf374e790bebd5f1d825daca582f62230f2852b36e1267fcfc6b7f158f3ce81002cdad2e02b6124e6c17380f339289b2572b23a3ee6123aff0effbf3b59b019102b7c147a5da96474db1e8b7cc9ab2069456b3c5c9d4cc570f812d0186e9", 0x6e}, {&(0x7f0000000500)="cf749f99df0760e8cb529251a79aa49196c2d9d52aa1756ad2bbcefc4fd66c83b660b816ba09cfcf3232ddcec39c368158893c85bb0564a866", 0x39}], 0x5, &(0x7f0000000600)=[@hoplimit={{0x14, 0x29, 0x34, 0x7ff}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x2b, 0xe, 0x2, 0x6, 0x0, [@loopback, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x33}, @remote, @mcast2, @dev={0xfe, 0x80, '\x00', 0x15}]}}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)="8543431b40962271771b660993d8b4db35fe07094d925afd6f9ef09fc24f59d4c8fad1d832eda36bb066075eeb3ebd83f9f862949db4a3af961f8cf117542a09c971b672540d74a9a251b41fc52a86fcdf2e815d1c4c89490806551e95eda88812114dabae58f86248170f04ebabe6ecac58ef1efe0e7806da1e7d10481db2a51c75783502bc5e12c9f5a78ad390ebc2289f36ee566d126adb63052a60b362b1734c92a58e44737fc7f571e59a9a2f775b2e5e044dab5d99296c111cd91e44509c50f782ba36c4fe8b27b6c67241226e605f7659e8b350ff260601bac599e1af3f8e379000ddedd79821", 0xea}, {&(0x7f00000007c0)="696787f3e03fa381b5a222c6edeb466e8651564db56c9e539bc3473e312c4f80a6b66aa4f3a34a52b0673dc8b6cf84", 0x2f}, {&(0x7f0000000800)="859deb7cd3e101b8ffc0491221e3eaebb7a60f9afc2f24be5d15774126b5ee955d614ec8526b0d3f575f60ac19a8f3057dcdb8e671def0c7200d2942facedf295bbb0026b7ddfd745bb1cefb9e03a741d4f60394f9e89e0139e143897c97e47709697b903e980afa4df7b34458dba04c14c82c9ecbe870cfc50ec661279f62cdd4d32b6de41d592325b8487a3e399346ec64ca77b5497ca5962eb7e46dd94f3530095ee51f4bf286f4e0761dfad4a5b8f75631a6ab47840a91559ba9e4c8f82b451b992eebf9829357600fd1544d16407b53d124fa69d6088e4d02f368892cb93df377969f5c976facf2951f1e243d49", 0xf0}], 0x3, &(0x7f0000000940)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x73, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}}}, @hopopts={{0xd8, 0x29, 0x36, {0x3a, 0x17, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x5, 0x9bc9, [0x1, 0x3f]}}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @enc_lim={0x4, 0x1, 0x88}, @generic={0x9, 0x32, "d5d382bb5e5ac30a744937fbe3f9a16ebdee5d7b09cec8dbc6e78b09b1a0e9a275ba54687002cc0f2df33cb9906d84a45bac"}, @calipso={0x7, 0x28, {0x3, 0x8, 0xf9, 0x66, [0x100000001, 0x5, 0x1, 0x10000]}}, @hao={0xc9, 0x10, @empty}, @pad1, @hao={0xc9, 0x10, @private1}, @jumbo={0xc2, 0x4, 0x7ff}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r0}}}], 0x148}}], 0x2, 0x4080) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffffffc, 0x4, 0x0, 0x800000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x0) 14:45:35 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget(0x1, 0x4000, 0x40, &(0x7f00005da000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000752000/0x2000)=nil, 0x1000) mlock2(&(0x7f0000417000/0x3000)=nil, 0x3000, 0x0) 14:45:35 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) fspick(r1, &(0x7f0000000140)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa0, 0x26, 0x101, 0x0, 0x0, {0x1}, [@typed={0x8a, 0x0, 0x0, 0x0, @binary="a0eab51f24f4074cfbfbbb07324cc62f701d9f2905855dd18b1f0d5ce7f3493090af5beef11c281fbcc10f4675223ffc29811a6d82c0c17acd7a40480a51d57b2b3cc217bf3558b4d61924aa0922349a895d495ac12b16cb2b0cb00a0c3d1fb5b695cfebd4ad94d1a5642d3ec010c0792e9f8a9bff9bc38d6a5f4c42eb9238b7bc3a2be2cefb"}]}, 0xa0}}, 0x8044) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)={0x14, 0x2c, 0xcd2781b960712dff}, 0x14}}, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x924}}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@noextend}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodevmap'}}, {@fowner_gt}, {@hash}, {@fowner_eq}, {@fsname={'fsname', 0x3d, '.'}}, {@permit_directio}]}}) 14:45:50 executing program 3: socketpair(0x11, 0x0, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2740010}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x14c, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xf4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffa2f}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x9c, 0x5, "6890a6e69ea14f66fe0d5f78358a19e5bbeada2ccad0531a5762f86035c3c6f6c7a748730f332593c0cd1f41fefbef7560c8f59ad78fff0025b20db6da27f6aa0cd74a22d64499a094fd8348359f794ec8ba71f41d04787621cad0a4e2067678c435bf5baec4b283cc818af794beb5011c4e220fe06d6fafab79974236c88d8720ad9dbcacbe0f770fdc59531479057e1fa7aed118da0eb2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "d7569670"}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x11}, 0x20040004) open$dir(&(0x7f00000006c0)='./file0\x00', 0x220000, 0x111) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x1, 0x8000, 0x13, @private0, @mcast2, 0x40, 0x7, 0x80, 0x6}}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000100)) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r9], 0x38}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x4b, 0xfffffffd, 0x8, @loopback, @empty, 0x700, 0x7, 0x3f}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000300)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x9, 0x8000, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x7, 0x7ff, 0xdadd}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="34020000", @ANYRES16=r2, @ANYBLOB="000229bd7000fbdbdf2517000000640001800800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="140002006e7230000000000000000000000000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800030002000000400001801400020076657468315f746f5f7465616d0000001400020076657468315f746f5f626f6e6400000014000200767863616e3100000000000000000000840001801400020069703667726530000000000000000000080003000100000008000300010000000800030001000000140002006272696467655f736c6176655f31000014000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3100000000080003000000000008000300010000005c0001801400020077673200000000000000000000000000080003000200000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="14000200736974300000000000000000000000000800030002000000080003000100000008000300010000001c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="300001801400020073797a5f74756e0000000000000100000800030001000000080003000400000008000300020000005000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r11, @ANYBLOB="0800030001000000080003000200000014000200766c616e30000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="0800030001000000"], 0x234}, 0x1, 0x0, 0x0, 0x80}, 0x1) 14:45:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffc}) unlink(&(0x7f0000000200)='./file0\x00') 14:45:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp\x00') epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 14:45:50 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x9, 0x4) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'filter\x00', 0x0, [0x1], '\x00', 0x1000000}, &(0x7f0000000000)=0x54) 14:45:50 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 36) 14:45:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:50 executing program 7: r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xf0cf}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c2", 0x61, 0x400}], 0x0, &(0x7f0000012e00)) [ 534.270425] 9pnet: Insufficient options for proto=fd 14:45:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 534.290697] FAULT_INJECTION: forcing a failure. [ 534.290697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.293379] CPU: 0 PID: 5799 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 534.294962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 534.296817] Call Trace: [ 534.297546] dump_stack+0x107/0x167 [ 534.298426] should_fail.cold+0x5/0xa [ 534.299375] _copy_from_user+0x2e/0x1b0 [ 534.300626] io_copy_iov+0xbf/0x1c0 [ 534.301623] ? io_cancel_task_cb+0x80/0x80 [ 534.302788] ? kmalloc_order+0xfe/0x160 [ 534.303748] io_sqe_buffers_register+0x31d/0x880 [ 534.304942] ? io_sqd_handle_event+0x350/0x350 [ 534.306226] __do_sys_io_uring_register+0x1648/0x2fa0 [ 534.307449] ? io_recvmsg+0xd70/0xd70 [ 534.308310] ? fput_many+0x2f/0x1a0 [ 534.309125] ? ksys_write+0x1a9/0x260 [ 534.309985] ? __ia32_sys_read+0xb0/0xb0 [ 534.310902] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 534.312085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 534.313233] do_syscall_64+0x33/0x40 [ 534.314070] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 534.315242] RIP: 0033:0x7f748a34ab19 [ 534.316275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:45:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 534.321063] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 534.323203] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 534.325183] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 534.327063] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 534.329037] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 534.330881] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:45:50 executing program 3: ftruncate(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) statx(r0, &(0x7f0000000240)='./file0\x00', 0x4000, 0x2, &(0x7f00000005c0)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000006c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x35f7, 0xffffffffffffffff, &(0x7f0000000280)="1491149fe66b5d7095f91dffd89023eaa6ef0e501ba63599b761651300c946b9139133b909423cc45c82f44c6a55815a49a8b1455952a82b3d97b5fdaff4704bb46248cbb32d83b5b1b0217289053d0a62c464d127e4e60cf7f6bb49527a0cf6121d2b0de255a37e391573aac06fa798d1c882c0573a6b8bdd47d33ea6ab48ad30e329828c5bf06ef51c3b61299ec7ec4b99433bc83f8d1c7b6d05ef76006cee07dd5a4581bb53421a323604f372656a25c45369", 0xb4, 0x7}, &(0x7f0000000380)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) pipe(&(0x7f0000000440)) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000740)={0x7, 0x7, 0x6, 0x9, 0x1, [{0x7, 0xfffffffffffffffb, 0x10000, '\x00', 0xa}]}) setresuid(0xffffffffffffffff, 0x0, 0x0) dup(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c00, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001c80)=ANY=[@ANYBLOB="b8cbfaa89bc506c9606715001200000000101000"], 0x14}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x85089, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00210c000000000000000004000254440008000c000000"], 0x1c}}, 0x20040000) [ 534.350393] loop7: detected capacity change from 0 to 2048 [ 534.357425] 9pnet: Insufficient options for proto=fd [ 534.358399] EXT4-fs (loop7): unsupported descriptor size 0 14:45:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x4, 0xfffffffffffffede, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf0) lseek(r1, 0x7, 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x3, 0xe2, 0x7, 0x8, 0x0, 0x4ef, 0x80001, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x2, @perf_config_ext={0x76, 0x24}, 0x500, 0x1ff, 0x1ff, 0x2, 0x9, 0x0, 0x86cc, 0x0, 0x5, 0x0, 0x401}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) quotactl(0x1, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)="d60a2419ac31ed55215da2d0a9c41bb285f83e1edf44de09757f2a868e24d6afe9551035cb81bb774c61c66e223939413660ae94b6e45829f0b59826") r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r6], 0x38}}], 0x1, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) dup(r7) 14:45:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') 14:45:50 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 37) 14:45:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 534.435113] 9pnet: Insufficient options for proto=fd 14:45:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34444, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x200000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xfc75fb170653a5ac, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f0000001300)) [ 534.450178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:45:51 executing program 7: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000700)='id_legacy\x00', &(0x7f0000000740)=@keyring) r0 = add_key$keyring(&(0x7f0000002c40), &(0x7f0000002c80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000002b00), 0x0, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000002c0)=@chain) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000840)=""/106, 0x6a}], 0x1, 0x200000, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='keyring\x00', r1) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00', 0x2, r1) keyctl$negate(0xd, r1, 0x100000001, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/36, 0x24, 0x0, 0x3f}) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "e160e1f9f1ca10c99821d7ca0b2ac417ad49d010840146d886edf6c9f78003d794390e41256b521af42ec815e9a50a1af4fc764e7cde0979b7435ce1179b4723", 0x2f}, 0x48, r3) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)='dns_resolver\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='ceph\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}, 0x3040, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) clone3(&(0x7f0000000ac0)={0x17412e500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 534.483965] FAULT_INJECTION: forcing a failure. [ 534.483965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.485419] CPU: 1 PID: 5822 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 534.486200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 534.487144] Call Trace: [ 534.487450] dump_stack+0x107/0x167 [ 534.487870] should_fail.cold+0x5/0xa [ 534.488321] _copy_from_user+0x2e/0x1b0 [ 534.488782] io_copy_iov+0xbf/0x1c0 [ 534.489197] ? io_cancel_task_cb+0x80/0x80 [ 534.489679] ? kmalloc_order+0xfe/0x160 [ 534.490136] io_sqe_buffers_register+0x31d/0x880 [ 534.490680] ? io_sqd_handle_event+0x350/0x350 [ 534.491216] __do_sys_io_uring_register+0x1648/0x2fa0 [ 534.491812] ? io_recvmsg+0xd70/0xd70 [ 534.492254] ? fput_many+0x2f/0x1a0 [ 534.492672] ? ksys_write+0x1a9/0x260 [ 534.493115] ? __ia32_sys_read+0xb0/0xb0 [ 534.493582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 534.494184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 534.494777] do_syscall_64+0x33/0x40 [ 534.495203] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 534.495787] RIP: 0033:0x7f748a34ab19 [ 534.496216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 534.496429] 9pnet: Insufficient options for proto=fd [ 534.498302] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 534.498314] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 534.498320] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 534.498326] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 534.498332] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 534.498338] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:45:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003bc0)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x1, 0x8, 0x1, 0x1, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local, @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @flowinfo={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x98}}, {{&(0x7f0000000580)={0xa, 0x4e20, 0xffff8000, @local, 0x7}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000005c0)="860525fee685a2bc49857df178b4e77277e5d0f767f6cb73dd54c2cf9fcb1d9b068de1a51ccd2af4a6fc5cf4acd3806d768ecf93f8efb29d2c06090cca4c4ddf8bfa69b4a5ba9a30473aca381d505e4111a67e453576f6f35bb405d8fc9ed7fab4454da9df96bab84277868bfcdf4155d7e76c449ac2c6ffa71ab780c4ef5584c2a668ed4a5b5936bbecbec59e34890abf41b25b8e7ff5901fedfdefda4854d186b691e75bbfff9f", 0xa8}], 0x1, &(0x7f0000001700)=[@tclass={{0x14, 0x29, 0x43, 0x8a0}}, @rthdr={{0x48, 0x29, 0x39, {0x87, 0x6, 0x2, 0x1, 0x0, [@empty, @mcast1, @rand_addr=' \x01\x00']}}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001a00)="2a07002630911074c32cdabc112b8fc9f7addeb8bacbdb684be91d5f84b2797d02bf5871e883e7b650a29f5dc23f415e82e19bfbd59b90ee1170426e679b1ae70fdf7253432eb2c883a8a702ceb6d404155e900b21ae1f1418df84ce716e035387b61d36aac747dcd49a879c166629be0bd87281340f585ead88f0681bb531cce1bd14f477a1b79d8c955d5900c5decb3fecaa3f", 0x94}, {&(0x7f0000001ac0)="c51aece44dc6e365937d750cc995b17aa2333ebccad997bc1bc85dd7ecf865e2e53128c305eb77b513e3d9a3ff5b2b8049764276c226d4d5fcff03a97722c02bebe22c69f9a62c2bac8281d8e936171e46c231d57ee80ed532dfb77f19790d7c2d695966a7a67b6c11dd54ea0949ae86bf7a", 0x72}, {&(0x7f0000000040)="bcc73f2d9d726572b7cd98bc75d14bd9a0664da43eab", 0x16}, {&(0x7f0000001e00)="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", 0xa24}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x4, 0x80) 14:45:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:45:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x12042, 0x0) readv(r0, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/210, 0x9fc00}], 0x3) 14:45:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(0x0) 14:45:51 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 38) 14:45:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 534.606378] 9pnet: Insufficient options for proto=fd 14:45:51 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011000)=ANY=[@ANYBLOB="18"]) [ 534.625624] FAULT_INJECTION: forcing a failure. [ 534.625624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.627000] CPU: 1 PID: 5837 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 534.627777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 534.628724] Call Trace: [ 534.629032] dump_stack+0x107/0x167 [ 534.629453] should_fail.cold+0x5/0xa [ 534.629892] _copy_from_user+0x2e/0x1b0 [ 534.630345] io_copy_iov+0xbf/0x1c0 [ 534.630763] ? io_cancel_task_cb+0x80/0x80 [ 534.631242] ? kmalloc_order+0xfe/0x160 [ 534.631699] io_sqe_buffers_register+0x31d/0x880 [ 534.632249] ? io_sqd_handle_event+0x350/0x350 [ 534.632785] __do_sys_io_uring_register+0x1648/0x2fa0 [ 534.633376] ? io_recvmsg+0xd70/0xd70 [ 534.633822] ? fput_many+0x2f/0x1a0 [ 534.634231] ? ksys_write+0x1a9/0x260 [ 534.634668] ? __ia32_sys_read+0xb0/0xb0 [ 534.635139] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 534.635735] ? syscall_enter_from_user_mode+0x1d/0x50 [ 534.636327] do_syscall_64+0x33/0x40 [ 534.636752] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 534.637333] RIP: 0033:0x7f748a34ab19 [ 534.637755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 534.639843] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 534.640718] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 534.641536] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 534.642353] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 534.643169] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 534.643983] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:45:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 534.688511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 534.722239] 9pnet: Insufficient options for proto=fd [ 534.743375] loop7: detected capacity change from 0 to 131072 [ 534.752511] FAT-fs (loop7): Unrecognized mount option "" or missing value [ 550.778488] FAULT_INJECTION: forcing a failure. [ 550.778488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.780729] CPU: 0 PID: 5861 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 550.781991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 550.783503] Call Trace: [ 550.783993] dump_stack+0x107/0x167 [ 550.784673] should_fail.cold+0x5/0xa 14:46:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(0x0) 14:46:07 executing program 1: pread64(0xffffffffffffffff, &(0x7f00000014c0)=""/136, 0x88, 0xfffffffffffffffe) 14:46:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@pktinfo={{0x24, 0x29, 0x43, {@private0}}}], 0x28}}], 0x2, 0x0) 14:46:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:46:07 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 39) 14:46:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:46:07 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) setresuid(0x0, r1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@getae={0xa4, 0x1f, 0x300, 0x70bd25, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d4, 0x2, 0x32}, @in6=@local, 0xb, 0x3503}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @etimer_thresh={0x8, 0xc, 0x2}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd29, 0x70bd25, 0x70bd26, 0x70bd2b, 0x7, [0x4, 0x9, 0x6, 0x6]}}, @srcaddr={0x14, 0xd, @in=@rand_addr=0x64010101}, @tfcpad={0x8, 0x16, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$KDGKBTYPE(r0, 0x4b4d, &(0x7f0000000080)) [ 550.785387] _copy_from_user+0x2e/0x1b0 [ 550.786288] io_copy_iov+0xbf/0x1c0 [ 550.786954] ? io_cancel_task_cb+0x80/0x80 [ 550.787711] ? kmalloc_order+0xfe/0x160 [ 550.788454] io_sqe_buffers_register+0x31d/0x880 [ 550.789315] ? io_sqd_handle_event+0x350/0x350 [ 550.790162] __do_sys_io_uring_register+0x1648/0x2fa0 [ 550.791101] ? io_recvmsg+0xd70/0xd70 [ 550.791791] ? fput_many+0x2f/0x1a0 [ 550.792439] ? ksys_write+0x1a9/0x260 [ 550.793121] ? __ia32_sys_read+0xb0/0xb0 [ 550.793876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 550.794829] ? syscall_enter_from_user_mode+0x1d/0x50 [ 550.795797] do_syscall_64+0x33/0x40 [ 550.796470] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 550.797430] RIP: 0033:0x7f748a34ab19 14:46:07 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000140), 0xffffffffffff2c6c, 0x121001) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="498be5ad7485726516f595c7f3cca243d83c5cd2591d54664482911bd00b4c", @ANYRES16=0x0, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x40090) r1 = fsmount(r0, 0x0, 0xe) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) r3 = openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x144, 0x9, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1e}, [@nested={0x12e, 0x19, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @fd=r2}, @typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0x57, 0x0, 0x0, @ipv4=@empty}, @generic="9f89a3ffa0dd61d080b963c5fd40a42cdddc84c7bd364de5d48ec96aba41c158449a3cb785204ec1f2bfce98cb96bc324606f52949b1c64b0db5c42a1713a7807b36897c06edb23296bf3da239500b7ffdc8224508617de6a545064cde189c2cbb76f25ed2583c9b5b6d3a4b2370461c3cf64e945bfe4f5d14c1a2d2d960c8206df06bbdb32a93c89d4d6eeb29a2f7ad05e5ea6f03c74ed9914dba9cea910f8191b86af5e1f768", @typed={0x8, 0x41, 0x0, 0x0, @fd=r3}, @generic="7efb90404361c1f08fa2f56aec07c58eb2ef37cef71a8c973f4ff88db4a5023f9dedde6118ef96f97f4e7b6c3ffd0a9adeb07e604120547bebf96258405b56315c500eb6e0d37afba8093391ec07c1104ea86e126f5ba9"]}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0xba2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r4, r0, 0x2) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b68, 0x0) signalfd(r4, &(0x7f0000000080)={[0xc42]}, 0x8) socket$netlink(0x10, 0x3, 0x0) [ 550.798125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 550.801504] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 550.802891] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 550.804170] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 550.805499] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 550.806793] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 550.808077] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:46:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)={0x24, 0x1a, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x5, 0x1b, 0x0, 0x1, [@generic="06"]}]}, 0x24}}, 0x0) 14:46:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:46:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:46:07 executing program 1: r0 = io_uring_setup(0x396d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x100}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) fcntl$notify(r0, 0x402, 0x80000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000280)={0x7f}, 0x2) sendmsg$inet6(r2, &(0x7f0000000540)={&(0x7f0000000040)={0xa, 0x4e23, 0x7fff, @remote}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="a264cf0690213c697a748076a84cfa6b0da246752d75e9f30286b79f68240ab72691909ad1906e0608a33b8ba6f49dcc06763cdc647a88950a9e6a6c444fcbc90b6a180f66b6f9c39987ec9454b055afa2f923af38979e2af5e0a2662fa268246d1b1888ca9a91380efb078539650e5b25c18f5d61c1eda4a6240b179e8f664896eba6cfdfaea22a0da45d343cf954f16015acd1f5b30d012320e5519c9f70efa86956938813bf73319f775e141771919083e80840537a43b8b8555cbbd892a507c462ff3b5e20303effb8076e94cb2047c2b94e171f104fd34594a55e88d2a0511ec019a974f8cd", 0xe8}, {&(0x7f0000000180)="49919a073d98aefb5c7cbe38bb9541518007232a5aa324eb260af5eaa2033e178c77fc0578c10c25104e3e02cc0d23dd5a5f4f60717d53a6f78dc03224b77347b90fb5e9c5f8c590e78df7ba56549e1f177d7bb98045a1de398f4da70436ff42f8d905e5d08743a7c247b789e2f4d2bc5a5a88c79386a2f4902a45b5c1ef5e1240f7939f7fb51825d648291d1a089add2b6c738908d740", 0x97}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x290}, 0x48800) lseek(r1, 0x0, 0x2) r3 = signalfd4(r1, &(0x7f0000000000)={[0x1ff]}, 0x8, 0x80000) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r4, 0x4, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000380)=0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xff, 0x9, 0x3, 0x3f, 0x0, 0x2f, 0x60020, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40, 0x1, @perf_bp={&(0x7f00000002c0)}, 0x8, 0x6, 0x200, 0x7, 0x3f, 0x200, 0x9, 0x0, 0xd982, 0x0, 0x7d}, r5, 0x9, r3, 0x624e82c75f9ecc14) setsockopt$inet6_int(r3, 0x29, 0x28, 0x0, 0x0) 14:46:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:46:19 executing program 1: r0 = syz_io_uring_setup(0x24, &(0x7f0000000440)={0x0, 0xfffffffd, 0x1, 0x0, 0xbf}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x0, 0x989680}}, 0x5b) io_uring_enter(r0, 0x42b6, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r3, 0x0, &(0x7f0000000100)="74853fe8b4ea2e25d3e367b6e9a730ae02452241a136068c759a75f3cdb536a4c8559ab59be25ab2d646a967f9e4b1db57b6b1825977a4514c540b2a153cf3cc07f42bc00121f2a1c316b7a73fa2b9e8a4bb741155fa8b2de5e6cc6d12d72965", 0x60, 0x2040, 0x0, {0x0, r5}}, 0x6) read(r3, &(0x7f0000000000)=""/47, 0x2f) 14:46:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(0x0) 14:46:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340), 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4000044) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x291f0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000180)={0x7c69, 0x0, 0x2, 0x2}) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044001) syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104, 0x74bfda24, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r2, 0x0, r2) recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffff3e, 0xcd04, 0x0, 0xfffffffffffffed7) socket$inet6_tcp(0xa, 0x1, 0x0) 14:46:19 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 40) 14:46:19 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x82001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0xb6, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) 14:46:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:46:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x25, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x2c}}, 0x0) [ 563.474977] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 14:46:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 563.491277] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 563.502403] FAULT_INJECTION: forcing a failure. [ 563.502403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.504928] CPU: 0 PID: 5911 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 563.506365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 563.508114] Call Trace: [ 563.508693] dump_stack+0x107/0x167 [ 563.509458] should_fail.cold+0x5/0xa [ 563.510263] _copy_from_user+0x2e/0x1b0 [ 563.511097] io_copy_iov+0xbf/0x1c0 [ 563.511859] ? io_cancel_task_cb+0x80/0x80 [ 563.512759] ? kmalloc_order+0xfe/0x160 [ 563.513607] io_sqe_buffers_register+0x31d/0x880 [ 563.514604] ? io_sqd_handle_event+0x350/0x350 [ 563.515580] __do_sys_io_uring_register+0x1648/0x2fa0 [ 563.516676] ? io_recvmsg+0xd70/0xd70 [ 563.517474] ? fput_many+0x2f/0x1a0 [ 563.518229] ? ksys_write+0x1a9/0x260 [ 563.519017] ? __ia32_sys_read+0xb0/0xb0 [ 563.519871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 563.520970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 563.522039] do_syscall_64+0x33/0x40 [ 563.522809] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 563.523872] RIP: 0033:0x7f748a34ab19 14:46:20 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x133c, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) [ 563.524643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 563.528630] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 563.530316] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 563.532039] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 563.533768] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 563.535491] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 563.537228] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:46:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:46:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:46:20 executing program 7: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f0000000540)="00793ff4ffca", 0x6, r0) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)="c658043eda07210d7733815049685cd6b0f78bbff224decb3e2243019f58f9e31e6f58a0ca0b43226b6281f2914d15a3fdedccbb81e694f14328ec97f77e718c4ad2eaabdd2e0f017efb785f6aae322903f554259f34f59a11bea3fedbfc162278c3409a0c75", 0x66, r1) 14:46:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 563.684537] dns_resolver: Unsupported content type (121) [ 563.688847] dns_resolver: Unsupported content type (121) 14:46:36 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 41) 14:46:36 executing program 1: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x5, &(0x7f0000001200)=[{&(0x7f0000000000)="f00c32c5068dd4b45bc37664f55e36cf6d4ad0e08ac70c31feb4e8889253e7a1ad83fe0c03af", 0x26, 0x5}, {&(0x7f0000000040)="653efc98a8e17cd322a43edfedeaa800ab41a870119ef8a1dd8e746d2277d1675bcf91109478117ea2291e4e053be756c091eda28a1fd73ade1c6d901a713cdcddf518a8006ebd438eba14b8e37982ee420cd256edd2ad8bd28907b2ce321a461c6c3787d8facd4ec05c19169bb48a23c92c1ec62bf6a783994594aef5858d5f839c8c226d8a38c6450ef9bb29a7fda1af5a02cd0022cc3e605f210400cc734c7499e0ad3a17715c97839cb9ab6eb5a7b4ff3972d99e1a623affd8d7cb5f25535c06b89762535a1cb40b82a6ae2dfc5c28f28977fc9728f1cde9f0883788bd0519b8b79bf3", 0xe5, 0x2}, {&(0x7f0000000140)="8794143d3c2be3e705eaf8295077d985733dd608b0c1b2a741d74d05fa7201aea6f28d29d8f46bdebebbdff56f751377708a00b523c1b355becbb458cddce275a6f2ad4c7b0263341041bc441d323b62d767b34f6d5bc8cd", 0x58, 0x4}, {&(0x7f00000001c0)="8358f52877dedb705096f95101fcac4e711ea4d2ac4a9a322febad02101358cc2904638a1d15e695c2b08f3af4f55b452d9cf97246d6bf52554c", 0x3a, 0x3}, {&(0x7f0000000200)="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", 0x1000, 0x1}], 0x0, 0x0) 14:46:36 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000340)=""/149, 0x95, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000006, 0x10, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x5, 0x200, 0x20, 0x5, 0xa, 0x1}, 0x81) finit_module(r1, &(0x7f0000000000)=':$[]\x15.\'})[&]@(\x00', 0x2) 14:46:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:46:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:46:36 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc3}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) poll(&(0x7f0000000080)=[{r0, 0x1080}, {r3, 0x508}], 0x2, 0x3) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="140231a7ddaba982d1240b49dcc9357f46a53de070f408db3d83292e2ec1b51eaa0f579286c7286c75b45871e8fd8f01010000c8c513929e415f99ffd980597522daefd1a4"], 0x18) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000000c0)) 14:46:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') (fail_nth: 1) 14:46:36 executing program 7: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_emit_ethernet(0x180, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5a, 0x4, 0x1, 0x4, 0x172, 0x66, 0x0, 0x0, 0x2, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x8, [@broadcast, @loopback, @empty]}, @rr={0x7, 0x23, 0xe0, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @private=0xa010102, @empty, @empty, @multicast1, @remote]}, @lsrr={0x83, 0x17, 0x6b, [@broadcast, @loopback, @rand_addr=0x64010101, @private=0xa010101, @private=0xa010100]}, @timestamp_prespec={0x44, 0x24, 0x95, 0x3, 0x7, [{@local, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0x3ff}, {@rand_addr=0x64010100, 0x7}]}, @lsrr={0x83, 0x13, 0x4a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, @local, @local]}, @timestamp_addr={0x44, 0x1c, 0xc3, 0x1, 0x9, [{@remote, 0x3f}, {@multicast1, 0x6}, {@rand_addr=0x64010102, 0x20}]}, @ssrr={0x89, 0x2b, 0xf3, [@multicast1, @multicast2, @multicast1, @local, @empty, @empty, @loopback, @multicast2, @multicast1, @multicast1]}, @cipso={0x86, 0x76, 0x3, [{0x2, 0x8, "bd697a49dadb"}, {0x7, 0xf, "af7ca5204361b7f3bb891914ac"}, {0x2, 0x12, "05bdfa450d988ef8796cd0d8859b9741"}, {0x5, 0x7, "a7ff673bc1"}, {0x6, 0xb, "86c8f5895e85353814"}, {0x5, 0x10, "53e6668c9e59de214b7b40555e1b"}, {0x0, 0xb, "d627cb0b66f41c7752"}, {0x2, 0x9, "4f0e3d6cfdcd7b"}, {0x1, 0x2}, {0x0, 0xf, "a9c8526ca520a061a25ca5d502"}]}, @timestamp_prespec={0x44, 0x14, 0x90, 0x3, 0x9, [{@broadcast, 0x2fb29eb6}, {@rand_addr=0x64010102, 0xc569}]}]}}, {0x15, 0x80, 0x0, @multicast2, "ed4c"}}}}}, 0x0) syz_emit_ethernet(0x12f, &(0x7f0000000280)={@link_local, @random="b8fd876a79f5", @val={@val={0x9100, 0x1, 0x1, 0x4}, {0x8100, 0x4}}, {@ipv4={0x800, @tcp={{0x21, 0x4, 0x1, 0x30, 0x119, 0x65, 0x0, 0xd4, 0x6, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0x3a, 0x1, 0x1, [{@multicast2, 0x100}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@private=0xa010102, 0x800}, {@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3f}, {@multicast2, 0x40}]}, @lsrr={0x83, 0x17, 0x58, [@empty, @local, @multicast1, @multicast2, @multicast1]}, @rr={0x7, 0x1b, 0x1b, [@private=0xa010101, @rand_addr=0x64010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0x23}, @remote]}]}}, {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x11, 0xc2, 0x6, 0x0, 0x4, {[@fastopen={0x22, 0x10, "667d1abebb4902ece2eebce30459"}, @sack={0x5, 0xe, [0x46d3, 0xeb0e6cf, 0x3]}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x1}, @exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}]}}, {"9e121195e6a0d66a961a102c3128dd0d588ece73490a3e2ad6252b688d14e387ac39baa58a10ba3d96d0faf0aa585f1880157cabca27e5684cf2e651a64514dce81d130a83caa2cd975442f4d89a664ccb"}}}}}}, 0x0) syz_emit_ethernet(0x29, &(0x7f00000003c0)={@local, @remote, @void, {@arp={0x806, @generic={0x2, 0x18, 0x6, 0x7, 0x9, @empty, "bd8bb18aa2f869"}}}}, &(0x7f0000000400)={0x1, 0x4, [0x1b3, 0x632, 0x171, 0xf2f]}) syz_emit_ethernet(0xc2, &(0x7f0000000440)={@random="58568e3a1112", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@llc={0x4, {@llc={0x90, 0x8e, 'z', "cd75cdeaef0ac273f2c45602f39c9ae9f798cebb20bd446b1b5e399c5921bccb308a008e75a610fb0d15db3e41cdcb1bedf72aecbc26113ae90a68e6029915f9038f744941909be81cc5820b76490c6201f9e6ddde7a4413c3cf252300f82cd98791b29ec0a4585705b32154e3ecb2b25026be6c7c8d18d1e601464dbcf66c39de7d0df8a39d722d474d9132b450974678d7f59ed15d40d68e463eb44736db6a40f9fe7a311dfd0715b8fe3e29"}}}}}, &(0x7f0000000540)={0x0, 0x2, [0xd44, 0x484, 0xcb4, 0x80a]}) syz_emit_ethernet(0x8f, &(0x7f0000000180)={@multicast, @multicast, @val={@val={0x9100, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0x4bad}, {0x5}, {0x5}, {0x3, 0x0, 0x1}, {0x21}, {0xba, 0x0, 0x1}], @llc={@llc={0x8e, 0x2, 'U', "e1a773e196f26316688d959cc2f76c4e073e7e1d9ede5a9d03cfdfe3825a7498b470a515d39c18d2c3a6a17a7cd1ee32e12f2e4b775035bee7c3594a8487569c3a2a24a906caf155f845a478569ca328103a2cf74f7894c194261ad1a619"}}}}}}, &(0x7f0000000240)={0x0, 0x3, [0x135, 0x85d, 0x619, 0xefd]}) gettid() [ 579.483940] FAULT_INJECTION: forcing a failure. [ 579.483940] name failslab, interval 1, probability 0, space 0, times 0 [ 579.486513] CPU: 0 PID: 5936 Comm: syz-executor.2 Not tainted 5.10.247 #1 [ 579.488053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 579.489921] Call Trace: [ 579.490514] dump_stack+0x107/0x167 [ 579.491337] should_fail.cold+0x5/0xa [ 579.492192] ? getname_flags.part.0+0x50/0x4f0 [ 579.493222] should_failslab+0x5/0x20 [ 579.494076] kmem_cache_alloc+0x5b/0x310 [ 579.494996] getname_flags.part.0+0x50/0x4f0 [ 579.495992] __x64_sys_unlink+0xb1/0x100 [ 579.496912] do_syscall_64+0x33/0x40 [ 579.497748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 579.498894] RIP: 0033:0x7fcc92ffab19 [ 579.499724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 579.503850] RSP: 002b:00007fcc90570188 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 579.505558] RAX: ffffffffffffffda RBX: 00007fcc9310df60 RCX: 00007fcc92ffab19 [ 579.507166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000200 [ 579.508770] RBP: 00007fcc905701d0 R08: 0000000000000000 R09: 0000000000000000 [ 579.510360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.511944] R13: 00007fff81f633bf R14: 00007fcc90570300 R15: 0000000000022000 14:46:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 579.545518] FAULT_INJECTION: forcing a failure. [ 579.545518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.548202] CPU: 1 PID: 5949 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 579.549663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 579.551403] Call Trace: [ 579.551966] dump_stack+0x107/0x167 [ 579.552748] should_fail.cold+0x5/0xa [ 579.553555] _copy_from_user+0x2e/0x1b0 [ 579.554398] io_copy_iov+0xbf/0x1c0 [ 579.555161] ? io_cancel_task_cb+0x80/0x80 [ 579.556051] ? kmalloc_order+0xfe/0x160 [ 579.556908] io_sqe_buffers_register+0x31d/0x880 [ 579.557917] ? io_sqd_handle_event+0x350/0x350 [ 579.558898] __do_sys_io_uring_register+0x1648/0x2fa0 [ 579.559996] ? io_recvmsg+0xd70/0xd70 [ 579.560809] ? fput_many+0x2f/0x1a0 [ 579.561572] ? ksys_write+0x1a9/0x260 [ 579.562372] ? __ia32_sys_read+0xb0/0xb0 [ 579.563240] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 579.564346] ? syscall_enter_from_user_mode+0x1d/0x50 [ 579.565440] do_syscall_64+0x33/0x40 [ 579.566231] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 579.567317] RIP: 0033:0x7f748a34ab19 [ 579.568120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 579.572002] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 579.573618] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 579.575123] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 579.576633] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 579.578121] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 579.579619] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:46:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) 14:46:36 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x48801, 0x68) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800}]}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x2c36, 0x0, 0x0, 0x0, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r7, 0x4, 0x0) openat(r7, &(0x7f0000000040)='./file0\x00', 0x40100, 0x2) 14:46:36 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='gfs2meta\x00', 0x48, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0xffffffc1}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x5, 0x9, &(0x7f0000000880)=[{&(0x7f0000000280)="07964ced7c6dc4104c11f7a43c457c07c1d9e1abf1e47aedc20c3586b689856ae95bf317514d4a60e5f729c16a79", 0x2e, 0x1}, {&(0x7f00000002c0)="131229353ca831d0d645e6efc135c40042643e89416ae8231470749b6222a69e70b9d02d3fcad5ce3878ee60d0688fb528e2f22c216867c4d86493d0f4d39ea35d7ba49225e34adfbfe57a1df7a368860f05f86afb28becaa388c75d5d138fd53ffdd58afdab37028201a6e294502793b280e3f1bc5c734431da536abcb726a779c43c60426d4a0cedc459254b7e3ea39f3347b455bfdf468ed9c17b0700fd55618cd3cbfa6ec46f6fb8e2086a63dcd2a2cadb061ab2c2ba31a7656539018d41b191589d72eb49f7bc8d61", 0xcb, 0x7}, {&(0x7f00000003c0)="ad183b6b16877ff0136ca67b63cbeca3c897a71360ed6f294f117dcff9095c1003eb551fef3c319341349ed0d9222565cd9f74186781f21f16bfe0adc64349f9c8375f9069fb705fe59f6d06c5a17ac27751a520b526b0c9cd7677e0e70e57582bfb1748682e79752351f7b184fcfde2bb50a429c589be8d585a9601a4e74b892467", 0x82, 0x1}, {&(0x7f0000000480)="3f60cc176a9266f5382df128764e6a8f931a6290c311d9e7a83ab97cb7620c757511961757b0", 0x26, 0x7}, {&(0x7f00000004c0)="404e729befeee81176108f63ae2e3a137bdfe9b043186eeb34eeb8f559a77a0e8166f8a2600eba0cccd10c8fa387cde544cdc709e10c1040c79dc68ee596958efb71357f6ecb232417090baddcca2ef2506c7a9acea8984792f4cfa47fb3d98ec521ba27c5daa15d3fbbd0a643b1a545e1b537ba08d070f26c86758aec024dd732574406991e15e48bad407364f2b834f8fe9b0a2afec6ffa0bc3ad4c06cad42919f677cec5a8332668b0f8849495cfba2b78aa65723d2cb88451a37309dfff1b4e35e7f440f03d2465dc8b37a66943fe93c757372f1ccb8fa75bf610fd67b13605f7e", 0xe3, 0x6}, {&(0x7f00000005c0)="f036a316153ce6c306f1b6c101017ce20627730f88b42f506c45dea04b403aa233c9e47cebd847d41f666e8e91458d1aa2b546f90efaf9f6fce153ac9e7ef02c59b31e17711e9649c356b5efe3f90aa15c093bda8a50e6ebaf5b59099fc2c0ab8f82eb59dbc7694edcf23795729ce854694e1b27d61cb7aa91c5180d4c387adaa824645efa6767869dc127c32f02ea1287ca14082115fec3bda21ee5a312bc488c8f3caebd7f7f98bd7d07275fc675e44ab25eadea75c25aaf89d1478d94814dd5763fd7f32d33a40b0df84f256fd62f", 0xd0, 0x6d1e}, {&(0x7f00000006c0)="512c2edb8c31705720da3084f617fd4f1d32283814fc3ccbe2e7865f00fb5620393416b2c2ac1ff179d2ec7346ffebed3ac7471c45229657583cc505b43a7ed19dd05959a8dd1e70db3e012a53a264f7629c4823f5f3d8f2a905a966a02fb5681375ddceb2824860841586881f355dad6a1631e4e6", 0x75, 0x3}, {&(0x7f0000000740)="25dddeb846b2f5d2f24a96c3b891ec5c5b61c0f271614fca6926a4a9eb3d1c15dceacbe01fa6e9ac78b8187d563a52fba15ad5de87f8802732cf02ccde6c7bcd6028fdd0e2d0fbd4f7a22a52e2ed66e2c5cd9fae2e256ab083d67226d13db8f1b5182b482a4b77d08191267d8d9f3ae13cf47d316a8f208851f255291865b94eedccd1e899ac642b", 0x88, 0x71}, {&(0x7f0000000800)="acd2d8e64399b550161d72a5f80d88c9fcb11b6501bdd57887602e8416e084fa0b2655e738d5d3ed966c8b9fbc648bdac2eb46716d2dd32ccd6bdfb454df7d905b91a1a369599f73e00dbc6fcdf2e588d3e673fa34e3a6eba96e3e86", 0x5c, 0x8}], 0x1000, &(0x7f0000000980)={[{@utf8no}, {@uni_xlate}, {@fat=@usefree}, {@utf8no}, {@shortname_win95}, {@fat=@check_normal}, {@uni_xlateno}, {@rodir}, {@uni_xlateno}], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@hash}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) r3 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x200000000, 0x0, 0x0, 0x20020, &(0x7f0000000540)=ANY=[]) mknodat$loop(r3, &(0x7f00000001c0)='./file0\x00', 0xc000, 0x1) name_to_handle_at(r0, &(0x7f0000000a40)='./file0/file0\x00', &(0x7f0000000a80)=@orangefs_parent={0x28, 0x2, {{"726533044f2efe128b503448f882ad82", 0x8}, {"1a3efc03c591b6deecb3dbdb9d3001dd", 0x5}}}, &(0x7f0000000ac0), 0x400) r4 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) 14:46:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) 14:46:36 executing program 6: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) 14:46:36 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc3}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) poll(&(0x7f0000000080)=[{r0, 0x1080}, {r3, 0x508}], 0x2, 0x3) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="140231a7ddaba982d1240b49dcc9357f46a53de070f408db3d83292e2ec1b51eaa0f579286c7286c75b45871e8fd8f01010000c8c513929e415f99ffd980597522daefd1a4"], 0x18) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000000c0)) 14:46:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') (fail_nth: 2) [ 593.468817] loop7: detected capacity change from 0 to 131072 [ 593.482510] FAULT_INJECTION: forcing a failure. [ 593.482510] name failslab, interval 1, probability 0, space 0, times 0 [ 593.484156] CPU: 1 PID: 5989 Comm: syz-executor.2 Not tainted 5.10.247 #1 [ 593.485261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 593.485727] FAULT_INJECTION: forcing a failure. [ 593.485727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.486519] Call Trace: [ 593.488245] dump_stack+0x107/0x167 [ 593.488900] should_fail.cold+0x5/0xa [ 593.489561] ? create_object.isra.0+0x3a/0xa30 [ 593.490384] should_failslab+0x5/0x20 [ 593.490909] kmem_cache_alloc+0x5b/0x310 [ 593.491472] create_object.isra.0+0x3a/0xa30 [ 593.492075] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 593.492788] kmem_cache_alloc+0x159/0x310 [ 593.493362] getname_flags.part.0+0x50/0x4f0 [ 593.493969] __x64_sys_unlink+0xb1/0x100 [ 593.494535] do_syscall_64+0x33/0x40 [ 593.495052] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 593.495762] RIP: 0033:0x7fcc92ffab19 [ 593.496278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 593.498810] RSP: 002b:00007fcc90570188 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 593.500156] RAX: ffffffffffffffda RBX: 00007fcc9310df60 RCX: 00007fcc92ffab19 [ 593.501189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000200 [ 593.502394] RBP: 00007fcc905701d0 R08: 0000000000000000 R09: 0000000000000000 [ 593.503683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.504809] R13: 00007fff81f633bf R14: 00007fcc90570300 R15: 0000000000022000 [ 593.506071] CPU: 0 PID: 5998 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 593.506841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 593.507742] Call Trace: [ 593.508039] dump_stack+0x107/0x167 [ 593.508440] should_fail.cold+0x5/0xa [ 593.508869] _copy_from_user+0x2e/0x1b0 [ 593.509309] io_copy_iov+0xbf/0x1c0 [ 593.509711] ? io_cancel_task_cb+0x80/0x80 [ 593.510174] ? kmalloc_order+0xfe/0x160 [ 593.510618] io_sqe_buffers_register+0x31d/0x880 [ 593.511147] ? io_sqd_handle_event+0x350/0x350 [ 593.511664] __do_sys_io_uring_register+0x1648/0x2fa0 [ 593.512246] ? io_recvmsg+0xd70/0xd70 [ 593.512667] ? fput_many+0x2f/0x1a0 [ 593.513100] ? ksys_write+0x1a9/0x260 [ 593.513518] ? __ia32_sys_read+0xb0/0xb0 [ 593.513958] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 593.514533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 593.515103] do_syscall_64+0x33/0x40 [ 593.515516] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 593.516075] RIP: 0033:0x7f748a34ab19 [ 593.516473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 593.518473] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 593.519305] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 593.520071] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 593.520839] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 593.521760] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 593.522573] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:46:50 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f8000020004000000000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ad2538ed00"]) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x192) 14:46:50 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc3}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) poll(&(0x7f0000000080)=[{r0, 0x1080}, {r3, 0x508}], 0x2, 0x3) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="140231a7ddaba982d1240b49dcc9357f46a53de070f408db3d83292e2ec1b51eaa0f579286c7286c75b45871e8fd8f01010000c8c513929e415f99ffd980597522daefd1a4"], 0x18) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000000c0)) 14:46:50 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 42) 14:46:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) 14:46:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f00000005c0)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000b6ef496e02cd3f894b14726abb76046588824b3f000000000000001d920dba92ba439fdd764b7ff3dd42a3341b8d", 0x6e, 0x4800}, {&(0x7f0000012900)=' \x00', 0x2, 0x4880}], 0x0, &(0x7f0000014a00)) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='logfs\x00', 0x20000, &(0x7f0000000200)='.\x00') r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x10000848) 14:46:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) 14:46:50 executing program 1: r0 = semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r1 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x1) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000002c0)=""/207) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000180)={r2, r3+60000000}) semtimedop(0x0, &(0x7f00000001c0)=[{0x0, 0x4a41}, {0x0, 0x0, 0x1c00}, {0x2, 0x400, 0x400}], 0x3, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semop(r4, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}], 0x3) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000001140)=""/4096) unshare(0x48020200) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000080)=""/39) 14:46:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') (fail_nth: 3) 14:46:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) [ 593.547717] loop5: detected capacity change from 0 to 2097152 [ 593.550245] FAT-fs (loop7): Unrecognized mount option "­%8í" or missing value 14:46:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 593.567236] loop7: detected capacity change from 0 to 131072 [ 593.571282] FAT-fs (loop7): Unrecognized mount option "­%8í" or missing value [ 593.579514] EXT4-fs error (device loop5): ext4_quota_enable:6462: inode #3: comm syz-executor.5: iget: bad i_size value: 155147103639552 [ 593.581495] FAULT_INJECTION: forcing a failure. [ 593.581495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.582887] CPU: 0 PID: 6003 Comm: syz-executor.2 Not tainted 5.10.247 #1 [ 593.583652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 593.584593] Call Trace: [ 593.584899] dump_stack+0x107/0x167 [ 593.585317] should_fail.cold+0x5/0xa [ 593.585749] strncpy_from_user+0x34/0x470 [ 593.586200] getname_flags.part.0+0x95/0x4f0 [ 593.586700] __x64_sys_unlink+0xb1/0x100 [ 593.587160] do_syscall_64+0x33/0x40 [ 593.587597] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 593.588182] RIP: 0033:0x7fcc92ffab19 [ 593.588590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 593.590660] RSP: 002b:00007fcc90570188 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 593.591531] RAX: ffffffffffffffda RBX: 00007fcc9310df60 RCX: 00007fcc92ffab19 [ 593.592328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000200 [ 593.593104] RBP: 00007fcc905701d0 R08: 0000000000000000 R09: 0000000000000000 [ 593.593921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:46:50 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 43) [ 593.594724] R13: 00007fff81f633bf R14: 00007fcc90570300 R15: 0000000000022000 [ 593.596866] EXT4-fs error (device loop5): ext4_quota_enable:6464: comm syz-executor.5: Bad quota inode: 3, type: 0 [ 593.600491] EXT4-fs warning (device loop5): ext4_enable_quotas:6502: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 593.605053] EXT4-fs (loop5): mount failed [ 593.605744] 9pnet: Insufficient options for proto=fd [ 593.641163] loop5: detected capacity change from 0 to 2097152 14:46:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') (fail_nth: 4) 14:46:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:46:50 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x23, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32383337383038363200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e883faa764e6453ab2efc3f3d55b247d010000000c00000000000000dff4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500080000000000000000000000040000006e00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200000029000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010500)="ff3f0c00fc010000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x1080, 0x2000}, {&(0x7f0000011600)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x4000}, {&(0x7f0000011700)="00000000001000"/32, 0x20, 0x5000}, {&(0x7f0000011800)="00000000001000"/32, 0x20, 0x6000}, {&(0x7f0000011900)="00000000001000"/32, 0x20, 0x7000}, {&(0x7f0000011a00)="504d4d00504d4dffe0f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x8000}, {&(0x7f0000011b00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x9000}, {&(0x7f0000011c00)="0200"/32, 0x20, 0x9400}, {&(0x7f0000011d00)="0300"/32, 0x20, 0x9800}, {&(0x7f0000011e00)="0400"/32, 0x20, 0x9c00}, {&(0x7f0000011f00)="0500"/32, 0x20, 0xa000}, {&(0x7f0000012000)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000d000"/96, 0x60, 0xa400}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0xb000}, {&(0x7f0000012200)="0200"/32, 0x20, 0xb400}, {&(0x7f0000012300)="0300"/32, 0x20, 0xb800}, {&(0x7f0000012400)="0400"/32, 0x20, 0xbc00}, {&(0x7f0000012500)="0500"/32, 0x20, 0xc000}, {&(0x7f0000012600)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000d000"/96, 0x60, 0xc400}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0xd000}, {&(0x7f0000012800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000002ea0100000001000000270f240c000000000000000000000000000000000601f80f0000000006000000779b539778617474723100000601f00f00000000060000007498539778617474723200"/4192, 0x1060, 0x12000}, {&(0x7f0000013900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x13fe0}, {&(0x7f0000013a00)="0000000000000000dff4655fdff4655fdff4655f00"/32, 0x20, 0x22000}, {&(0x7f0000013b00)="ed41000000100000dff4655fe0f4655fe0f4655f00000000000004000800000000000800050000000af301000400000000000000000000000100000003000000", 0x40, 0x22080}, {&(0x7f0000013c00)="8081000000180000dff4655fdff4655fdff4655f00000000000001001000000010000800000000000af301000400000000000000000000000200000009000000", 0x40, 0x22100}, {&(0x7f0000013d00)="8081000000180000dff4655fdff4655fdff4655f00000000000001001000000010000800000000000af30100040000000000000000000000020000000b000000", 0x40, 0x22180}, {&(0x7f0000013e00)="c041000000400000dff4655fdff4655fdff4655f00000000000002002000000000000800000000000af301000400000000000000000000000400000004000000", 0x40, 0x22500}, {&(0x7f0000013f00)="ed41000000100000e0f4655fe0f4655fe0f4655f00000000000002000800000000000800030000000af30100040000000000000000000000010000000d0000000000000000000000000000000000000000000000000000000000000000000000000000003934797f000000000000000000000000000000000000000000000000ed8100001a040000e0f4655fe0f4655fe0f4655f00000000000001000800000000000800010000000af301000400000000000000000000000100000023000000000000000000000000000000000000000000000000000000000000000000000000000000c24b17ab000000000000000000000000000000000000000000000000ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3238333738303836322f66696c65302f66696c653000000000000000000000000000000000000000000000da215ae9000000000000000000000000000000000000000000000000ed8100000a000000e0f4655fe0f4655fe0f4655f00000000000001001000000000000800010000000af301000400000000000000000000000100000024000000000000000000000000000000000000000000000000000000000000000000000000000000375fe294130000000000000000000000000000000000000000000000ed81000028230000e0f4655fe0f4655fe0f4655f00000000000002001800000000000800010000000af301000400000000000000000000000300000025000000020000000100000027000000020000000180000027000000000000000000000000000000baf0fe92000000000000000000000000000000000000000000000000ed81000064000000e0f4655fe0f4655fe0f4655f00000000000001000800000000000800010000000af301000400000000000000000000000100000028000000000000000000000000000000000000000000000000000000000000000000000000000000585592da00"/768, 0x300, 0x22580}, {&(0x7f0000014200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x23000}, {&(0x7f0000014700)='syzkallers\x00'/32, 0x20, 0x24000}, {&(0x7f0000014800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x28000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20e61707531d5935ed6d283488363c07b2545d4ad3276bcfedadcee058d4140efe79ffd7c9c791befbc62fb141d622bd2fb90ba3ac7b3780f85bacea827944e7933f9244b5cca5bdebf7d6"]) 14:46:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 593.673873] FAULT_INJECTION: forcing a failure. [ 593.673873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.675246] CPU: 0 PID: 6021 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 593.676023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 593.676974] Call Trace: [ 593.677016] loop7: detected capacity change from 0 to 327680 [ 593.677271] dump_stack+0x107/0x167 [ 593.678487] should_fail.cold+0x5/0xa [ 593.678903] _copy_from_user+0x2e/0x1b0 [ 593.679338] io_copy_iov+0xbf/0x1c0 [ 593.679755] ? io_cancel_task_cb+0x80/0x80 [ 593.680227] ? kmalloc_order+0xfe/0x160 [ 593.680661] io_sqe_buffers_register+0x31d/0x880 [ 593.681201] ? io_sqd_handle_event+0x350/0x350 [ 593.681733] __do_sys_io_uring_register+0x1648/0x2fa0 [ 593.682294] ? io_recvmsg+0xd70/0xd70 [ 593.682732] ? fput_many+0x2f/0x1a0 [ 593.683140] ? ksys_write+0x1a9/0x260 [ 593.683588] ? __ia32_sys_read+0xb0/0xb0 [ 593.684054] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 593.684655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 593.685239] do_syscall_64+0x33/0x40 [ 593.685658] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 593.685927] EXT4-fs (loop7): Unrecognized mount option " æSY5ím(4ˆ6<²T]JÓ'kÏí­ÎàXÔþyÿ×ÉÇ‘¾ûÆ/±AÖ"½/¹ £¬{7€ø[¬ê‚yDç“?’DµÌ¥½ë÷Ö" or missing value [ 593.686238] RIP: 0033:0x7f748a34ab19 [ 593.686256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 593.690504] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 593.691392] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 593.692162] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 593.693002] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 593.693858] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 593.694674] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 593.701857] EXT4-fs error (device loop5): ext4_quota_enable:6462: inode #3: comm syz-executor.5: iget: bad i_size value: 155147103639552 [ 593.704998] FAULT_INJECTION: forcing a failure. [ 593.704998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.706596] CPU: 0 PID: 6024 Comm: syz-executor.2 Not tainted 5.10.247 #1 [ 593.707338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 593.708262] Call Trace: [ 593.708551] dump_stack+0x107/0x167 [ 593.708970] should_fail.cold+0x5/0xa [ 593.709402] _copy_to_user+0x2e/0x180 [ 593.709820] simple_read_from_buffer+0xcc/0x160 [ 593.710350] proc_fail_nth_read+0x198/0x230 [ 593.710855] ? proc_sessionid_read+0x230/0x230 [ 593.711369] ? security_file_permission+0xb1/0xe0 [ 593.711919] ? proc_sessionid_read+0x230/0x230 [ 593.712438] vfs_read+0x228/0x620 [ 593.712893] ksys_read+0x12d/0x260 [ 593.713304] ? vfs_write+0xb10/0xb10 [ 593.713743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 593.714332] ? syscall_enter_from_user_mode+0x1d/0x50 [ 593.714926] do_syscall_64+0x33/0x40 [ 593.715363] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 593.715913] RIP: 0033:0x7fcc92fad69c [ 593.716330] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 593.718430] RSP: 002b:00007fcc90570170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 593.719282] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fcc92fad69c [ 593.720083] RDX: 000000000000000f RSI: 00007fcc905701e0 RDI: 0000000000000004 [ 593.720890] RBP: 00007fcc905701d0 R08: 0000000000000000 R09: 0000000000000000 [ 593.721689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.722515] R13: 00007fff81f633bf R14: 00007fcc90570300 R15: 0000000000022000 [ 593.726631] 9pnet: Insufficient options for proto=fd [ 593.732277] EXT4-fs error (device loop5): ext4_quota_enable:6464: comm syz-executor.5: Bad quota inode: 3, type: 0 14:46:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000180)=0x1) fallocate(r2, 0x0, 0x0, 0x8000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3f, 0x7, 0x9, 0xa6, 0x3, 0x3, 0x6, 0xc3, 0x40, 0x9c, 0x0, 0x7ff, 0x38, 0x2, 0x4, 0x401, 0xfffb}, [{0x1, 0x1, 0x10000, 0x82c9dae, 0x8001, 0x5, 0x200, 0x7ff}, {0x0, 0x8089, 0x165, 0x7, 0x81, 0x80000001, 0x9, 0x5}], "bda641cf8a4ce28f44bf80f9e454554a695e7bcbab0bf64fafe494673edd6815d6d77cf92fa18c4202bdb52e6623df0e628115ce30969c73d88179a23f66f54a624cfa7b43544b18eefa2679a83c9fb61760ba9e9cb288bc3b68c9ad41fdb3a7efd1acf8a371e48c9fed7f163014b7bcfe0947eab3d3eb0543e10b6b5a58ed902e2f3d5b70586af6b126d6025f019c59b2a1a3acc75eec5f0d7a23ef33a0c34d9cf257", ['\x00', '\x00', '\x00']}, 0x453) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x1, 0x0, 0x0, r3, 0x0, 0x96, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x1712c2, 0x0) fstat(r5, &(0x7f00000003c0)) [ 593.738886] 9pnet: Insufficient options for proto=fd [ 593.745507] EXT4-fs warning (device loop5): ext4_enable_quotas:6502: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 593.750976] loop7: detected capacity change from 0 to 327680 [ 593.753402] EXT4-fs (loop5): mount failed 14:46:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:46:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 593.788706] EXT4-fs (loop7): Unrecognized mount option " æSY5ím(4ˆ6<²T]JÓ'kÏí­ÎàXÔþyÿ×ÉÇ‘¾ûÆ/±AÖ"½/¹ £¬{7€ø[¬ê‚yDç“?’DµÌ¥½ë÷Ö" or missing value [ 593.814367] 9pnet: Insufficient options for proto=fd [ 593.867601] 9pnet: Insufficient options for proto=fd 14:47:03 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 44) [ 606.739069] FAULT_INJECTION: forcing a failure. [ 606.739069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.741668] CPU: 1 PID: 6051 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 606.743393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 14:47:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x129) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000180)=0x1) fallocate(r2, 0x0, 0x0, 0x8000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3f, 0x7, 0x9, 0xa6, 0x3, 0x3, 0x6, 0xc3, 0x40, 0x9c, 0x0, 0x7ff, 0x38, 0x2, 0x4, 0x401, 0xfffb}, [{0x1, 0x1, 0x10000, 0x82c9dae, 0x8001, 0x5, 0x200, 0x7ff}, {0x0, 0x8089, 0x165, 0x7, 0x81, 0x80000001, 0x9, 0x5}], "bda641cf8a4ce28f44bf80f9e454554a695e7bcbab0bf64fafe494673edd6815d6d77cf92fa18c4202bdb52e6623df0e628115ce30969c73d88179a23f66f54a624cfa7b43544b18eefa2679a83c9fb61760ba9e9cb288bc3b68c9ad41fdb3a7efd1acf8a371e48c9fed7f163014b7bcfe0947eab3d3eb0543e10b6b5a58ed902e2f3d5b70586af6b126d6025f019c59b2a1a3acc75eec5f0d7a23ef33a0c34d9cf257", ['\x00', '\x00', '\x00']}, 0x453) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x1, 0x0, 0x0, r3, 0x0, 0x96, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x1712c2, 0x0) fstat(r5, &(0x7f00000003c0)) 14:47:03 executing program 6: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:47:03 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x20173, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x2000000, 0x0, 0x20000000f31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file2\x00', 0x400000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') r4 = syz_io_uring_setup(0x4ee7, &(0x7f00000002c0)={0x0, 0x6b50, 0x0, 0x3, 0x3ce, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000, 0xa7c) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat(r5, &(0x7f0000000280)='./file1\x00', 0x602203, 0x88) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x200, 0x102) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4000, @fd_index=0x3, 0x4, 0x6000000000, 0x3, 0x2, 0x2, {0x3}}, 0x5bbf) fcntl$lock(r4, 0x5, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4007, @fd_index=0x100006, 0x0, 0x0, 0xffffff3b, 0x10}, 0xec) ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0xfffffffffffffffb) fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:wtmp_t:s0\x00', 0x1c, 0x3) 14:47:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:47:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000540)={0xffffffffffffffff, r0, 0x5}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x105000, 0x0) recvmsg$unix(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f00000003c0)=""/189, 0xbd}, {&(0x7f0000000080)=""/84, 0x54}, {&(0x7f0000000700)=""/186, 0xba}], 0x5}, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d40)='/proc/vmstat\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) openat(r3, &(0x7f0000000500)='./file1\x00', 0x10000, 0x100) sendfile(r1, r2, 0x0, 0x100000001) 14:47:03 executing program 7: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000040)={{0x4, 0x2}, 'port1\x00', 0x11, 0x20000, 0x7ff, 0x3, 0x0, 0x400, 0x8001, 0x0, 0x0, 0x8}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x3, 0x7, 0x1, 'queue0\x00', 0x7d57}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0004b4", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_rs}}}}}, 0x0) 14:47:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') [ 606.745426] Call Trace: [ 606.746019] dump_stack+0x107/0x167 [ 606.746805] should_fail.cold+0x5/0xa [ 606.747627] _copy_from_user+0x2e/0x1b0 [ 606.748481] io_copy_iov+0xbf/0x1c0 [ 606.749269] ? io_cancel_task_cb+0x80/0x80 [ 606.750171] ? kmalloc_order+0xfe/0x160 [ 606.751039] io_sqe_buffers_register+0x31d/0x880 [ 606.752068] ? io_sqd_handle_event+0x350/0x350 [ 606.753080] __do_sys_io_uring_register+0x1648/0x2fa0 [ 606.754197] ? io_recvmsg+0xd70/0xd70 [ 606.755015] ? fput_many+0x2f/0x1a0 [ 606.755800] ? ksys_write+0x1a9/0x260 [ 606.756620] ? __ia32_sys_read+0xb0/0xb0 [ 606.757506] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 606.758625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 606.759729] do_syscall_64+0x33/0x40 [ 606.760521] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 606.761622] RIP: 0033:0x7f748a34ab19 [ 606.762415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 606.762597] 9pnet: Insufficient options for proto=fd [ 606.766339] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 606.766361] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 606.766371] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 606.766381] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 606.766392] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 606.766402] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:47:03 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x42000, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize}, {@privport}, {@mmap}, {@cache_fscache}], [{@smackfstransmute={'smackfstransmute', 0x3d, ')\\'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@hash}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@euid_gt={'euid>', r2}}]}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc08c5332, &(0x7f00000000c0)) [ 606.797657] 9pnet: Insufficient options for proto=fd 14:47:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) openat(r2, &(0x7f0000000240)='./file0\x00', 0x48002, 0x3c) lseek(r1, 0x4, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) lseek(r1, 0x12a0000000, 0x2) r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) copy_file_range(r3, 0x0, r4, &(0x7f0000000180)=0xffffffffffffff01, 0x4, 0x0) 14:47:03 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10000, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0x2, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="01008a527bb46ecd14ae0000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r4 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffc, 0x2, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000300)='@+:\x00') preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57ed, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80800) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, 0xffffffffffffffff, 0xd454000) 14:47:03 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 45) [ 606.901294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 606.940680] FAULT_INJECTION: forcing a failure. [ 606.940680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.942094] CPU: 0 PID: 6072 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 606.942865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 606.943788] Call Trace: [ 606.944083] dump_stack+0x107/0x167 [ 606.944490] should_fail.cold+0x5/0xa [ 606.944922] _copy_from_user+0x2e/0x1b0 [ 606.945362] io_copy_iov+0xbf/0x1c0 [ 606.945766] ? io_cancel_task_cb+0x80/0x80 [ 606.946230] ? kmalloc_order+0xfe/0x160 [ 606.946675] io_sqe_buffers_register+0x31d/0x880 [ 606.947210] ? io_sqd_handle_event+0x350/0x350 [ 606.947726] __do_sys_io_uring_register+0x1648/0x2fa0 [ 606.948301] ? io_recvmsg+0xd70/0xd70 [ 606.948731] ? fput_many+0x2f/0x1a0 [ 606.949137] ? ksys_write+0x1a9/0x260 [ 606.949558] ? __ia32_sys_read+0xb0/0xb0 [ 606.950023] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 606.950615] ? syscall_enter_from_user_mode+0x1d/0x50 [ 606.951196] do_syscall_64+0x33/0x40 [ 606.951617] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 606.952192] RIP: 0033:0x7f748a34ab19 [ 606.952610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 606.954676] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 606.955514] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 606.956298] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 606.957082] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 606.957874] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 606.958669] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 606.964018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.965746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.968576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:47:17 executing program 3: r0 = creat(0x0, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) lseek(r3, 0x3, 0x3) fallocate(r2, 0x0, 0x0, 0x1000001) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) 14:47:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:47:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x10240, 0x0) lseek(r1, 0x4, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x800000, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x2, 0x2, 0x2, 0x0, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000100)=0x7) 14:47:17 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 46) 14:47:17 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) fspick(r1, &(0x7f0000000140)='./file0/file0\x00', 0x0) syz_io_uring_setup(0x20004d52, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="a0000000260001010000000000000000010000008a000000a0eab51f24f4074cfbfbbb07324cc62f701d9f290585b14758f30d5ce7f3493090af5bc58b1beef11c281fbcc10f4675223ffc82c0c17acd7a40480a51d57b2b3cc217bf3558b4d61924aa0922349a895d495ac12b16cb2b0cb00a0c3d1fb5d695cfebd4ad94d1a5642d3ec010c0792e9f8a9bff9bc38d6a5f4c42eb9238b7bc3a2be2cefb000000000000"], 0xa0}}, 0x8044) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) clone3(&(0x7f00000008c0)={0x4800000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="7472876d186cd5cb6fda66646e6f3d", @ANYRESDEC, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',caghe=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend.dfltgid=', @ANYRESHEX=r4, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC, @ANYBLOB=',hash,defcontext=root,fsname=.,fowner>', @ANYRESDEC, @ANYBLOB]) 14:47:17 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x20000, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') 14:47:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) openat(r2, &(0x7f0000000240)='./file0\x00', 0x48002, 0x3c) lseek(r1, 0x4, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) lseek(r1, 0x12a0000000, 0x2) r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) copy_file_range(r3, 0x0, r4, &(0x7f0000000180)=0xffffffffffffff01, 0x4, 0x0) [ 620.682686] FAULT_INJECTION: forcing a failure. [ 620.682686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.684339] CPU: 0 PID: 6084 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 620.685282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 620.686421] Call Trace: [ 620.686792] dump_stack+0x107/0x167 [ 620.687296] should_fail.cold+0x5/0xa [ 620.687830] _copy_from_user+0x2e/0x1b0 [ 620.688378] io_copy_iov+0xbf/0x1c0 [ 620.688876] ? io_cancel_task_cb+0x80/0x80 [ 620.689461] ? kmalloc_order+0xfe/0x160 [ 620.690017] io_sqe_buffers_register+0x31d/0x880 [ 620.690674] ? io_sqd_handle_event+0x350/0x350 [ 620.691299] __do_sys_io_uring_register+0x1648/0x2fa0 [ 620.692014] ? io_recvmsg+0xd70/0xd70 [ 620.692543] ? fput_many+0x2f/0x1a0 [ 620.693048] ? ksys_write+0x1a9/0x260 [ 620.693572] ? __ia32_sys_read+0xb0/0xb0 [ 620.694137] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 620.694855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 620.695579] do_syscall_64+0x33/0x40 [ 620.696089] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 620.696798] RIP: 0033:0x7f748a34ab19 [ 620.697305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 620.699833] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 620.700879] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 620.701884] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 620.702858] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 620.703831] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 620.704777] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 620.719438] 9pnet: Insufficient options for proto=fd 14:47:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 620.723136] 9pnet: Insufficient options for proto=fd 14:47:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) openat(r2, &(0x7f0000000240)='./file0\x00', 0x48002, 0x3c) lseek(r1, 0x4, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) lseek(r1, 0x12a0000000, 0x2) r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) copy_file_range(r3, 0x0, r4, &(0x7f0000000180)=0xffffffffffffff01, 0x4, 0x0) 14:47:17 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 47) 14:47:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 14:47:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) 14:47:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 620.851362] FAULT_INJECTION: forcing a failure. [ 620.851362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.853467] CPU: 0 PID: 6105 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 620.854651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 620.856086] Call Trace: [ 620.856542] dump_stack+0x107/0x167 [ 620.857153] should_fail.cold+0x5/0xa [ 620.857672] _copy_from_user+0x2e/0x1b0 [ 620.858212] io_copy_iov+0xbf/0x1c0 [ 620.858705] ? io_cancel_task_cb+0x80/0x80 [ 620.859273] ? kmalloc_order+0xfe/0x160 [ 620.859816] io_sqe_buffers_register+0x31d/0x880 [ 620.860457] ? io_sqd_handle_event+0x350/0x350 [ 620.861115] __do_sys_io_uring_register+0x1648/0x2fa0 [ 620.861810] ? io_recvmsg+0xd70/0xd70 [ 620.862318] ? fput_many+0x2f/0x1a0 [ 620.862806] ? ksys_write+0x1a9/0x260 [ 620.863316] ? __ia32_sys_read+0xb0/0xb0 [ 620.863867] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 620.864565] ? syscall_enter_from_user_mode+0x1d/0x50 [ 620.865282] do_syscall_64+0x33/0x40 [ 620.865781] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 620.866489] RIP: 0033:0x7f748a34ab19 [ 620.866996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 620.869537] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 620.870591] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 620.871583] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 620.872561] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 620.873544] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 620.874491] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 620.876740] 9pnet: Insufficient options for proto=fd 14:47:17 executing program 1: keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x2f, &(0x7f00000001c0), 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000640)}}, &(0x7f00000004c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x64000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) [ 620.911258] 9pnet: Insufficient options for proto=fd 14:47:31 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x800, 0x7, 0x4, 0x547}, {0x20, 0x0, 0x1, 0xa69e}, {0x6, 0x4, 0x9, 0x80000001}, {0x1, 0xfa, 0x6, 0x5}, {0xe07, 0x9, 0x6, 0x8}, {0x7, 0x9, 0x50, 0x2}, {0x8, 0x0, 0x0, 0x80000001}, {0x3, 0x9, 0x9, 0x80000000}, {0xff, 0x0, 0x9, 0x400}]}) nanosleep(&(0x7f0000000480)={0x0, 0x3938700}, 0x0) 14:47:31 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 48) 14:47:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) openat(r2, &(0x7f0000000240)='./file0\x00', 0x48002, 0x3c) lseek(r1, 0x4, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) lseek(r1, 0x12a0000000, 0x2) r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) copy_file_range(r3, 0x0, r4, &(0x7f0000000180)=0xffffffffffffff01, 0x4, 0x0) 14:47:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000), 0x4) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f0000001300)) 14:47:31 executing program 5: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x1, 0x40010, 0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x436b, &(0x7f00000000c0)={0x0, 0xa2d0, 0x2, 0x0, 0x379, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x23, r5}}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000005c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r3, 0x1, 0x0, 0x7, 0x0, 0x1, {0x0, r5}}, 0x3f) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x400}, 0x1, {0x0, r5}}, 0xff) r7 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000c00), 0x1312) fallocate(r7, 0x2, 0x7, 0xa4) sendfile(r0, r1, 0x0, 0x2) 14:47:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x2, 0x6, 0x5, 0x6}) unlink(&(0x7f0000000200)='./file0\x00') 14:47:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:47:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}, {@access_any}], [{@smackfsdef}]}}) [ 635.049081] FAULT_INJECTION: forcing a failure. [ 635.049081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.051925] CPU: 0 PID: 6132 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 635.053502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 635.055404] Call Trace: [ 635.056023] dump_stack+0x107/0x167 [ 635.056881] should_fail.cold+0x5/0xa [ 635.057780] _copy_from_user+0x2e/0x1b0 [ 635.058692] io_copy_iov+0xbf/0x1c0 [ 635.059513] ? io_cancel_task_cb+0x80/0x80 [ 635.060473] ? kmalloc_order+0xfe/0x160 [ 635.061420] io_sqe_buffers_register+0x31d/0x880 [ 635.062514] ? io_sqd_handle_event+0x350/0x350 [ 635.063594] __do_sys_io_uring_register+0x1648/0x2fa0 [ 635.064810] ? io_recvmsg+0xd70/0xd70 [ 635.065736] ? fput_many+0x2f/0x1a0 [ 635.066556] ? ksys_write+0x1a9/0x260 [ 635.067430] ? __ia32_sys_read+0xb0/0xb0 [ 635.068366] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 635.069584] ? syscall_enter_from_user_mode+0x1d/0x50 [ 635.070776] do_syscall_64+0x33/0x40 [ 635.071619] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 635.072804] RIP: 0033:0x7f748a34ab19 [ 635.073672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.077890] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 635.079604] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 635.081248] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 635.082869] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.084485] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 635.086129] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 635.095052] 9pnet: Insufficient options for proto=fd 14:47:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}], [{@smackfsdef}]}}) 14:47:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:47:31 executing program 5: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000280)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x200000}, 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000700)='id_legacy\x00', &(0x7f0000000740)=@keyring) r1 = add_key$keyring(&(0x7f0000002c40), &(0x7f0000002c80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000002b00), 0x0, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f00000002c0)=@chain) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000840)=""/106, 0x6a}], 0x1, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000580)="3ed3687bc6d1746b3cedf37ba806f79c082e9ea19347519f6b0c0063167767ffb9ac8a5ff068108297fd64ef82e5492bb7128489760f3935373511caa93104a31876b6aabf31c651121c9052753673f0e0ca09e2400d81e822c8b9bca494a92ee68ee0c3eeacb729bc5352a41954ebfd7bcfa9d80cd0715522b6cf621cbfb00f", 0x80, 0x0) r3 = request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)='id_legacy\x00', r0) keyctl$reject(0x13, r2, 0x3, 0x5, r3) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00', 0x2, r4) keyctl$negate(0xd, r4, 0x100000001, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/36, 0x24, 0x0, 0x3f}) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)='dns_resolver\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='ceph\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}, 0x3040, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x101}, 0x0, 0x9, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412e500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:47:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef}]}}) 14:47:31 executing program 1: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = syz_mount_image$tmpfs(0xfffffffffffffffe, &(0x7f0000000040)='./file0\x00', 0x9, 0x3, &(0x7f0000000200)=[{&(0x7f0000000bc0)="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", 0x1000, 0x80000000}, {&(0x7f00000002c0)="5ee24a00c7783674bc3cb979d38560e60e77c93106bebddc797d7e4b55fcad0a7b629a0f5c2c2af1c106bd657a66c0b0446c88a0df0928c7040f86f28f42b29dfbe3aeefb991e4cab7db17f35da6aa73fb61c6ff81bcd333f0ce07a43cdb8aa8f791e79a01223b0d3a398b9c95687f5db28d37b699ca86ae0c7e8a45ed245c516c0cdcebb377a49b5bba6a2c8f3138a4e5717ac9fb62b67b91d4065bf70addaea6c7c9a25102dee1386e186345d0c3ab546a9daa2db3847057cc6b968212447361fe1529e2fc69ba8786243b6ff2d11fa09e9dcaada86617df18579df4eda49ee3", 0xe1, 0x518}, {&(0x7f0000000700)="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", 0x137, 0xff}], 0x20, &(0x7f00000003c0)={[{@huge_never}, {@nr_inodes}, {@nr_inodes}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x65, 0x6b, 0x33]}}], [{@smackfsdef={'smackfsdef', 0x3d, 'mask'}}, {@pcr={'pcr', 0x3d, 0x3c}}, {@subj_user={'subj_user', 0x3d, '%}'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@measure}, {@appraise}, {@subj_role={'subj_role', 0x3d, '):.$'}}, {@audit}, {@dont_hash}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) openat(r1, &(0x7f0000000100)='./file2\x00', 0x2e4240, 0x40) lgetxattr(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=@known='security.apparmor\x00', &(0x7f0000000500)=""/197, 0xc5) umount2(&(0x7f0000000b80)='./file0\x00', 0x0) 14:47:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) openat(r2, &(0x7f0000000240)='./file0\x00', 0x48002, 0x3c) lseek(r1, 0x4, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) lseek(r1, 0x12a0000000, 0x2) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) [ 635.316678] audit: type=1326 audit(1768920451.869:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6127 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3205832b19 code=0x7ffc0000 [ 635.321753] audit: type=1326 audit(1768920451.869:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6127 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3205832b19 code=0x7ffc0000 [ 635.349706] audit: type=1326 audit(1768920451.873:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6127 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3205832b19 code=0x7ffc0000 14:47:31 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 49) 14:47:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}], [{@smackfsdef}]}}) [ 635.375683] audit: type=1326 audit(1768920451.899:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6127 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3205832b19 code=0x7ffc0000 14:47:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 635.393431] audit: type=1326 audit(1768920451.899:30): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6127 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3205832b19 code=0x7ffc0000 [ 635.422009] FAULT_INJECTION: forcing a failure. [ 635.422009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.424737] CPU: 0 PID: 6161 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 635.426319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 635.428212] Call Trace: [ 635.428835] dump_stack+0x107/0x167 [ 635.429764] should_fail.cold+0x5/0xa [ 635.430884] _copy_from_user+0x2e/0x1b0 [ 635.432019] io_copy_iov+0xbf/0x1c0 [ 635.433077] ? io_cancel_task_cb+0x80/0x80 [ 635.434082] ? kmalloc_order+0xfe/0x160 [ 635.435022] io_sqe_buffers_register+0x31d/0x880 [ 635.436130] ? io_sqd_handle_event+0x350/0x350 [ 635.437221] __do_sys_io_uring_register+0x1648/0x2fa0 [ 635.438420] ? io_recvmsg+0xd70/0xd70 [ 635.439309] ? fput_many+0x2f/0x1a0 [ 635.440152] ? ksys_write+0x1a9/0x260 [ 635.441032] ? __ia32_sys_read+0xb0/0xb0 [ 635.441991] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 635.443202] ? syscall_enter_from_user_mode+0x1d/0x50 [ 635.444393] do_syscall_64+0x33/0x40 [ 635.445266] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 635.446445] RIP: 0033:0x7f748a34ab19 [ 635.447322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.451549] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 635.453375] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 635.455023] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 635.456669] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.458318] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 635.459960] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 635.465616] audit: type=1326 audit(1768920451.909:31): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6127 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3205832b19 code=0x7ffc0000 [ 635.481362] audit: type=1326 audit(1768920451.914:32): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6127 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3205832b19 code=0x7ffc0000 [ 635.497849] audit: type=1326 audit(1768920451.914:33): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6127 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3205832b19 code=0x7ffc0000 14:47:32 executing program 3: r0 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x7, 0x0, 0xa, 0x7fff}, {0x4, 0x8, 0x8, 0x101}, {0x200, 0x40, 0x7, 0x10000}, {0x877, 0x7, 0x30, 0x800}]}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)=""/2) openat(r0, &(0x7f0000000380)='./file0\x00', 0x2000, 0x82) r1 = timerfd_create(0x5, 0x180000) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x3}, {0xffffffffffffffff}, 0xa1, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)="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", 0x1d7, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x126}) 14:47:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:47:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) openat(r2, &(0x7f0000000240)='./file0\x00', 0x48002, 0x3c) lseek(r1, 0x4, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) lseek(r1, 0x12a0000000, 0x2) io_uring_setup(0x396d, &(0x7f00000001c0)) 14:47:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef}]}}) 14:47:45 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 50) 14:47:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x4000010, r1, 0xb5437000) socketpair(0x0, 0x0, 0x2, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x0) 14:47:45 executing program 5: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000280)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x200000}, 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000700)='id_legacy\x00', &(0x7f0000000740)=@keyring) r1 = add_key$keyring(&(0x7f0000002c40), &(0x7f0000002c80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000002b00), 0x0, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f00000002c0)=@chain) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000840)=""/106, 0x6a}], 0x1, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000580)="3ed3687bc6d1746b3cedf37ba806f79c082e9ea19347519f6b0c0063167767ffb9ac8a5ff068108297fd64ef82e5492bb7128489760f3935373511caa93104a31876b6aabf31c651121c9052753673f0e0ca09e2400d81e822c8b9bca494a92ee68ee0c3eeacb729bc5352a41954ebfd7bcfa9d80cd0715522b6cf621cbfb00f", 0x80, 0x0) r3 = request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)='id_legacy\x00', r0) keyctl$reject(0x13, r2, 0x3, 0x5, r3) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00', 0x2, r4) keyctl$negate(0xd, r4, 0x100000001, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/36, 0x24, 0x0, 0x3f}) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)='dns_resolver\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='ceph\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}, 0x3040, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x101}, 0x0, 0x9, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412e500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:47:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) openat(r2, &(0x7f0000000240)='./file0\x00', 0x48002, 0x3c) lseek(r1, 0x4, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) lseek(r1, 0x12a0000000, 0x2) 14:47:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:47:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:47:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) 14:47:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000075c0), &(0x7f0000007640)=0x6e, 0x800) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) r4 = syz_open_procfs(0x0, &(0x7f0000007680)='wchan\x00') r5 = syz_mount_image$ext4(&(0x7f00000076c0)='ext4\x00', &(0x7f0000007700)='./file0\x00', 0x5, 0x4, &(0x7f0000008940)=[{&(0x7f0000007740)="594775528f71eb28909fb18ee0090ea90ddf1d79a457ed03e67e186b59d100e4c9a3a910120efadeb81304e20768f0058aca24cb0e9cf738e7fe1d7f1ca10f84ec87f858bfd9c35b3d1f55ae8caf8770b3c275d8e2bb63b02b8e138c9165c0c64d4ad8542e54c87908583ed80e9f25d0b6bab895a9a6c6bb8cbe10e4ec72914a8b9d71e6a2e4689b6e1422cddf5557144e288a47131d3e73f7cdb96f24b0d63c37efb65f27f74c66fad66c87a56dc4", 0xaf, 0x1}, {&(0x7f0000007800)="41ff17be697a0aee92549172cf7a58b4", 0x10, 0x8}, {&(0x7f0000007840)="b91d44492a0b811ab277e01b919f8dcf60be09d361ab975d4b3dac32cd67de61dd7add194a96c9bf737e712d77e225b31bf1c9fef2995f1888424d8907ce1eda180aadf34d3a7cd19a937b9d7170b0c7385cb537f5ae0d0080d44ac236fae936ef214990e94fdd9f63913016fd7f395bd01ee2b42b0cb03f4d4e9e0f12113786ceca4130cd613a34cce2b27c34bcebeb346bf2923b08d554a1f90be7ead5959ef0dbcb2575d4e4b182bf0ec99e228cf682139f18979370e993e55be6f11512eac58857f513a97a06e2c7c6481db8427b6fd8a9303664c3dcf58d6ad01a4ff3481725673d465015c9a183fbc9e8e4816752136dcfd4b9350e2a4b8bd0012f", 0xfe, 0x1}, {&(0x7f0000007940)="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", 0x1000, 0x4}], 0x80000, &(0x7f00000089c0)={[{@noinit_itable}, {@auto_da_alloc}, {@noacl}, {@grpjquota}, {@nouid32}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@prjquota}, {}, {@jqfmt_vfsold}], [{@obj_type={'obj_type', 0x3d, '\x00'}}]}) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r6, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) r7 = eventfd2(0x40, 0x800) r8 = getpgrp(0x0) pidfd_open(r8, 0x0) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r9, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) getresgid(&(0x7f0000000540), &(0x7f0000000500), &(0x7f0000000580)=0x0) getgroups(0x1, &(0x7f0000000440)=[r10]) sendmmsg$unix(r0, &(0x7f0000008bc0)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="d152dea58b3f9781eb309e3036848ad0de27702ec0eff74b2c414a5b375fccdb955b5ac5580568d0232926b91cf0fe26cc51bdc9a9e720ca6c1d0116cb81c713afc3cd1ffb081ed21c1cb90aa6a214542ee56a1e0e046e25e1c6254a1db86878a68bf06f6a6211984a176b27de47c48337342615211f49413b354c834018dee19a7da1765c483ea6dca2d866f750ce82612854ac728e3cbf53615cb15e30fd0616a94e35791bb13cb8e36a44dc8658c097f336c51fd53e83e75a2eee730857416913e4e15dc9dab75a51748bc049800eb5d59563859cb3b3e178759e268ff82ab70b336e3e8bf87a05a000aefbd66c001f7a53", 0xf3}, {&(0x7f0000000240)="2e123d", 0x3}], 0x2, &(0x7f0000005080)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f00000051c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005300)=[{&(0x7f0000005240)="839c39ec732b940dcded05294646f2157617c9681a87c972f78f2dbd2da8ecdb1a91c5", 0x23}, {&(0x7f0000005280)="2ceb5b211da713819fa2ce359f361fd82aaa6db911a556cf28f1a1f3fed059329145460b0493c7bdded27737496a8f74cd2dac5926cc35f15d16015ea63c40bb4f882052d071693df1a01b", 0x4b}], 0x2, &(0x7f0000005880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0, 0xc800}}, {{&(0x7f0000005980)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000005b00)=[{&(0x7f0000005a00)="fcfd158f750abe6f8e536aee10102b0d3a2dc1382a3f3563884fe9b4870c50e978782205ba6aaadfded3f0df323965c91b0763be4900cdb867a6ae950cc6559574418656826a36eca6c60c516d4c45ad6e0a7143f80f8e4cbf170560e99c752735d9c94fe2aec771bd19f858f36640d1abc26bef9f4e003e8e5dc3f7c0dc96d953c19bd0b0673b6681d3bae22afda59a0724c419aac1e670c4c357b246849f2f81988b57dcb19acbbf9803346ecd55d1a7bacf8b629fec85c4918ddbe68cf0a64022322d1e3536e3e8fc2cb931764bc27370a51f3629a82e50dd0f02163357", 0xdf}], 0x1, &(0x7f0000005b40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0, r0, r0, r0]}}], 0x30, 0x8010}}, {{0x0, 0x0, &(0x7f0000006f40)=[{&(0x7f0000005b80)="23ed13aa13fdb548d3886e7829731e8d2ea2bb2e81ae9183f724471b844d274510c3521937c41de82add754a3b790c5bd46c0943a61d90bd068dfaaafd1e0a9472c9d27ceda2e965a17fd50e8b38ba44158a", 0x52}, {&(0x7f0000005c00)="a865c02921371f9efef164a3e55ac7c51d7e8fb89d32807f786c110346d5760d0200ec39bcce89d16c1fa50cf002e055646742b8399d646f93bcb13b6ed4c206a0920ab5b4f561a60d617e108159725e4e212a444ce13b6b423f8931d88cc53bea85b77f54d6d525", 0x68}, {&(0x7f0000005c80)="33722e4e728e8a28518a17b91289ef4aa670a10aae1413209d5456d8c6fa047fa4d91278930ba132fc5f8f24b53106486b55ad70c044b3f95e86b796f1a13ae9b1a2e9447cfaf5e1ed921337", 0x4c}, {&(0x7f0000005d00)="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", 0x1000}, {&(0x7f0000006d00)="4cd0d13aa013865132ed584c7600b4549e37ba807f607abf3e2795dffa36a59dad29146a14cdd88df6d58ba9c7fec99376a45dab891dc84f98f629c7958b678dbf05a993f4d6f1822f0e2a8e24b27792fae9eee99e7cf1e0d8f38eee3b28a55da340ac50d445241d9bafdf167eb139726706ae7c138c5a0b0d61df56df8146d104e73debb01ff1323462e4d58a57a9518071345cdf97c8efc03acda9a469d3a7c1bc9d75b5686cd4c4e0a7e3354cb24c0ec5b25c9a66b504589e5508082a57184bd5", 0xc2}, {&(0x7f0000006e00)="7e087e94ddc1f8bf8033", 0xa}, {&(0x7f0000006e40)="b1acab9bff5bcec2d81ffe1dcee8aacbae5f15c128899c7abcfb37c676a50b2dfcfdb27e2c9e8e7614c71ef1f809168f7db13f51b6ac0f25ef8e04f0c0bf8d36908c3af72c311a1ecd76c23b273d334d2409d2bdd6822af7c8a75b9568598193240e210c24b31f6c50b06a249a7e9c23d03cf995c8b019d6b30d", 0x7a}, {&(0x7f0000006ec0)="db1a1190720bedce0efd468ce5fe4cd05fb862b95a18039e4403e8d63387fdf856043f96b600ad11eaa58601bca7b35fd01aeae0739a5595f39fa30a3f854a370b97db4806987cf2f9a03f537521", 0x4e}], 0x8, &(0x7f0000008a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r2, r3, r0, r4, r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x148, 0x4}}], 0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') [ 649.466051] FAULT_INJECTION: forcing a failure. [ 649.466051] name failslab, interval 1, probability 0, space 0, times 0 [ 649.469801] CPU: 1 PID: 6191 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 649.471353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 649.473231] Call Trace: [ 649.473850] dump_stack+0x107/0x167 [ 649.474682] should_fail.cold+0x5/0xa [ 649.475552] should_failslab+0x5/0x20 [ 649.476415] __kmalloc_track_caller+0x79/0x370 [ 649.476727] FAULT_INJECTION: forcing a failure. [ 649.476727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.477453] ? strndup_user+0x74/0xe0 [ 649.477479] memdup_user+0x22/0xd0 [ 649.481704] strndup_user+0x74/0xe0 [ 649.482532] __x64_sys_mount+0x133/0x300 [ 649.483457] ? copy_mnt_ns+0xa00/0xa00 [ 649.484349] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 649.485559] ? syscall_enter_from_user_mode+0x1d/0x50 [ 649.486736] do_syscall_64+0x33/0x40 [ 649.487584] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 649.488751] RIP: 0033:0x7f9de321cb19 [ 649.489602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 649.493784] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 649.495504] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 649.497120] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 649.498756] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 649.500376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.502013] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 649.503667] CPU: 0 PID: 6184 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 649.505128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 649.506900] Call Trace: [ 649.507464] dump_stack+0x107/0x167 [ 649.508246] should_fail.cold+0x5/0xa [ 649.509067] _copy_from_user+0x2e/0x1b0 [ 649.509928] io_copy_iov+0xbf/0x1c0 [ 649.510697] ? io_cancel_task_cb+0x80/0x80 [ 649.511589] ? kmalloc_order+0xfe/0x160 [ 649.512444] io_sqe_buffers_register+0x31d/0x880 [ 649.513463] ? io_sqd_handle_event+0x350/0x350 [ 649.514454] __do_sys_io_uring_register+0x1648/0x2fa0 [ 649.515559] ? io_recvmsg+0xd70/0xd70 [ 649.516374] ? fput_many+0x2f/0x1a0 [ 649.517141] ? ksys_write+0x1a9/0x260 [ 649.517958] ? __ia32_sys_read+0xb0/0xb0 [ 649.518828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 649.519943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 649.521041] do_syscall_64+0x33/0x40 [ 649.521851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 649.522945] RIP: 0033:0x7f748a34ab19 [ 649.523739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 649.527646] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 649.529270] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 649.530793] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 649.532311] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 649.533831] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 649.535350] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 649.548418] audit: type=1400 audit(1768920466.102:34): avc: denied { map } for pid=6181 comm="syz-executor.3" path="/proc/6181/task/6196" dev="proc" ino=21730 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 14:47:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:47:59 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 51) 14:47:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x18f6e2, 0x22) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0xc001, 0x0) lseek(r2, 0x8, 0x2) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 14:47:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfffffffa) syz_io_uring_setup(0x525d, &(0x7f0000000440)={0x0, 0x2, 0x0, 0x0, 0x3db}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000300), 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8000000000000005}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x420400, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) r3 = socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000002e00), r3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)="e79ef4beb08f6111473ce427b2aac155dae7423b5990d6c0b2d6516e2da2cd0477d854574616a5f9759b8ea3b8f9c4f04911948eea731e98929daf0e55e5723a4590b475b7348e47f368d25c37d683af7179b9f53a24b7d5dc87440e56ee68afddf67a2087631b8322449bb953299f1b3e792ce796a69b81cc58ea1bb0f51ed19309f1d11146c8f0de8688ef480925636984b44a120f25e7c7627f8508ab039efed8cbe0cba6078f47c4f6f6fc66859da2667fd11fe98ed6fdeb4660cc88d7c9a9bab7d5a6a63060cceb61404bb712912568370d65f82381c3a57248246839c21484ed4d2753f4d65f712842f3b908a76e", 0xf1, 0x80, 0x0, {0x0, r5}}, 0xdb02) r6 = socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000002e00), r6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) fgetxattr(r3, &(0x7f0000000140)=@random={'trusted.', '--\x00'}, &(0x7f00000001c0)=""/3, 0x3) faccessat2(r2, &(0x7f0000000240)='./file0\x00', 0x144, 0x2300) [ 663.307864] FAULT_INJECTION: forcing a failure. [ 663.307864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.310604] CPU: 0 PID: 6210 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 663.312167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 663.314051] Call Trace: [ 663.314653] dump_stack+0x107/0x167 [ 663.315485] should_fail.cold+0x5/0xa [ 663.316364] _copy_from_user+0x2e/0x1b0 [ 663.317272] io_copy_iov+0xbf/0x1c0 [ 663.318109] ? io_cancel_task_cb+0x80/0x80 [ 663.319071] ? kmalloc_order+0xfe/0x160 [ 663.319987] io_sqe_buffers_register+0x31d/0x880 [ 663.321079] ? io_sqd_handle_event+0x350/0x350 [ 663.322159] __do_sys_io_uring_register+0x1648/0x2fa0 [ 663.323408] ? io_recvmsg+0xd70/0xd70 [ 663.324278] ? fput_many+0x2f/0x1a0 [ 663.325106] ? ksys_write+0x1a9/0x260 [ 663.325988] ? __ia32_sys_read+0xb0/0xb0 [ 663.326917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 663.328103] ? syscall_enter_from_user_mode+0x1d/0x50 [ 663.329277] do_syscall_64+0x33/0x40 [ 663.330131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 663.331294] RIP: 0033:0x7f748a34ab19 [ 663.332136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 663.336345] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 663.338090] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 663.339615] 9pnet: Insufficient options for proto=fd [ 663.339715] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 663.339731] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 663.343651] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 663.345271] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:47:59 executing program 3: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000280)={0x0, "6ae3a2279441c8bccb61a522f5e4e661ce0cb09305967cbd5b3e03bcee0579af6f2b79a27a599a8947acb47fc038d0c2a8bf68feedeeb2fcfcb3f785bb85aec9", 0x200000}, 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000700)='id_legacy\x00', &(0x7f0000000740)=@keyring) r1 = add_key$keyring(&(0x7f0000002c40), &(0x7f0000002c80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000002b00), 0x0, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f00000002c0)=@chain) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000840)=""/106, 0x6a}], 0x1, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000580)="3ed3687bc6d1746b3cedf37ba806f79c082e9ea19347519f6b0c0063167767ffb9ac8a5ff068108297fd64ef82e5492bb7128489760f3935373511caa93104a31876b6aabf31c651121c9052753673f0e0ca09e2400d81e822c8b9bca494a92ee68ee0c3eeacb729bc5352a41954ebfd7bcfa9d80cd0715522b6cf621cbfb00f", 0x80, 0x0) r3 = request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)='id_legacy\x00', r0) keyctl$reject(0x13, r2, 0x3, 0x5, r3) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00', 0x2, r4) keyctl$negate(0xd, r4, 0x100000001, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/36, 0x24, 0x0, 0x3f}) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)='dns_resolver\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='ceph\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}, 0x3040, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x101}, 0x0, 0x9, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412e500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:47:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2) 14:47:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) openat(r2, &(0x7f0000000240)='./file0\x00', 0x48002, 0x3c) lseek(r1, 0x4, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 14:47:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) 14:47:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:47:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) [ 663.357159] FAULT_INJECTION: forcing a failure. [ 663.357159] name failslab, interval 1, probability 0, space 0, times 0 [ 663.359796] CPU: 0 PID: 6219 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 663.361336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 663.363210] Call Trace: [ 663.363806] dump_stack+0x107/0x167 [ 663.364636] should_fail.cold+0x5/0xa [ 663.365509] ? create_object.isra.0+0x3a/0xa30 [ 663.366545] should_failslab+0x5/0x20 [ 663.367402] kmem_cache_alloc+0x5b/0x310 [ 663.368328] create_object.isra.0+0x3a/0xa30 [ 663.369314] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 663.370472] __kmalloc_track_caller+0x177/0x370 [ 663.371517] ? strndup_user+0x74/0xe0 [ 663.372379] memdup_user+0x22/0xd0 [ 663.373187] strndup_user+0x74/0xe0 [ 663.374037] __x64_sys_mount+0x133/0x300 [ 663.374958] ? copy_mnt_ns+0xa00/0xa00 [ 663.375849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 663.377037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 663.378221] do_syscall_64+0x33/0x40 [ 663.379076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 663.380238] RIP: 0033:0x7f9de321cb19 [ 663.381094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 663.385279] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 663.387012] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 663.388630] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 663.390122] 9pnet: Insufficient options for proto=fd [ 663.390303] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 663.390319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.394316] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 663.402894] FAULT_INJECTION: forcing a failure. [ 663.402894] name failslab, interval 1, probability 0, space 0, times 0 [ 663.405499] CPU: 0 PID: 6223 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 663.407090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 663.408979] Call Trace: [ 663.409591] dump_stack+0x107/0x167 [ 663.410434] should_fail.cold+0x5/0xa [ 663.411322] should_failslab+0x5/0x20 [ 663.412195] __kmalloc_track_caller+0x79/0x370 [ 663.413243] ? strndup_user+0x74/0xe0 [ 663.414152] memdup_user+0x22/0xd0 [ 663.415019] strndup_user+0x74/0xe0 [ 663.415867] __x64_sys_mount+0x133/0x300 [ 663.416805] ? copy_mnt_ns+0xa00/0xa00 [ 663.417732] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 663.418965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 663.420139] do_syscall_64+0x33/0x40 [ 663.420985] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 663.422145] RIP: 0033:0x7f5ea7bffb19 14:47:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) [ 663.422982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:47:59 executing program 3: keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x80) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/35, 0x23) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0xb, 0x0, @thr={0x0, &(0x7f0000000640)}}, &(0x7f00000004c0)) timer_create(0x0, &(0x7f0000000180)={0x0, 0xb, 0x0, @thr={0x0, &(0x7f0000000640)}}, &(0x7f00000004c0)) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x41084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000700)="5e849e5bb8bb0b9668541f79a9257f70b7cb684356de88e126831a2432c01b2ed4e5ab7ca99a0243e7a65ebed19d0a47f2d955ebcf64c4ae620c26cfd124174a0b33bf47aac77736966539cc60", 0x4d, 0x4048054, &(0x7f0000000780)={0x11, 0x2, 0x0, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) [ 663.427227] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 663.428987] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 663.430583] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 663.432161] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 663.433743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.435315] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 14:48:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = mq_open(&(0x7f0000000080)='\'(@-\x00', 0x40, 0x40, &(0x7f00000000c0)={0x7f, 0x2265, 0x3, 0x7}) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x8001, 0x40000) dup3(r2, r1, 0x80000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x110, r1, 0x2d438000) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') [ 663.473834] 9pnet: Insufficient options for proto=fd [ 663.489941] cgroup2: Unknown parameter '' 14:48:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) openat(r2, &(0x7f0000000240)='./file0\x00', 0x48002, 0x3c) lseek(r1, 0x4, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 14:48:00 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:48:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2) 14:48:00 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 52) 14:48:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x8801) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8080) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a09bc00c90f3fe6d8040000000000005ae2c01543aa66c0f846bab3690419306c10c4db24c57d0b91575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab06096a"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x14, r8, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40005) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x52}, @val={0x8}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x1) 14:48:00 executing program 2: r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x1ff) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x18) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') [ 663.605907] FAULT_INJECTION: forcing a failure. [ 663.605907] name failslab, interval 1, probability 0, space 0, times 0 [ 663.607277] CPU: 1 PID: 6249 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 663.608053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 663.608993] Call Trace: [ 663.609300] dump_stack+0x107/0x167 [ 663.609721] should_fail.cold+0x5/0xa [ 663.610152] ? create_object.isra.0+0x3a/0xa30 [ 663.610667] should_failslab+0x5/0x20 [ 663.611095] kmem_cache_alloc+0x5b/0x310 [ 663.611555] create_object.isra.0+0x3a/0xa30 [ 663.612050] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 663.612629] __kmalloc_track_caller+0x177/0x370 [ 663.613150] ? strndup_user+0x74/0xe0 [ 663.613595] memdup_user+0x22/0xd0 [ 663.613999] strndup_user+0x74/0xe0 [ 663.614421] __x64_sys_mount+0x133/0x300 [ 663.614882] ? copy_mnt_ns+0xa00/0xa00 [ 663.615323] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 663.615924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 663.616520] do_syscall_64+0x33/0x40 [ 663.616941] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 663.617518] RIP: 0033:0x7f5ea7bffb19 [ 663.617937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 663.620011] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 663.620872] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 663.621679] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 663.622473] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 663.623275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.624077] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 [ 663.635571] FAULT_INJECTION: forcing a failure. [ 663.635571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.636891] CPU: 1 PID: 6248 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 663.637663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 663.638585] Call Trace: [ 663.638881] dump_stack+0x107/0x167 [ 663.639293] should_fail.cold+0x5/0xa [ 663.639728] _copy_from_user+0x2e/0x1b0 [ 663.640175] io_copy_iov+0xbf/0x1c0 [ 663.640585] ? io_cancel_task_cb+0x80/0x80 [ 663.641060] ? kmalloc_order+0xfe/0x160 [ 663.641519] io_sqe_buffers_register+0x31d/0x880 [ 663.642057] ? io_sqd_handle_event+0x350/0x350 [ 663.642584] __do_sys_io_uring_register+0x1648/0x2fa0 [ 663.643170] ? io_recvmsg+0xd70/0xd70 [ 663.643598] ? fput_many+0x2f/0x1a0 [ 663.644003] ? ksys_write+0x1a9/0x260 [ 663.644432] ? __ia32_sys_read+0xb0/0xb0 [ 663.644892] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 663.645493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 663.646079] do_syscall_64+0x33/0x40 [ 663.646509] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 663.647085] RIP: 0033:0x7f748a34ab19 [ 663.647501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 663.649587] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 663.650443] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 663.651243] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 663.652042] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 663.652853] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 663.653662] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:48:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) 14:48:00 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) [ 663.691325] FAULT_INJECTION: forcing a failure. [ 663.691325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.694377] CPU: 0 PID: 6259 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 663.696113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 663.698208] Call Trace: [ 663.698894] dump_stack+0x107/0x167 [ 663.699824] should_fail.cold+0x5/0xa [ 663.700793] _copy_from_user+0x2e/0x1b0 [ 663.701832] memdup_user+0x65/0xd0 [ 663.702686] strndup_user+0x74/0xe0 [ 663.703472] __x64_sys_mount+0x133/0x300 [ 663.704349] ? copy_mnt_ns+0xa00/0xa00 [ 663.705195] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 663.706352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 663.707460] do_syscall_64+0x33/0x40 [ 663.708259] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 663.709354] RIP: 0033:0x7f9de321cb19 [ 663.710172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 663.714112] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 663.715766] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 663.717286] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 663.718816] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 663.720346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.721892] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 663.744411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.806925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:48:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 4) 14:48:13 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 677.191115] FAULT_INJECTION: forcing a failure. [ 677.191115] name failslab, interval 1, probability 0, space 0, times 0 14:48:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) openat(r2, &(0x7f0000000240)='./file0\x00', 0x48002, 0x3c) lseek(r1, 0x4, 0x0) [ 677.193810] CPU: 0 PID: 6266 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 677.195537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 677.197536] Call Trace: [ 677.198188] dump_stack+0x107/0x167 [ 677.199068] should_fail.cold+0x5/0xa [ 677.199990] ? copy_mount_options+0x55/0x180 [ 677.201051] should_failslab+0x5/0x20 [ 677.201978] kmem_cache_alloc_trace+0x55/0x320 [ 677.203076] ? _copy_from_user+0xfb/0x1b0 [ 677.204080] copy_mount_options+0x55/0x180 [ 677.205102] __x64_sys_mount+0x1a8/0x300 [ 677.206092] ? copy_mnt_ns+0xa00/0xa00 14:48:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) 14:48:13 executing program 3: r0 = semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000080)=[{0x1, 0x6, 0x1800}], 0x1) r1 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(r1, &(0x7f0000000000)=[{}], 0x1) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000002c0)=""/207) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000180)={r2, r3+60000000}) semtimedop(0x0, &(0x7f00000001c0)=[{0x0, 0x4a41}, {0x0, 0x0, 0x1c00}, {0x2, 0x400, 0x400}], 0x3, &(0x7f0000000200)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semop(r4, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}], 0x3) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000001140)=""/4096) unshare(0x48020200) semtimedop(r4, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) [ 677.207047] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 677.208378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 677.209628] do_syscall_64+0x33/0x40 [ 677.210544] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 677.211781] RIP: 0033:0x7f9de321cb19 [ 677.212675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 677.217115] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 677.218959] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 677.220594] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 677.222128] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 677.223654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.225181] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 14:48:13 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 53) 14:48:13 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:48:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r1}}, './file1\x00'}) unlink(&(0x7f0000000200)='./file0\x00') r2 = creat(&(0x7f0000000080)='./file0\x00', 0xc0) r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x807, 0x280802) syz_io_uring_setup(0x1220, &(0x7f0000000240)={0x0, 0xe07, 0x6, 0x0, 0xb3, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) bind$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) [ 677.246641] FAULT_INJECTION: forcing a failure. [ 677.246641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.249188] CPU: 0 PID: 6275 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 677.250688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 677.252523] Call Trace: [ 677.253107] dump_stack+0x107/0x167 [ 677.253924] should_fail.cold+0x5/0xa [ 677.254774] _copy_from_user+0x2e/0x1b0 [ 677.255656] io_copy_iov+0xbf/0x1c0 [ 677.256459] ? io_cancel_task_cb+0x80/0x80 [ 677.257389] ? kmalloc_order+0xfe/0x160 [ 677.258285] io_sqe_buffers_register+0x31d/0x880 [ 677.259339] ? io_sqd_handle_event+0x350/0x350 [ 677.260382] __do_sys_io_uring_register+0x1648/0x2fa0 [ 677.261539] ? io_recvmsg+0xd70/0xd70 [ 677.262393] ? fput_many+0x2f/0x1a0 [ 677.263198] ? ksys_write+0x1a9/0x260 [ 677.264045] ? __ia32_sys_read+0xb0/0xb0 [ 677.264952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 677.266126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 677.267275] do_syscall_64+0x33/0x40 [ 677.268102] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 677.269244] RIP: 0033:0x7f748a34ab19 [ 677.270081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 677.274234] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 677.275933] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 677.277530] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 677.279149] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 677.280758] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 677.282376] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 677.288322] FAULT_INJECTION: forcing a failure. [ 677.288322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.291071] CPU: 0 PID: 6277 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 677.292627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 677.294545] Call Trace: [ 677.295149] dump_stack+0x107/0x167 [ 677.295986] should_fail.cold+0x5/0xa [ 677.296869] _copy_from_user+0x2e/0x1b0 [ 677.297791] memdup_user+0x65/0xd0 [ 677.298603] strndup_user+0x74/0xe0 [ 677.299439] __x64_sys_mount+0x133/0x300 [ 677.300367] ? copy_mnt_ns+0xa00/0xa00 [ 677.301263] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 677.302482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 677.303678] do_syscall_64+0x33/0x40 [ 677.304537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 677.305727] RIP: 0033:0x7f5ea7bffb19 [ 677.306584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 677.310828] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 677.312600] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 677.314261] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 677.315917] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 677.317570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.319236] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 14:48:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) openat(r1, &(0x7f0000000240)='./file0\x00', 0x48002, 0x3c) 14:48:13 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:48:13 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:48:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 4) 14:48:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 5) 14:48:14 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 54) 14:48:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x0, 0x80000001, 0x2, 0x2d}) 14:48:14 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) [ 677.529856] FAULT_INJECTION: forcing a failure. [ 677.529856] name failslab, interval 1, probability 0, space 0, times 0 [ 677.531035] FAULT_INJECTION: forcing a failure. [ 677.531035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.532353] CPU: 0 PID: 6296 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 677.536405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 677.538199] Call Trace: [ 677.538774] dump_stack+0x107/0x167 [ 677.539567] should_fail.cold+0x5/0xa [ 677.540395] ? create_object.isra.0+0x3a/0xa30 [ 677.541384] should_failslab+0x5/0x20 [ 677.542212] kmem_cache_alloc+0x5b/0x310 [ 677.543095] create_object.isra.0+0x3a/0xa30 [ 677.544043] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 677.545146] kmem_cache_alloc_trace+0x151/0x320 [ 677.546170] copy_mount_options+0x55/0x180 [ 677.547084] __x64_sys_mount+0x1a8/0x300 [ 677.547957] ? copy_mnt_ns+0xa00/0xa00 [ 677.548802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 677.549939] ? syscall_enter_from_user_mode+0x1d/0x50 [ 677.551053] do_syscall_64+0x33/0x40 [ 677.551857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 677.552961] RIP: 0033:0x7f9de321cb19 [ 677.553768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 677.557726] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 677.559357] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 677.560884] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 677.562416] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 677.563939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.565466] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 677.567032] CPU: 1 PID: 6298 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 677.568623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 677.570558] Call Trace: [ 677.571177] dump_stack+0x107/0x167 [ 677.572029] should_fail.cold+0x5/0xa [ 677.572924] _copy_from_user+0x2e/0x1b0 [ 677.573862] io_copy_iov+0xbf/0x1c0 [ 677.574705] ? io_cancel_task_cb+0x80/0x80 [ 677.575685] ? kmalloc_order+0xfe/0x160 [ 677.576620] io_sqe_buffers_register+0x31d/0x880 [ 677.577732] ? io_sqd_handle_event+0x350/0x350 [ 677.578819] __do_sys_io_uring_register+0x1648/0x2fa0 [ 677.580027] ? io_recvmsg+0xd70/0xd70 [ 677.580911] ? fput_many+0x2f/0x1a0 [ 677.581757] ? ksys_write+0x1a9/0x260 [ 677.582639] ? __ia32_sys_read+0xb0/0xb0 [ 677.583589] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 677.584805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 677.586010] do_syscall_64+0x33/0x40 [ 677.586874] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 677.588058] RIP: 0033:0x7f748a34ab19 [ 677.588926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 677.593182] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 677.594914] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 677.596522] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 677.598130] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 677.599735] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 677.601341] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 677.622538] FAULT_INJECTION: forcing a failure. [ 677.622538] name failslab, interval 1, probability 0, space 0, times 0 [ 677.625070] CPU: 0 PID: 6300 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 677.626532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 677.628333] Call Trace: [ 677.628910] dump_stack+0x107/0x167 [ 677.629715] should_fail.cold+0x5/0xa [ 677.630545] ? copy_mount_options+0x55/0x180 [ 677.631498] should_failslab+0x5/0x20 [ 677.632326] kmem_cache_alloc_trace+0x55/0x320 [ 677.633317] ? _copy_from_user+0xfb/0x1b0 [ 677.634232] copy_mount_options+0x55/0x180 [ 677.635153] __x64_sys_mount+0x1a8/0x300 [ 677.636035] ? copy_mnt_ns+0xa00/0xa00 [ 677.636882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 677.638030] ? syscall_enter_from_user_mode+0x1d/0x50 [ 677.639153] do_syscall_64+0x33/0x40 [ 677.639962] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 677.641071] RIP: 0033:0x7f5ea7bffb19 [ 677.641886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 677.645870] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 677.647516] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 677.649060] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 677.650610] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 677.652153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.653744] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 14:48:28 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 55) 14:48:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) 14:48:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 5) 14:48:28 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:48:28 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:48:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101140, 0xa2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x7, 0x0, 0x2, 0x4}) unlink(&(0x7f0000000200)='./file0\x00') 14:48:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) 14:48:28 executing program 3: r0 = semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000080)=[{0x1, 0x6, 0x1800}], 0x1) r1 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(r1, &(0x7f0000000000)=[{}], 0x1) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000002c0)=""/207) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000180)={r2, r3+60000000}) semtimedop(0x0, &(0x7f00000001c0)=[{0x0, 0x4a41}, {0x0, 0x0, 0x1c00}, {0x2, 0x400, 0x400}], 0x3, &(0x7f0000000200)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semop(r4, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}], 0x3) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000001140)=""/4096) unshare(0x48020200) semtimedop(r4, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) [ 692.371474] FAULT_INJECTION: forcing a failure. [ 692.371474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.373713] CPU: 1 PID: 6311 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 692.374568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 692.375626] Call Trace: [ 692.375960] dump_stack+0x107/0x167 [ 692.376422] should_fail.cold+0x5/0xa [ 692.376920] _copy_from_user+0x2e/0x1b0 [ 692.377413] io_copy_iov+0xbf/0x1c0 [ 692.377883] ? io_cancel_task_cb+0x80/0x80 [ 692.378427] ? kmalloc_order+0xfe/0x160 [ 692.378935] io_sqe_buffers_register+0x31d/0x880 [ 692.379520] ? io_sqd_handle_event+0x350/0x350 [ 692.380115] __do_sys_io_uring_register+0x1648/0x2fa0 [ 692.380750] ? io_recvmsg+0xd70/0xd70 [ 692.381214] ? fput_many+0x2f/0x1a0 [ 692.381663] ? ksys_write+0x1a9/0x260 [ 692.382148] ? __ia32_sys_read+0xb0/0xb0 [ 692.382660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 692.383329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 692.384001] do_syscall_64+0x33/0x40 [ 692.384480] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 692.385129] RIP: 0033:0x7f748a34ab19 [ 692.385601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 692.387953] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 692.388889] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 692.389781] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 692.390704] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 692.391593] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 692.392498] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 692.394662] FAULT_INJECTION: forcing a failure. [ 692.394662] name failslab, interval 1, probability 0, space 0, times 0 [ 692.396012] CPU: 1 PID: 6314 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 692.396810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 692.397768] Call Trace: [ 692.398111] dump_stack+0x107/0x167 [ 692.398553] should_fail.cold+0x5/0xa [ 692.399018] ? create_object.isra.0+0x3a/0xa30 [ 692.399583] should_failslab+0x5/0x20 [ 692.400045] kmem_cache_alloc+0x5b/0x310 [ 692.400531] create_object.isra.0+0x3a/0xa30 [ 692.401050] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 692.401678] kmem_cache_alloc_trace+0x151/0x320 [ 692.402259] ? _copy_from_user+0xfb/0x1b0 [ 692.402772] copy_mount_options+0x55/0x180 [ 692.403289] __x64_sys_mount+0x1a8/0x300 [ 692.403785] ? copy_mnt_ns+0xa00/0xa00 [ 692.404252] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 692.404886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 692.405520] do_syscall_64+0x33/0x40 [ 692.405985] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 692.406608] RIP: 0033:0x7f5ea7bffb19 [ 692.407061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 692.408469] FAULT_INJECTION: forcing a failure. [ 692.408469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.409253] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 692.409265] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 692.409271] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 692.409277] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 692.409283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.409288] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 [ 692.422176] CPU: 0 PID: 6322 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 692.423763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 692.425697] Call Trace: [ 692.426325] dump_stack+0x107/0x167 [ 692.427187] should_fail.cold+0x5/0xa [ 692.428089] _copy_from_user+0x2e/0x1b0 [ 692.429008] copy_mount_options+0x76/0x180 14:48:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) [ 692.430000] __x64_sys_mount+0x1a8/0x300 [ 692.431096] ? copy_mnt_ns+0xa00/0xa00 [ 692.432019] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 692.433249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 692.434461] do_syscall_64+0x33/0x40 [ 692.435335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 692.436527] RIP: 0033:0x7f9de321cb19 [ 692.437405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 692.441715] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 692.443856] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 692.445640] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 692.447331] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 692.449018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.450753] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 14:48:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) [ 692.528694] FAULT_INJECTION: forcing a failure. [ 692.528694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.530132] CPU: 1 PID: 6329 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 692.530962] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 692.531975] Call Trace: [ 692.532299] dump_stack+0x107/0x167 [ 692.532739] should_fail.cold+0x5/0xa [ 692.533202] _copy_from_user+0x2e/0x1b0 [ 692.533687] copy_mount_options+0x76/0x180 [ 692.534191] __x64_sys_mount+0x1a8/0x300 [ 692.534682] ? copy_mnt_ns+0xa00/0xa00 [ 692.535144] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 692.535775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 692.536380] do_syscall_64+0x33/0x40 [ 692.536833] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 692.537450] RIP: 0033:0x7f5ea7bffb19 [ 692.537901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 692.540109] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 692.541020] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 692.541874] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 692.542724] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 692.543601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.544467] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 14:48:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 14:48:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c010000160001000000000000003a21bc0000ac1414aa000000000000000000000000fc010000000000000000000000000000ffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000200000000000000000000000000000000320000007f00000100000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c0012006d6f72757336343000"/244], 0x13c}}, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'ip6gretap0\x00', {'veth1_vlan\x00'}, 0x8}) 14:48:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 7) 14:48:43 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 56) 14:48:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:48:43 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:48:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x7, 0x8, 0x1000}) unlink(&(0x7f0000000200)='./file0\x00') 14:48:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 7) [ 706.742377] FAULT_INJECTION: forcing a failure. [ 706.742377] name failslab, interval 1, probability 0, space 0, times 0 [ 706.744077] CPU: 0 PID: 6337 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 706.745065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 706.746258] Call Trace: [ 706.746645] dump_stack+0x107/0x167 [ 706.747156] should_fail.cold+0x5/0xa [ 706.747708] ? getname_flags.part.0+0x50/0x4f0 [ 706.748349] should_failslab+0x5/0x20 [ 706.748910] kmem_cache_alloc+0x5b/0x310 [ 706.749498] getname_flags.part.0+0x50/0x4f0 [ 706.750145] ? _copy_from_user+0xfb/0x1b0 [ 706.750747] user_path_at_empty+0xa1/0x100 [ 706.751361] __x64_sys_mount+0x1e9/0x300 [ 706.751933] ? copy_mnt_ns+0xa00/0xa00 [ 706.752484] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 706.753244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 706.754001] do_syscall_64+0x33/0x40 [ 706.754541] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 706.755261] RIP: 0033:0x7f9de321cb19 [ 706.755800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 706.758410] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 706.759476] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 706.760506] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 706.761539] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 706.762538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.763569] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 706.770601] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 706.790197] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 706.793227] FAULT_INJECTION: forcing a failure. [ 706.793227] name failslab, interval 1, probability 0, space 0, times 0 [ 706.796113] CPU: 1 PID: 6350 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 706.797697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 706.799574] Call Trace: [ 706.800190] dump_stack+0x107/0x167 [ 706.801041] should_fail.cold+0x5/0xa [ 706.802001] ? getname_flags.part.0+0x50/0x4f0 [ 706.803050] should_failslab+0x5/0x20 [ 706.803929] kmem_cache_alloc+0x5b/0x310 [ 706.804861] getname_flags.part.0+0x50/0x4f0 [ 706.805883] ? _copy_from_user+0xfb/0x1b0 [ 706.806855] user_path_at_empty+0xa1/0x100 [ 706.807827] __x64_sys_mount+0x1e9/0x300 [ 706.808766] ? copy_mnt_ns+0xa00/0xa00 [ 706.809663] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 706.810890] ? syscall_enter_from_user_mode+0x1d/0x50 [ 706.812092] do_syscall_64+0x33/0x40 [ 706.812940] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 706.814137] RIP: 0033:0x7f5ea7bffb19 [ 706.815003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 706.819260] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 706.821000] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 706.822631] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 706.824278] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 14:48:43 executing program 3: perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x13, 0x1, 0xfb, 0x0, 0x0, 0x0, 0xd8288, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x40000}, 0x0, 0x5bda}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/178, 0xb2}, {&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000380)=""/245, 0xf5}], 0x3, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20}, 0x10120) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000480)=[{}], 0x1, 0x7) r2 = open(&(0x7f0000000380)='./file0\x00', 0x5db9c3, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) openat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60000334001c3a0020000000000000000000ffffac141400ff0200000000000000000000000000018200907800000000fc0100"/82], 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) [ 706.825904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.827745] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 14:48:43 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x14f6e2, 0x20) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x1, 0x0, 0x7, 0x6, 0x2}) creat(&(0x7f0000000100)='./file0\x00', 0x80) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000000c0)={0x1, 0xe0, 0xfffffffffffffffe}) unlink(&(0x7f0000000200)='./file0\x00') [ 706.843923] FAULT_INJECTION: forcing a failure. [ 706.843923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.845639] CPU: 0 PID: 6346 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 706.846640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 706.847811] Call Trace: [ 706.848195] dump_stack+0x107/0x167 [ 706.848737] should_fail.cold+0x5/0xa [ 706.849282] _copy_from_user+0x2e/0x1b0 [ 706.849841] io_copy_iov+0xbf/0x1c0 [ 706.850355] ? io_cancel_task_cb+0x80/0x80 [ 706.850946] ? kmalloc_order+0xfe/0x160 [ 706.851510] io_sqe_buffers_register+0x31d/0x880 [ 706.852187] ? io_sqd_handle_event+0x350/0x350 [ 706.852848] __do_sys_io_uring_register+0x1648/0x2fa0 [ 706.853576] ? io_recvmsg+0xd70/0xd70 [ 706.854121] ? fput_many+0x2f/0x1a0 [ 706.854631] ? ksys_write+0x1a9/0x260 [ 706.855161] ? __ia32_sys_read+0xb0/0xb0 [ 706.855735] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 706.856479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 706.857202] do_syscall_64+0x33/0x40 [ 706.857727] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 706.858468] RIP: 0033:0x7f748a34ab19 [ 706.858988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 706.861681] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 706.862775] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 706.863780] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 706.864814] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 706.865866] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 706.866896] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:48:43 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:48:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:48:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ftruncate(r0, 0x1) 14:48:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 8) 14:48:43 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 706.959871] FAULT_INJECTION: forcing a failure. [ 706.959871] name failslab, interval 1, probability 0, space 0, times 0 [ 706.961257] CPU: 0 PID: 6367 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 706.962064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 706.963018] Call Trace: [ 706.963332] dump_stack+0x107/0x167 [ 706.963761] should_fail.cold+0x5/0xa [ 706.964211] ? create_object.isra.0+0x3a/0xa30 [ 706.964744] should_failslab+0x5/0x20 [ 706.965187] kmem_cache_alloc+0x5b/0x310 [ 706.965658] create_object.isra.0+0x3a/0xa30 [ 706.966175] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 706.966769] kmem_cache_alloc+0x159/0x310 [ 706.967256] getname_flags.part.0+0x50/0x4f0 [ 706.967771] ? _copy_from_user+0xfb/0x1b0 [ 706.968264] user_path_at_empty+0xa1/0x100 [ 706.968750] __x64_sys_mount+0x1e9/0x300 [ 706.969228] ? copy_mnt_ns+0xa00/0xa00 [ 706.969681] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 706.970313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 706.970933] do_syscall_64+0x33/0x40 [ 706.971359] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 706.971944] RIP: 0033:0x7f9de321cb19 [ 706.972388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 706.974501] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 706.975409] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 706.976264] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 706.977118] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 706.977946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.978770] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 14:48:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000240)) unlink(&(0x7f00000000c0)='./file0\x00') 14:48:43 executing program 3: r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_setup(0x6c0a, &(0x7f0000000040)={0x0, 0x907a, 0x10, 0x2, 0x2ed, 0x0, r0}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x7, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:48:43 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 57) [ 707.055710] FAULT_INJECTION: forcing a failure. [ 707.055710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.057200] CPU: 0 PID: 6376 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 707.057993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 707.058931] Call Trace: [ 707.059247] dump_stack+0x107/0x167 [ 707.059691] should_fail.cold+0x5/0xa [ 707.060158] _copy_from_user+0x2e/0x1b0 [ 707.060631] io_copy_iov+0xbf/0x1c0 [ 707.061061] ? io_cancel_task_cb+0x80/0x80 [ 707.061557] ? kmalloc_order+0xfe/0x160 [ 707.062047] io_sqe_buffers_register+0x31d/0x880 [ 707.062619] ? io_sqd_handle_event+0x350/0x350 [ 707.063185] __do_sys_io_uring_register+0x1648/0x2fa0 [ 707.063805] ? io_recvmsg+0xd70/0xd70 [ 707.064258] ? fput_many+0x2f/0x1a0 [ 707.064690] ? ksys_write+0x1a9/0x260 [ 707.065143] ? __ia32_sys_read+0xb0/0xb0 [ 707.065625] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 707.066251] ? syscall_enter_from_user_mode+0x1d/0x50 [ 707.066852] do_syscall_64+0x33/0x40 [ 707.067282] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 707.067874] RIP: 0033:0x7f748a34ab19 [ 707.068318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 707.070497] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 707.071391] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 707.072222] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 707.073056] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 707.073891] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 707.074732] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 720.488866] FAULT_INJECTION: forcing a failure. 14:48:57 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 58) 14:48:57 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:48:57 executing program 3: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ec}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) fstat(0xffffffffffffffff, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) r5 = getpgrp(0x0) pidfd_open(r5, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x3b, 0x40, 0x80, 0xac, 0x0, 0xbf8, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000140)}, 0x10000, 0xa6, 0x81, 0x1, 0x37, 0x5, 0x4e, 0x0, 0x9d16, 0x0, 0x33}, r5, 0x5, r3, 0x2) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x12c1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x2}, 0x8000, 0x1f98, 0x9, 0x0, 0x3ff, 0x0, 0x4, 0x0, 0xffffffc0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:48:57 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 8) 14:48:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) [ 720.488866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.491686] CPU: 1 PID: 6386 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 720.493133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 720.494886] Call Trace: [ 720.495448] dump_stack+0x107/0x167 [ 720.496218] should_fail.cold+0x5/0xa [ 720.497036] _copy_from_user+0x2e/0x1b0 [ 720.497879] io_copy_iov+0xbf/0x1c0 [ 720.498660] ? io_cancel_task_cb+0x80/0x80 [ 720.499557] ? kmalloc_order+0xfe/0x160 [ 720.500406] io_sqe_buffers_register+0x31d/0x880 [ 720.501409] ? io_sqd_handle_event+0x350/0x350 [ 720.502408] __do_sys_io_uring_register+0x1648/0x2fa0 [ 720.503511] ? io_recvmsg+0xd70/0xd70 [ 720.504313] ? fput_many+0x2f/0x1a0 [ 720.505077] ? ksys_write+0x1a9/0x260 [ 720.505882] ? __ia32_sys_read+0xb0/0xb0 [ 720.506752] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 720.507859] ? syscall_enter_from_user_mode+0x1d/0x50 [ 720.508948] do_syscall_64+0x33/0x40 [ 720.509734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 720.510814] RIP: 0033:0x7f748a34ab19 14:48:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x1) 14:48:57 executing program 2: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') 14:48:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 9) [ 720.511593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 720.515630] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 720.517235] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 720.518749] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 720.520254] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 720.521749] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 720.523256] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 720.532127] FAULT_INJECTION: forcing a failure. [ 720.532127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.535508] CPU: 1 PID: 6390 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 720.536952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 720.538711] Call Trace: [ 720.539266] dump_stack+0x107/0x167 [ 720.540036] should_fail.cold+0x5/0xa [ 720.540844] strncpy_from_user+0x34/0x470 [ 720.541727] getname_flags.part.0+0x95/0x4f0 [ 720.542671] ? _copy_from_user+0xfb/0x1b0 [ 720.543546] user_path_at_empty+0xa1/0x100 [ 720.544440] __x64_sys_mount+0x1e9/0x300 [ 720.545294] ? copy_mnt_ns+0xa00/0xa00 [ 720.546119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 720.547236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 720.548324] do_syscall_64+0x33/0x40 [ 720.549108] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 720.550203] RIP: 0033:0x7f9de321cb19 [ 720.550976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 720.554847] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 720.556449] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 720.557946] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 720.559457] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 720.560951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.562455] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 720.591897] FAULT_INJECTION: forcing a failure. [ 720.591897] name failslab, interval 1, probability 0, space 0, times 0 [ 720.594347] CPU: 0 PID: 6398 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 720.595786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 720.597527] Call Trace: [ 720.598092] dump_stack+0x107/0x167 [ 720.598871] should_fail.cold+0x5/0xa [ 720.599677] ? create_object.isra.0+0x3a/0xa30 [ 720.600634] should_failslab+0x5/0x20 [ 720.601432] kmem_cache_alloc+0x5b/0x310 [ 720.602309] create_object.isra.0+0x3a/0xa30 [ 720.603225] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 720.604294] kmem_cache_alloc+0x159/0x310 [ 720.605173] getname_flags.part.0+0x50/0x4f0 [ 720.606106] ? _copy_from_user+0xfb/0x1b0 [ 720.606994] user_path_at_empty+0xa1/0x100 [ 720.607885] __x64_sys_mount+0x1e9/0x300 [ 720.608735] ? copy_mnt_ns+0xa00/0xa00 [ 720.609558] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 720.610666] ? syscall_enter_from_user_mode+0x1d/0x50 [ 720.611759] do_syscall_64+0x33/0x40 [ 720.612542] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 720.613627] RIP: 0033:0x7f5ea7bffb19 [ 720.614414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 720.618280] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 720.619881] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 720.621390] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 720.622890] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 720.624385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.625883] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 14:48:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x8040) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000240)={{r3}, "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"}) unlink(&(0x7f0000000200)='./file0\x00') 14:48:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1) 14:48:57 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:48:57 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 59) 14:48:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 10) 14:48:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) [ 720.743027] FAULT_INJECTION: forcing a failure. [ 720.743027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.745569] CPU: 1 PID: 6408 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 720.747011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 720.748743] Call Trace: [ 720.749307] dump_stack+0x107/0x167 [ 720.750085] should_fail.cold+0x5/0xa [ 720.750912] _copy_from_user+0x2e/0x1b0 [ 720.751756] io_copy_iov+0xbf/0x1c0 [ 720.752525] ? io_cancel_task_cb+0x80/0x80 [ 720.753422] ? kmalloc_order+0xfe/0x160 [ 720.754284] io_sqe_buffers_register+0x31d/0x880 [ 720.755290] ? io_sqd_handle_event+0x350/0x350 [ 720.756291] __do_sys_io_uring_register+0x1648/0x2fa0 [ 720.757387] ? io_recvmsg+0xd70/0xd70 [ 720.758194] ? fput_many+0x2f/0x1a0 [ 720.758961] ? ksys_write+0x1a9/0x260 [ 720.759768] ? __ia32_sys_read+0xb0/0xb0 [ 720.760627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 720.761734] ? syscall_enter_from_user_mode+0x1d/0x50 [ 720.762840] do_syscall_64+0x33/0x40 [ 720.763275] 9pnet: Insufficient options for proto=fd [ 720.763621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 720.763634] RIP: 0033:0x7f748a34ab19 [ 720.763656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 720.770439] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 720.772037] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 720.773533] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 720.775033] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 720.776528] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 720.778038] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:48:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1) 14:48:57 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 720.823355] FAULT_INJECTION: forcing a failure. [ 720.823355] name failslab, interval 1, probability 0, space 0, times 0 [ 720.825799] CPU: 1 PID: 6412 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 720.827246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 720.828988] Call Trace: [ 720.829548] dump_stack+0x107/0x167 [ 720.830328] should_fail.cold+0x5/0xa [ 720.831139] ? alloc_fs_context+0x57/0x840 [ 720.832031] should_failslab+0x5/0x20 [ 720.832831] kmem_cache_alloc_trace+0x55/0x320 [ 720.833944] alloc_fs_context+0x57/0x840 [ 720.834827] path_mount+0xab1/0x21e0 [ 720.835613] ? strncpy_from_user+0x9e/0x470 [ 720.836526] ? finish_automount+0xa90/0xa90 [ 720.837434] ? getname_flags.part.0+0x1dd/0x4f0 [ 720.838418] ? _copy_from_user+0xfb/0x1b0 [ 720.839291] __x64_sys_mount+0x282/0x300 [ 720.840143] ? copy_mnt_ns+0xa00/0xa00 [ 720.840962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 720.842066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 720.843150] do_syscall_64+0x33/0x40 [ 720.843949] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 720.845027] RIP: 0033:0x7f9de321cb19 14:48:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) [ 720.845806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 720.850332] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 720.852082] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 720.853598] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 720.855126] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 720.856634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 720.858164] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 14:48:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_TUPLE={0x98, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x840}, 0x40000) r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000340)=0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r6], 0x38}}], 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xa0, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xa0}}, 0x1) unlink(&(0x7f0000000200)='./file0\x00') [ 720.935388] 9pnet: Insufficient options for proto=fd 14:49:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 11) [ 738.371664] FAULT_INJECTION: forcing a failure. 14:49:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 9) 14:49:14 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x383100, 0xb6) fsetxattr(r0, &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000200)='\x00', 0x4d, 0x0) getdents64(r0, &(0x7f0000000080)=""/164, 0xa4) 14:49:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') [ 738.371664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.374644] CPU: 1 PID: 6429 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 738.376392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.378521] Call Trace: [ 738.379197] dump_stack+0x107/0x167 [ 738.380141] should_fail.cold+0x5/0xa [ 738.381125] strncpy_from_user+0x34/0x470 [ 738.382201] getname_flags.part.0+0x95/0x4f0 [ 738.383330] ? _copy_from_user+0xfb/0x1b0 [ 738.384386] user_path_at_empty+0xa1/0x100 [ 738.385480] __x64_sys_mount+0x1e9/0x300 [ 738.386523] ? copy_mnt_ns+0xa00/0xa00 [ 738.387527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 738.388859] ? syscall_enter_from_user_mode+0x1d/0x50 [ 738.390189] do_syscall_64+0x33/0x40 [ 738.391144] entry_SYSCALL_64_after_hwframe+0x67/0xd1 14:49:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:49:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1) 14:49:14 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 60) 14:49:14 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 738.392456] RIP: 0033:0x7f5ea7bffb19 [ 738.393485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 738.398197] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 738.400137] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 738.401944] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 738.403774] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 738.405585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.407417] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 [ 738.431263] 9pnet: Insufficient options for proto=fd [ 738.434918] FAULT_INJECTION: forcing a failure. [ 738.434918] name failslab, interval 1, probability 0, space 0, times 0 [ 738.437380] CPU: 1 PID: 6434 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 738.438874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.440672] Call Trace: [ 738.441250] dump_stack+0x107/0x167 [ 738.442047] should_fail.cold+0x5/0xa [ 738.442882] ? create_object.isra.0+0x3a/0xa30 14:49:14 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:49:14 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r1 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r1, 0x58ab, 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000500)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 738.443875] should_failslab+0x5/0x20 [ 738.444862] kmem_cache_alloc+0x5b/0x310 [ 738.445747] create_object.isra.0+0x3a/0xa30 [ 738.446707] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 738.447811] kmem_cache_alloc_trace+0x151/0x320 [ 738.448825] alloc_fs_context+0x57/0x840 [ 738.449713] path_mount+0xab1/0x21e0 [ 738.450536] ? strncpy_from_user+0x9e/0x470 [ 738.451475] ? finish_automount+0xa90/0xa90 [ 738.452412] ? getname_flags.part.0+0x1dd/0x4f0 [ 738.453419] ? _copy_from_user+0xfb/0x1b0 [ 738.454326] __x64_sys_mount+0x282/0x300 [ 738.455215] ? copy_mnt_ns+0xa00/0xa00 [ 738.456064] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 738.457195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 738.458307] do_syscall_64+0x33/0x40 [ 738.459118] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 738.460229] RIP: 0033:0x7f9de321cb19 [ 738.461022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 738.465002] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 738.466643] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 738.468184] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 738.469730] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 738.471275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 738.472821] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 738.486928] FAULT_INJECTION: forcing a failure. [ 738.486928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.488410] CPU: 0 PID: 6445 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 738.489251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.490273] Call Trace: [ 738.490614] dump_stack+0x107/0x167 [ 738.491073] should_fail.cold+0x5/0xa [ 738.491549] _copy_from_user+0x2e/0x1b0 [ 738.492045] io_copy_iov+0xbf/0x1c0 [ 738.492500] ? io_cancel_task_cb+0x80/0x80 [ 738.493023] ? kmalloc_order+0xfe/0x160 [ 738.493527] io_sqe_buffers_register+0x31d/0x880 [ 738.494116] ? io_sqd_handle_event+0x350/0x350 [ 738.494705] __do_sys_io_uring_register+0x1648/0x2fa0 [ 738.495349] ? io_recvmsg+0xd70/0xd70 [ 738.495824] ? fput_many+0x2f/0x1a0 [ 738.496272] ? ksys_write+0x1a9/0x260 [ 738.496743] ? __ia32_sys_read+0xb0/0xb0 [ 738.497246] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 738.497889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 738.498531] do_syscall_64+0x33/0x40 [ 738.498989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 738.499623] RIP: 0033:0x7f748a34ab19 [ 738.500080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 738.502348] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 738.503290] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 738.504164] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 738.505035] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 738.505909] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 738.506791] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:49:15 executing program 7: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(0xffffffffffffffff, 0x1) 14:49:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:49:15 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:49:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 10) [ 738.572125] FAULT_INJECTION: forcing a failure. [ 738.572125] name failslab, interval 1, probability 0, space 0, times 0 [ 738.573591] CPU: 0 PID: 6459 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 738.574414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.575405] Call Trace: [ 738.575736] dump_stack+0x107/0x167 [ 738.576176] should_fail.cold+0x5/0xa [ 738.576637] ? alloc_fs_context+0x57/0x840 [ 738.577150] should_failslab+0x5/0x20 [ 738.577617] kmem_cache_alloc_trace+0x55/0x320 [ 738.578163] alloc_fs_context+0x57/0x840 [ 738.578660] path_mount+0xab1/0x21e0 [ 738.579114] ? strncpy_from_user+0x9e/0x470 [ 738.579628] ? finish_automount+0xa90/0xa90 [ 738.580142] ? getname_flags.part.0+0x1dd/0x4f0 [ 738.580701] ? _copy_from_user+0xfb/0x1b0 [ 738.581204] __x64_sys_mount+0x282/0x300 [ 738.581688] ? copy_mnt_ns+0xa00/0xa00 [ 738.582156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 738.582787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 738.583406] do_syscall_64+0x33/0x40 [ 738.583851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 738.584466] RIP: 0033:0x7f5ea7bffb19 [ 738.584908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 738.587121] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 738.588025] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 738.588868] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 738.589717] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 738.590569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 738.591418] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 14:49:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 12) 14:49:15 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:unconfined_exec_t:s0\x00', 0x27, 0x0) close_range(r1, r0, 0x2) 14:49:15 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 61) [ 738.629287] FAULT_INJECTION: forcing a failure. [ 738.629287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.630797] CPU: 0 PID: 6466 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 738.630882] FAULT_INJECTION: forcing a failure. [ 738.630882] name failslab, interval 1, probability 0, space 0, times 0 [ 738.631597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.631601] Call Trace: [ 738.631617] dump_stack+0x107/0x167 [ 738.631640] should_fail.cold+0x5/0xa [ 738.636356] _copy_from_user+0x2e/0x1b0 [ 738.636823] io_copy_iov+0xbf/0x1c0 [ 738.637253] ? io_cancel_task_cb+0x80/0x80 [ 738.637748] ? kmalloc_order+0xfe/0x160 [ 738.638224] io_sqe_buffers_register+0x31d/0x880 [ 738.638786] ? io_sqd_handle_event+0x350/0x350 [ 738.639340] __do_sys_io_uring_register+0x1648/0x2fa0 [ 738.639947] ? io_recvmsg+0xd70/0xd70 [ 738.640395] ? fput_many+0x2f/0x1a0 [ 738.640822] ? ksys_write+0x1a9/0x260 [ 738.641273] ? __ia32_sys_read+0xb0/0xb0 [ 738.641752] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 738.642378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 738.642983] do_syscall_64+0x33/0x40 [ 738.643422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 738.644021] RIP: 0033:0x7f748a34ab19 [ 738.644458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 738.646626] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 738.647518] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 738.648353] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 738.649191] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 738.650022] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 738.650865] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 738.651719] CPU: 1 PID: 6464 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 738.653322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.655262] Call Trace: [ 738.655877] dump_stack+0x107/0x167 [ 738.656724] should_fail.cold+0x5/0xa [ 738.657608] ? legacy_init_fs_context+0x44/0xe0 [ 738.658696] should_failslab+0x5/0x20 [ 738.659583] kmem_cache_alloc_trace+0x55/0x320 14:49:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4500, 0x4) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x100000000, 0x800) lseek(r3, 0x20, 0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x8}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000880)={r2, "ce6e765f732580663ee20319cf5555dd"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={r2, 0xfffffffffffffff8, 0x1, [0x80000000, 0x91, 0x1, 0xffff, 0x100000000000000], [0x6, 0x7f, 0x7, 0xc2b, 0x3a9, 0xfffffffffffffff7, 0x731, 0x5, 0x1, 0x20, 0xd901, 0x31f3ff6, 0x8000, 0x7, 0x6, 0x80000001, 0x8000, 0xfffffffffffffff7, 0x5, 0x1, 0x57a4, 0x200, 0x101, 0x87, 0x20, 0x100000000, 0x1, 0x80000001, 0x5, 0xfffffffffffff800, 0x28000000000000, 0x101, 0x8, 0x7fff, 0xd7fc, 0x0, 0x0, 0xd, 0x1, 0x25b, 0x8, 0x9, 0xd32f, 0x0, 0x5, 0x80, 0x5, 0x6, 0x81, 0xffff, 0x2, 0x5, 0xbff, 0x9, 0x2, 0x100000001, 0x116, 0x8, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x7fffffff, 0x3, 0x8, 0x14a, 0x0, 0x1ea, 0x7, 0x2, 0x6, 0x8, 0x4, 0x0, 0x80000000, 0x0, 0x6, 0x6, 0x1f, 0x8, 0x0, 0x6, 0x420, 0x1, 0x81, 0x5, 0xc3, 0x1, 0x5, 0x1, 0x27f, 0x2, 0x7, 0x4, 0x7, 0x9, 0x3, 0x400, 0x7f, 0x2, 0x3, 0x173d, 0x400, 0x1, 0x8, 0x401, 0x3cb4d94b, 0x7, 0x6, 0x29, 0x10001, 0x80, 0x1, 0x8, 0x1, 0xdb, 0x7, 0x21b6d2e8]}) [ 738.660647] ? lockdep_init_map_type+0x2c7/0x780 [ 738.661964] legacy_init_fs_context+0x44/0xe0 [ 738.663012] ? generic_parse_monolithic+0x1f0/0x1f0 [ 738.664163] alloc_fs_context+0x4fd/0x840 [ 738.665131] path_mount+0xab1/0x21e0 [ 738.666006] ? strncpy_from_user+0x9e/0x470 [ 738.667013] ? finish_automount+0xa90/0xa90 [ 738.668009] ? getname_flags.part.0+0x1dd/0x4f0 [ 738.669084] ? _copy_from_user+0xfb/0x1b0 [ 738.670048] __x64_sys_mount+0x282/0x300 [ 738.670995] ? copy_mnt_ns+0xa00/0xa00 [ 738.671895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 738.673110] ? syscall_enter_from_user_mode+0x1d/0x50 14:49:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 11) [ 738.674301] do_syscall_64+0x33/0x40 [ 738.675281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 738.676470] RIP: 0033:0x7f9de321cb19 [ 738.677329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 738.681575] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 738.683333] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 738.684983] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 738.686581] FAULT_INJECTION: forcing a failure. [ 738.686581] name failslab, interval 1, probability 0, space 0, times 0 [ 738.686623] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 738.689515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 738.691159] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 738.692816] CPU: 0 PID: 6470 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 738.693606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.694570] Call Trace: [ 738.694876] dump_stack+0x107/0x167 [ 738.695295] should_fail.cold+0x5/0xa [ 738.695738] ? create_object.isra.0+0x3a/0xa30 [ 738.696268] should_failslab+0x5/0x20 [ 738.696708] kmem_cache_alloc+0x5b/0x310 [ 738.697181] create_object.isra.0+0x3a/0xa30 [ 738.697687] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 738.698282] kmem_cache_alloc_trace+0x151/0x320 [ 738.698828] alloc_fs_context+0x57/0x840 [ 738.699295] path_mount+0xab1/0x21e0 [ 738.699723] ? strncpy_from_user+0x9e/0x470 [ 738.700221] ? finish_automount+0xa90/0xa90 [ 738.700714] ? getname_flags.part.0+0x1dd/0x4f0 [ 738.701253] ? _copy_from_user+0xfb/0x1b0 [ 738.701729] __x64_sys_mount+0x282/0x300 [ 738.702197] ? copy_mnt_ns+0xa00/0xa00 [ 738.702652] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 738.703250] ? syscall_enter_from_user_mode+0x1d/0x50 [ 738.703841] do_syscall_64+0x33/0x40 [ 738.704265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 738.704851] RIP: 0033:0x7f5ea7bffb19 [ 738.705273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 738.707365] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 738.708227] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 738.709042] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 738.709855] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 738.710669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 738.711478] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 [ 738.758129] audit: type=1400 audit(1768920555.311:35): avc: denied { relabelto } for pid=6472 comm="syz-executor.3" name="TCPv6" dev="sockfs" ino=22341 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unconfined_exec_t:s0 tclass=tcp_socket permissive=1 [ 754.308796] FAULT_INJECTION: forcing a failure. [ 754.308796] name failslab, interval 1, probability 0, space 0, times 0 [ 754.311270] CPU: 1 PID: 6481 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 754.312667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 754.314364] Call Trace: [ 754.314936] dump_stack+0x107/0x167 [ 754.315686] should_fail.cold+0x5/0xa [ 754.316494] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 754.317564] should_failslab+0x5/0x20 [ 754.318331] __kmalloc_node+0x76/0x420 [ 754.319123] ? lock_downgrade+0x6d0/0x6d0 [ 754.319948] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 754.320993] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 754.322010] ? trace_hardirqs_on+0x5b/0x180 [ 754.322911] kmem_cache_alloc_trace+0x169/0x320 [ 754.323871] alloc_fs_context+0x57/0x840 [ 754.324707] path_mount+0xab1/0x21e0 [ 754.325496] ? strncpy_from_user+0x9e/0x470 [ 754.326396] ? finish_automount+0xa90/0xa90 [ 754.327294] ? getname_flags.part.0+0x1dd/0x4f0 [ 754.328244] ? _copy_from_user+0xfb/0x1b0 [ 754.329098] __x64_sys_mount+0x282/0x300 [ 754.329927] ? copy_mnt_ns+0xa00/0xa00 [ 754.330732] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 754.331828] ? syscall_enter_from_user_mode+0x1d/0x50 [ 754.332875] do_syscall_64+0x33/0x40 [ 754.333626] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 754.334694] RIP: 0033:0x7f5ea7bffb19 [ 754.335449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 754.339199] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 754.340744] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 754.342204] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 14:49:30 executing program 7: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(0xffffffffffffffff, 0x1) 14:49:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 13) 14:49:30 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x1}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x58, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000000100001ea0000000000000000050019b500000000020004000000000000"], 0x24}}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x4e23, 0x3b, @dev={0xfe, 0x80, '\x00', 0x38}, 0x5a4c2b39}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xcc, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x8e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010025bd710000000000030000000500050000004b98bdcd7d209bc3dc695d2aa800072c359e3cb5db5c26b8f6440d0020fbb35351142c7d3355a2791220bec7465cbbd3a4c603f0e19e35a3300d3498ca3a5b520bf27ab8fd83f62ff074008501d03c58a80414819ce3"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r2, &(0x7f00000003c0)={0xffffffffffffffff, r3, 0x2}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x2) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000140)="1d", 0x1}], 0x1) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00', @ANYRES64, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0400bf00"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80c0) 14:49:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x808800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x61, 0x64, 0x63, 0x35, 0x66, 0x31, 0x63], 0x2d, [0x33, 0x61, 0x30, 0x30], 0x2d, [0x62, 0x37, 0x64, 0x64], 0x2d, [0x64, 0x39, 0x62], 0x2d, [0x31, 0x32, 0x32, 0x32, 0x65, 0x63, 0x35]}}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@dont_appraise}]}}) unlink(&(0x7f0000000200)='./file0\x00') 14:49:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:49:30 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:49:30 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 62) 14:49:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 12) [ 754.343926] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 754.345509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.346986] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 [ 754.351177] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 754.377765] FAULT_INJECTION: forcing a failure. [ 754.377765] name failslab, interval 1, probability 0, space 0, times 0 [ 754.380616] CPU: 0 PID: 6492 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 754.382209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 754.384143] Call Trace: [ 754.384780] dump_stack+0x107/0x167 [ 754.385659] should_fail.cold+0x5/0xa [ 754.386560] ? create_object.isra.0+0x3a/0xa30 [ 754.387621] should_failslab+0x5/0x20 [ 754.388548] kmem_cache_alloc+0x5b/0x310 [ 754.389499] create_object.isra.0+0x3a/0xa30 [ 754.390521] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 754.391724] kmem_cache_alloc_trace+0x151/0x320 [ 754.392891] ? lockdep_init_map_type+0x2c7/0x780 [ 754.394038] legacy_init_fs_context+0x44/0xe0 [ 754.395102] ? generic_parse_monolithic+0x1f0/0x1f0 [ 754.396318] alloc_fs_context+0x4fd/0x840 [ 754.397305] path_mount+0xab1/0x21e0 [ 754.398210] ? strncpy_from_user+0x9e/0x470 [ 754.399266] ? finish_automount+0xa90/0xa90 [ 754.400298] ? getname_flags.part.0+0x1dd/0x4f0 [ 754.401398] ? _copy_from_user+0xfb/0x1b0 [ 754.402402] __x64_sys_mount+0x282/0x300 [ 754.403412] ? copy_mnt_ns+0xa00/0xa00 [ 754.404349] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 754.405585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 754.406852] do_syscall_64+0x33/0x40 [ 754.407734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 754.409006] RIP: 0033:0x7f9de321cb19 [ 754.409881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 754.414331] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 754.416114] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 754.417849] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 754.419534] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 754.421222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.422953] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 14:49:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) [ 754.436801] FAULT_INJECTION: forcing a failure. [ 754.436801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.439670] CPU: 0 PID: 6494 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 754.441300] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 754.443224] Call Trace: [ 754.443848] dump_stack+0x107/0x167 [ 754.444694] should_fail.cold+0x5/0xa [ 754.445599] _copy_from_user+0x2e/0x1b0 [ 754.446533] io_copy_iov+0xbf/0x1c0 [ 754.447389] ? io_cancel_task_cb+0x80/0x80 [ 754.448413] ? kmalloc_order+0xfe/0x160 [ 754.449375] io_sqe_buffers_register+0x31d/0x880 [ 754.450478] ? io_sqd_handle_event+0x350/0x350 [ 754.451577] __do_sys_io_uring_register+0x1648/0x2fa0 [ 754.452776] ? io_recvmsg+0xd70/0xd70 [ 754.453669] ? fput_many+0x2f/0x1a0 [ 754.454509] ? ksys_write+0x1a9/0x260 [ 754.455428] ? __ia32_sys_read+0xb0/0xb0 [ 754.456388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 754.457618] ? syscall_enter_from_user_mode+0x1d/0x50 [ 754.458808] do_syscall_64+0x33/0x40 [ 754.459664] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 754.460846] RIP: 0033:0x7f748a34ab19 [ 754.461727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 754.466532] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 754.468315] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 754.469927] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 754.471602] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 14:49:30 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:49:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) [ 754.473386] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 754.475028] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 754.489120] 9pnet: Insufficient options for proto=fd [ 754.507464] 9pnet: Insufficient options for proto=fd [ 754.509114] SELinux: Context  is not valid (left unmapped). 14:49:31 executing program 7: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(0xffffffffffffffff, 0x1) 14:49:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 13) 14:49:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 14) 14:49:45 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 63) 14:49:45 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:49:45 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:49:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:49:45 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x1) 14:49:45 executing program 2: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x52, 0x2e}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8001}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1d68}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') [ 768.548114] FAULT_INJECTION: forcing a failure. [ 768.548114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.550925] CPU: 0 PID: 6514 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 768.552502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 768.554383] Call Trace: [ 768.555013] dump_stack+0x107/0x167 [ 768.555842] should_fail.cold+0x5/0xa [ 768.556740] _copy_from_user+0x2e/0x1b0 [ 768.557655] io_copy_iov+0xbf/0x1c0 [ 768.558483] ? io_cancel_task_cb+0x80/0x80 [ 768.559449] ? kmalloc_order+0xfe/0x160 [ 768.560364] io_sqe_buffers_register+0x31d/0x880 [ 768.561440] ? io_sqd_handle_event+0x350/0x350 [ 768.562526] __do_sys_io_uring_register+0x1648/0x2fa0 [ 768.563722] ? io_recvmsg+0xd70/0xd70 [ 768.564604] ? fput_many+0x2f/0x1a0 [ 768.565429] ? ksys_write+0x1a9/0x260 [ 768.566313] ? __ia32_sys_read+0xb0/0xb0 [ 768.567272] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 768.568485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 768.569684] do_syscall_64+0x33/0x40 [ 768.570548] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 768.571746] RIP: 0033:0x7f748a34ab19 [ 768.572604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 768.576850] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 768.578622] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 768.580239] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 768.581853] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 768.583512] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 768.585167] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 768.594332] FAULT_INJECTION: forcing a failure. [ 768.594332] name failslab, interval 1, probability 0, space 0, times 0 [ 768.597143] CPU: 1 PID: 6524 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 768.598731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 768.600304] FAULT_INJECTION: forcing a failure. [ 768.600304] name failslab, interval 1, probability 0, space 0, times 0 [ 768.600704] Call Trace: [ 768.600734] dump_stack+0x107/0x167 [ 768.600760] should_fail.cold+0x5/0xa [ 768.605641] ? legacy_init_fs_context+0x44/0xe0 [ 768.606716] should_failslab+0x5/0x20 [ 768.607662] kmem_cache_alloc_trace+0x55/0x320 [ 768.608721] ? lockdep_init_map_type+0x2c7/0x780 [ 768.609884] legacy_init_fs_context+0x44/0xe0 [ 768.610930] ? generic_parse_monolithic+0x1f0/0x1f0 [ 768.612067] alloc_fs_context+0x4fd/0x840 [ 768.613093] path_mount+0xab1/0x21e0 [ 768.613955] ? strncpy_from_user+0x9e/0x470 [ 768.615014] ? finish_automount+0xa90/0xa90 [ 768.616000] ? getname_flags.part.0+0x1dd/0x4f0 [ 768.617052] ? _copy_from_user+0xfb/0x1b0 [ 768.618075] __x64_sys_mount+0x282/0x300 [ 768.619037] ? copy_mnt_ns+0xa00/0xa00 [ 768.619945] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 768.621165] ? syscall_enter_from_user_mode+0x1d/0x50 [ 768.622437] do_syscall_64+0x33/0x40 [ 768.623300] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 768.624462] RIP: 0033:0x7f9de321cb19 [ 768.625371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 768.629685] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 768.631428] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 768.633119] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 768.634746] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 768.636438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 768.638050] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 768.639773] CPU: 0 PID: 6525 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 768.641331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 768.643211] Call Trace: [ 768.643815] dump_stack+0x107/0x167 [ 768.644645] should_fail.cold+0x5/0xa [ 768.645508] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 768.646700] should_failslab+0x5/0x20 [ 768.647565] __kmalloc_node+0x76/0x420 [ 768.648465] ? lock_downgrade+0x6d0/0x6d0 [ 768.649412] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 768.650567] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 768.651702] ? trace_hardirqs_on+0x5b/0x180 [ 768.652687] kmem_cache_alloc_trace+0x169/0x320 [ 768.653747] alloc_fs_context+0x57/0x840 [ 768.654686] path_mount+0xab1/0x21e0 [ 768.655539] ? strncpy_from_user+0x9e/0x470 [ 768.656516] ? finish_automount+0xa90/0xa90 [ 768.657496] ? getname_flags.part.0+0x1dd/0x4f0 [ 768.658546] ? _copy_from_user+0xfb/0x1b0 [ 768.659501] __x64_sys_mount+0x282/0x300 [ 768.660448] ? copy_mnt_ns+0xa00/0xa00 [ 768.661334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 768.662510] ? syscall_enter_from_user_mode+0x1d/0x50 [ 768.663685] do_syscall_64+0x33/0x40 [ 768.664529] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 768.665703] RIP: 0033:0x7f5ea7bffb19 [ 768.666539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 768.670709] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 768.672430] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 768.674040] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 768.675656] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 768.677266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 768.678882] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 14:49:45 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x1) 14:49:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:49:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) vmsplice(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)="c92f070fcbcf3de8af530f7deb57cc0f72c4767df94fe196756bb3c5ccefe4bcad57a1e5d90ba0d8162a75a32dd579121fbc48ff7e2c667118c9d4cebd9b75e4764a0281ffdcf53676052621750318c0d7c3199c345cf4d739d93b38678a4353d9e2aee2d222aae81fdb03ea237f11a8e393f6f8cc6b0c49713ef5f25b5fb2444d7c227440a8feaf07eff0f2276454c5b94fcab15bc0d933eb4ae8c2b8b563c19929201b5fc41bbdf38656b1deadd79f28219acaee77c4994d092cdca59234c23e7357a35f34fc7e762e733f328fab4d1771c05ffad22e8453b44edf3710744bdf1c5c2a1a4bf94bd66f01884cef", 0xee}, {&(0x7f0000000240)="c35fc3d137f870acb9a985fb1834143465f1e6e525863467ae1c945ed560fde86458ef0173592f7adb8cf0e67dea0b3889bdb9d0cd28579ef3f61857f31c9f944016c14140bd73", 0x47}, {&(0x7f0000000580)="f74b310121019b022f38b6298b4ba8825d83af94963f1f2a7dffdb1921f55cd697b059d631968467c462de9045539903e9e16e31fbf3f82848b91cf4b3d31ac67e3682bbd3a3318a68cd32ead30ee40811a4218bae437aaa83c7fb65483b617e2f6c7e7c3dfed57741d4cac8474b8073e4431341a856361560150b34a4cf18ce452eb0405352b7e3d8a8ae6e02b3de8e230cea5629cc48", 0x97}, {&(0x7f0000000380)="c3b399385d90d972c9ded4ad0f7e605a7cbb08c6a0be280635bc71ae01769ecc7faa4f2ee4d2a939615982349ed1d343b575f6d1577c83d82a422cbf7f529b4dde7baaa015ae75d4b5536c0205169b533408e78dfa6ff6666010e52de7b63bd3db3d7a5651e1342bd54ae4383884a58851b64f2f98679853be985b56a0d1348e07e3d193f0791e66dc9d5dc6472ef54c3dc3c87505d9c1ef7d6848f50d016113447506b0075fcfd9c52bdf5294dd01545af40bdd49bef353af94db8feb30089534a3039ce2b2c5ac190501f945fca960bc31dc4d6182f433853f54001771ab9dc9a2012086b9da6e87671b8b0418e883bf", 0xf1}, {&(0x7f0000000480)="d302f1c43f5924e748afaf44b5f8e040a8d0ea82bf2ea3a6eebdfb15f073ba88284fb83dc78f982378c0da2034afa653af6376de6af6569acf1dd663e83d9ed68496b157100082a4cf68c04b084fc2fffd3321160dec80a01722b2d04a5df1d81355e00580036bdec264106e82b85b9cdcd9a606daacf0018a12d187cd2713e9", 0x80}], 0x5, 0xb) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x1, 0x51688659, 0x7f, 0x8, 0xde1}) 14:49:45 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:49:45 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:49:45 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x1) 14:49:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 15) 14:49:45 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 64) [ 768.889940] FAULT_INJECTION: forcing a failure. [ 768.889940] name failslab, interval 1, probability 0, space 0, times 0 [ 768.892638] CPU: 0 PID: 6543 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 768.894184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 768.896058] Call Trace: [ 768.896659] dump_stack+0x107/0x167 [ 768.897486] should_fail.cold+0x5/0xa [ 768.898351] ? create_object.isra.0+0x3a/0xa30 [ 768.899389] should_failslab+0x5/0x20 [ 768.900251] kmem_cache_alloc+0x5b/0x310 [ 768.901169] ? cred_has_capability.isra.0+0x152/0x2b0 [ 768.902340] create_object.isra.0+0x3a/0xa30 [ 768.903344] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 768.904497] kmem_cache_alloc_trace+0x151/0x320 [ 768.905549] ? v9fs_write_inode+0x60/0x60 [ 768.906485] v9fs_mount+0x5a/0x8f0 [ 768.907298] ? v9fs_write_inode+0x60/0x60 [ 768.908232] legacy_get_tree+0x105/0x220 [ 768.909153] vfs_get_tree+0x8e/0x300 [ 768.909999] path_mount+0x1490/0x21e0 [ 768.910876] ? strncpy_from_user+0x9e/0x470 [ 768.911848] ? finish_automount+0xa90/0xa90 [ 768.912822] ? getname_flags.part.0+0x1dd/0x4f0 [ 768.913875] ? _copy_from_user+0xfb/0x1b0 [ 768.914827] __x64_sys_mount+0x282/0x300 [ 768.915743] ? copy_mnt_ns+0xa00/0xa00 [ 768.916630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 768.917813] ? syscall_enter_from_user_mode+0x1d/0x50 [ 768.918989] do_syscall_64+0x33/0x40 [ 768.919831] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 768.920989] RIP: 0033:0x7f9de321cb19 [ 768.921830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 768.925989] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 768.927719] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 768.929329] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 768.930953] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 768.932567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 768.934184] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 768.967500] FAULT_INJECTION: forcing a failure. [ 768.967500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.971610] CPU: 1 PID: 6545 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 768.973343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 768.975398] Call Trace: [ 768.976043] dump_stack+0x107/0x167 [ 768.976916] should_fail.cold+0x5/0xa [ 768.977933] _copy_from_user+0x2e/0x1b0 [ 768.978914] io_copy_iov+0xbf/0x1c0 [ 768.979787] ? io_cancel_task_cb+0x80/0x80 [ 768.980870] ? kmalloc_order+0xfe/0x160 [ 768.981861] io_sqe_buffers_register+0x31d/0x880 [ 768.983027] ? io_sqd_handle_event+0x350/0x350 [ 768.984216] __do_sys_io_uring_register+0x1648/0x2fa0 [ 768.985481] ? io_recvmsg+0xd70/0xd70 [ 768.986457] ? fput_many+0x2f/0x1a0 [ 768.987358] ? ksys_write+0x1a9/0x260 [ 768.988288] ? __ia32_sys_read+0xb0/0xb0 [ 768.989345] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 768.990635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 768.991967] do_syscall_64+0x33/0x40 [ 768.992888] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 768.994191] RIP: 0033:0x7f748a34ab19 [ 768.995114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 768.999681] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 769.001538] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 769.003346] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 769.005076] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 769.006871] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 769.008672] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:49:58 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x1) 14:49:58 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:49:58 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:49:58 executing program 1: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) 14:49:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x8050) r3 = signalfd4(r0, &(0x7f0000000100)={[0x3]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, r6, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000002c0)={@local, 0x0}, &(0x7f0000000300)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @multicast2, @dev}, &(0x7f0000000380)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f00000004c0)=0xe8) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000500}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x98, r6, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24044000}, 0x81) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') 14:49:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 16) 14:49:59 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 65) 14:49:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 14) [ 782.464891] 9pnet: Insufficient options for proto=fd [ 782.465187] FAULT_INJECTION: forcing a failure. [ 782.465187] name failslab, interval 1, probability 0, space 0, times 0 [ 782.468206] CPU: 0 PID: 6557 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 782.469742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 782.471620] Call Trace: [ 782.472216] dump_stack+0x107/0x167 [ 782.473033] should_fail.cold+0x5/0xa [ 782.473891] ? v9fs_mount+0x5a/0x8f0 [ 782.474725] should_failslab+0x5/0x20 [ 782.475590] kmem_cache_alloc_trace+0x55/0x320 [ 782.476618] ? v9fs_write_inode+0x60/0x60 [ 782.477543] v9fs_mount+0x5a/0x8f0 [ 782.478339] ? v9fs_write_inode+0x60/0x60 [ 782.479277] legacy_get_tree+0x105/0x220 [ 782.480192] vfs_get_tree+0x8e/0x300 [ 782.481026] path_mount+0x1490/0x21e0 [ 782.481886] ? strncpy_from_user+0x9e/0x470 [ 782.482856] ? finish_automount+0xa90/0xa90 [ 782.483829] ? getname_flags.part.0+0x1dd/0x4f0 [ 782.484873] ? _copy_from_user+0xfb/0x1b0 [ 782.485812] __x64_sys_mount+0x282/0x300 14:49:59 executing program 1: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) [ 782.486722] ? copy_mnt_ns+0xa00/0xa00 [ 782.487721] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 782.488898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 782.490055] do_syscall_64+0x33/0x40 [ 782.490906] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 782.492073] RIP: 0033:0x7f9de321cb19 14:49:59 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 782.492915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 782.497072] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 782.498781] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 782.500376] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 782.501973] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 782.503570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 782.505171] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 782.516210] 9pnet: Insufficient options for proto=fd [ 782.532954] FAULT_INJECTION: forcing a failure. [ 782.532954] name failslab, interval 1, probability 0, space 0, times 0 [ 782.535562] CPU: 0 PID: 6569 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 782.537095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 782.538980] Call Trace: [ 782.539583] dump_stack+0x107/0x167 14:49:59 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 782.540409] should_fail.cold+0x5/0xa [ 782.541402] ? legacy_init_fs_context+0x44/0xe0 [ 782.542449] should_failslab+0x5/0x20 [ 782.543322] kmem_cache_alloc_trace+0x55/0x320 [ 782.544358] ? lockdep_init_map_type+0x2c7/0x780 [ 782.545429] legacy_init_fs_context+0x44/0xe0 [ 782.546423] ? generic_parse_monolithic+0x1f0/0x1f0 [ 782.547559] alloc_fs_context+0x4fd/0x840 [ 782.548503] path_mount+0xab1/0x21e0 [ 782.549348] ? strncpy_from_user+0x9e/0x470 [ 782.550316] ? finish_automount+0xa90/0xa90 [ 782.551300] ? getname_flags.part.0+0x1dd/0x4f0 [ 782.552344] ? _copy_from_user+0xfb/0x1b0 [ 782.553289] __x64_sys_mount+0x282/0x300 [ 782.554216] ? copy_mnt_ns+0xa00/0xa00 [ 782.555112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 782.556289] ? syscall_enter_from_user_mode+0x1d/0x50 [ 782.557447] do_syscall_64+0x33/0x40 [ 782.558293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 782.559456] RIP: 0033:0x7f5ea7bffb19 [ 782.560291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 782.564435] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 782.566148] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 782.567755] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 782.569365] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 782.570975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 782.572576] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 14:49:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') getpeername$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) [ 782.575537] FAULT_INJECTION: forcing a failure. [ 782.575537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.578259] CPU: 0 PID: 6564 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 782.579796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 14:49:59 executing program 1: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) [ 782.581662] Call Trace: [ 782.582345] dump_stack+0x107/0x167 [ 782.583187] should_fail.cold+0x5/0xa [ 782.584052] _copy_from_user+0x2e/0x1b0 [ 782.584958] io_copy_iov+0xbf/0x1c0 [ 782.585781] ? io_cancel_task_cb+0x80/0x80 [ 782.586742] ? kmalloc_order+0xfe/0x160 [ 782.587663] io_sqe_buffers_register+0x31d/0x880 14:49:59 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 782.588753] ? io_sqd_handle_event+0x350/0x350 [ 782.589851] __do_sys_io_uring_register+0x1648/0x2fa0 [ 782.591047] ? io_recvmsg+0xd70/0xd70 [ 782.591919] ? fput_many+0x2f/0x1a0 [ 782.592747] ? ksys_write+0x1a9/0x260 [ 782.593593] ? __ia32_sys_read+0xb0/0xb0 [ 782.594519] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 782.595710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 782.596888] do_syscall_64+0x33/0x40 [ 782.597730] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 782.598891] RIP: 0033:0x7f748a34ab19 [ 782.599735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 782.603904] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 782.605626] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 782.607252] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 782.608866] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 782.610468] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 782.612091] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:49:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x1) 14:49:59 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 17) 14:50:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000080)='./file0\x00') 14:50:12 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:12 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 66) 14:50:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 15) 14:50:12 executing program 5: socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:12 executing program 1: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:50:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x1) [ 795.782925] FAULT_INJECTION: forcing a failure. [ 795.782925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.784550] CPU: 0 PID: 6594 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 795.785436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 795.786522] Call Trace: [ 795.786903] dump_stack+0x107/0x167 [ 795.787406] should_fail.cold+0x5/0xa [ 795.787922] _copy_from_user+0x2e/0x1b0 [ 795.788461] io_copy_iov+0xbf/0x1c0 [ 795.788939] ? io_cancel_task_cb+0x80/0x80 [ 795.789500] ? kmalloc_order+0xfe/0x160 [ 795.790043] io_sqe_buffers_register+0x31d/0x880 [ 795.790680] ? io_sqd_handle_event+0x350/0x350 [ 795.791324] __do_sys_io_uring_register+0x1648/0x2fa0 [ 795.792033] ? io_recvmsg+0xd70/0xd70 [ 795.792550] ? fput_many+0x2f/0x1a0 [ 795.793039] ? ksys_write+0x1a9/0x260 [ 795.793550] ? __ia32_sys_read+0xb0/0xb0 [ 795.794104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 795.794811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 795.796078] do_syscall_64+0x33/0x40 [ 795.797033] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 795.798317] RIP: 0033:0x7f748a34ab19 [ 795.799282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 795.803402] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 795.805107] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 795.805623] FAULT_INJECTION: forcing a failure. [ 795.805623] name failslab, interval 1, probability 0, space 0, times 0 [ 795.806698] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 795.806710] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 795.806723] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 795.812740] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 795.814354] CPU: 1 PID: 6603 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 795.815141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 795.816085] Call Trace: [ 795.816383] dump_stack+0x107/0x167 [ 795.816805] should_fail.cold+0x5/0xa [ 795.817245] ? create_object.isra.0+0x3a/0xa30 [ 795.817766] should_failslab+0x5/0x20 [ 795.818180] kmem_cache_alloc+0x5b/0x310 [ 795.818652] create_object.isra.0+0x3a/0xa30 [ 795.819147] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 795.819738] __kmalloc_track_caller+0x177/0x370 [ 795.820239] ? v9fs_session_init+0xa7/0x1680 [ 795.820747] ? kernel_text_address+0xf2/0x120 [ 795.821272] kstrdup+0x36/0x70 [ 795.821643] v9fs_session_init+0xa7/0x1680 [ 795.822129] ? lock_release+0x680/0x680 [ 795.822557] ? find_held_lock+0x2c/0x110 [ 795.823036] ? kmem_cache_alloc_trace+0x151/0x320 [ 795.823594] ? v9fs_show_options+0x690/0x690 [ 795.824114] ? trace_hardirqs_on+0x5b/0x180 [ 795.824609] ? kasan_unpoison_shadow+0x33/0x50 [ 795.825133] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 795.825718] v9fs_mount+0x79/0x8f0 [ 795.826102] ? v9fs_write_inode+0x60/0x60 [ 795.826550] legacy_get_tree+0x105/0x220 [ 795.826999] vfs_get_tree+0x8e/0x300 [ 795.827426] path_mount+0x1490/0x21e0 [ 795.827842] ? strncpy_from_user+0x9e/0x470 [ 795.828311] ? finish_automount+0xa90/0xa90 [ 795.828794] ? getname_flags.part.0+0x1dd/0x4f0 [ 795.829329] ? _copy_from_user+0xfb/0x1b0 [ 795.829869] __x64_sys_mount+0x282/0x300 [ 795.830309] ? copy_mnt_ns+0xa00/0xa00 [ 795.830731] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 795.831337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 795.831936] do_syscall_64+0x33/0x40 [ 795.832362] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 795.832951] RIP: 0033:0x7f9de321cb19 [ 795.833376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 795.835495] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 795.836377] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 795.837192] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 795.838003] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 795.838818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 795.839638] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 795.843011] 9pnet: Insufficient options for proto=fd [ 795.843290] FAULT_INJECTION: forcing a failure. [ 795.843290] name failslab, interval 1, probability 0, space 0, times 0 [ 795.846189] CPU: 0 PID: 6596 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 795.847741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 795.849607] Call Trace: [ 795.850197] dump_stack+0x107/0x167 [ 795.851026] should_fail.cold+0x5/0xa [ 795.851902] ? create_object.isra.0+0x3a/0xa30 [ 795.852939] should_failslab+0x5/0x20 [ 795.853792] kmem_cache_alloc+0x5b/0x310 [ 795.854709] create_object.isra.0+0x3a/0xa30 [ 795.855710] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 795.856860] kmem_cache_alloc_trace+0x151/0x320 [ 795.857906] ? lockdep_init_map_type+0x2c7/0x780 [ 795.858978] legacy_init_fs_context+0x44/0xe0 [ 795.860002] ? generic_parse_monolithic+0x1f0/0x1f0 [ 795.861111] alloc_fs_context+0x4fd/0x840 [ 795.862052] path_mount+0xab1/0x21e0 [ 795.862893] ? strncpy_from_user+0x9e/0x470 [ 795.863873] ? finish_automount+0xa90/0xa90 [ 795.864842] ? getname_flags.part.0+0x1dd/0x4f0 [ 795.865891] ? _copy_from_user+0xfb/0x1b0 [ 795.866826] __x64_sys_mount+0x282/0x300 [ 795.867749] ? copy_mnt_ns+0xa00/0xa00 [ 795.868630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 795.869809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 795.870972] do_syscall_64+0x33/0x40 [ 795.871817] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 795.872977] RIP: 0033:0x7f5ea7bffb19 [ 795.873812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 795.877935] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 795.879644] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 795.880919] 9pnet: Insufficient options for proto=fd [ 795.881243] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 795.883419] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 795.885020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 795.886624] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 14:50:12 executing program 1: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:50:12 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 67) 14:50:12 executing program 5: socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 795.927628] FAULT_INJECTION: forcing a failure. [ 795.927628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.928988] CPU: 1 PID: 6609 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 795.929766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 795.930709] Call Trace: [ 795.931030] dump_stack+0x107/0x167 [ 795.931447] should_fail.cold+0x5/0xa [ 795.931895] _copy_from_user+0x2e/0x1b0 [ 795.932352] io_copy_iov+0xbf/0x1c0 [ 795.932766] ? io_cancel_task_cb+0x80/0x80 [ 795.933244] ? kmalloc_order+0xfe/0x160 [ 795.933732] io_sqe_buffers_register+0x31d/0x880 [ 795.934278] ? io_sqd_handle_event+0x350/0x350 [ 795.934812] __do_sys_io_uring_register+0x1648/0x2fa0 [ 795.935428] ? io_recvmsg+0xd70/0xd70 [ 795.935866] ? fput_many+0x2f/0x1a0 [ 795.936277] ? ksys_write+0x1a9/0x260 [ 795.936710] ? __ia32_sys_read+0xb0/0xb0 [ 795.937180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 795.937783] ? syscall_enter_from_user_mode+0x1d/0x50 [ 795.938380] do_syscall_64+0x33/0x40 [ 795.938807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 795.939403] RIP: 0033:0x7f748a34ab19 [ 795.939828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 795.941930] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 795.942800] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 795.943618] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 795.944430] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 795.945243] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 795.946056] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:50:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x1) 14:50:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = dup2(r0, r0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x140, 0x10) 14:50:12 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 18) 14:50:12 executing program 1: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) [ 795.988481] 9pnet: Insufficient options for proto=fd 14:50:12 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 68) 14:50:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 16) 14:50:12 executing program 5: socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) [ 796.040686] FAULT_INJECTION: forcing a failure. [ 796.040686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.042060] CPU: 1 PID: 6619 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 796.042844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 796.043802] Call Trace: [ 796.044111] dump_stack+0x107/0x167 [ 796.044525] should_fail.cold+0x5/0xa [ 796.044971] _copy_from_user+0x2e/0x1b0 [ 796.045422] io_copy_iov+0xbf/0x1c0 [ 796.045837] ? io_cancel_task_cb+0x80/0x80 [ 796.046322] ? kmalloc_order+0xfe/0x160 [ 796.046781] io_sqe_buffers_register+0x31d/0x880 [ 796.047331] ? io_sqd_handle_event+0x350/0x350 [ 796.047877] __do_sys_io_uring_register+0x1648/0x2fa0 [ 796.048466] ? io_recvmsg+0xd70/0xd70 [ 796.048903] ? fput_many+0x2f/0x1a0 [ 796.049313] ? ksys_write+0x1a9/0x260 [ 796.049747] ? __ia32_sys_read+0xb0/0xb0 [ 796.050218] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 796.050818] ? syscall_enter_from_user_mode+0x1d/0x50 [ 796.051416] do_syscall_64+0x33/0x40 [ 796.051842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 796.052387] FAULT_INJECTION: forcing a failure. [ 796.052387] name failslab, interval 1, probability 0, space 0, times 0 [ 796.052429] RIP: 0033:0x7f748a34ab19 [ 796.052449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 796.057285] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 796.058152] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 796.058965] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 796.059793] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 796.060605] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 796.061417] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 796.062250] CPU: 0 PID: 6624 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 796.063701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 796.065430] Call Trace: [ 796.065989] dump_stack+0x107/0x167 [ 796.066755] should_fail.cold+0x5/0xa [ 796.067573] should_failslab+0x5/0x20 [ 796.068383] __kmalloc_track_caller+0x79/0x370 [ 796.069353] ? v9fs_session_init+0xe9/0x1680 [ 796.070274] ? kernel_text_address+0xf2/0x120 [ 796.071223] kstrdup+0x36/0x70 [ 796.071901] v9fs_session_init+0xe9/0x1680 [ 796.072791] ? lock_release+0x680/0x680 [ 796.073630] ? find_held_lock+0x2c/0x110 [ 796.074504] ? kmem_cache_alloc_trace+0x151/0x320 [ 796.075536] ? v9fs_show_options+0x690/0x690 [ 796.076475] ? trace_hardirqs_on+0x5b/0x180 [ 796.077382] ? kasan_unpoison_shadow+0x33/0x50 [ 796.078340] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 796.079413] v9fs_mount+0x79/0x8f0 [ 796.080164] ? v9fs_write_inode+0x60/0x60 [ 796.081043] legacy_get_tree+0x105/0x220 [ 796.081910] vfs_get_tree+0x8e/0x300 [ 796.082688] path_mount+0x1490/0x21e0 [ 796.083501] ? strncpy_from_user+0x9e/0x470 [ 796.084407] ? finish_automount+0xa90/0xa90 [ 796.085315] ? getname_flags.part.0+0x1dd/0x4f0 [ 796.086319] ? _copy_from_user+0xfb/0x1b0 [ 796.087205] __x64_sys_mount+0x282/0x300 [ 796.087261] 9pnet: Insufficient options for proto=fd [ 796.088069] ? copy_mnt_ns+0xa00/0xa00 [ 796.088093] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 796.088117] ? syscall_enter_from_user_mode+0x1d/0x50 [ 796.091641] do_syscall_64+0x33/0x40 [ 796.092418] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 796.093497] RIP: 0033:0x7f9de321cb19 [ 796.094283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 796.098164] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 796.099766] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 796.101275] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 796.102772] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 796.104286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 796.105799] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 796.130047] FAULT_INJECTION: forcing a failure. [ 796.130047] name failslab, interval 1, probability 0, space 0, times 0 [ 796.131413] CPU: 1 PID: 6631 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 796.132162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 796.133106] Call Trace: [ 796.133412] dump_stack+0x107/0x167 [ 796.133827] should_fail.cold+0x5/0xa [ 796.134275] ? create_object.isra.0+0x3a/0xa30 [ 796.134796] should_failslab+0x5/0x20 [ 796.135243] kmem_cache_alloc+0x5b/0x310 [ 796.135691] create_object.isra.0+0x3a/0xa30 [ 796.136198] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 796.136767] kmem_cache_alloc_trace+0x151/0x320 [ 796.137299] ? lockdep_init_map_type+0x2c7/0x780 [ 796.137816] legacy_init_fs_context+0x44/0xe0 [ 796.138313] ? generic_parse_monolithic+0x1f0/0x1f0 [ 796.138869] alloc_fs_context+0x4fd/0x840 [ 796.139360] path_mount+0xab1/0x21e0 [ 796.139770] ? strncpy_from_user+0x9e/0x470 [ 796.140260] ? finish_automount+0xa90/0xa90 [ 796.140755] ? getname_flags.part.0+0x1dd/0x4f0 [ 796.141291] ? _copy_from_user+0xfb/0x1b0 [ 796.141769] __x64_sys_mount+0x282/0x300 [ 796.142234] ? copy_mnt_ns+0xa00/0xa00 [ 796.142681] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 796.143270] ? syscall_enter_from_user_mode+0x1d/0x50 [ 796.143858] do_syscall_64+0x33/0x40 [ 796.144263] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 796.144849] RIP: 0033:0x7f5ea7bffb19 [ 796.145257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 796.147359] RSP: 002b:00007f5ea5154188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 796.148230] RAX: ffffffffffffffda RBX: 00007f5ea7d13020 RCX: 00007f5ea7bffb19 [ 796.149041] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 796.149854] RBP: 00007f5ea51541d0 R08: 00000000200000c0 R09: 0000000000000000 [ 796.150672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 796.151463] R13: 00007ffde1fdb17f R14: 00007f5ea5154300 R15: 0000000000022000 [ 796.177883] 9pnet: Insufficient options for proto=fd 14:50:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 17) 14:50:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x1) 14:50:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 19) 14:50:26 executing program 2: ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x9e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102020000ff2505a1a440000102030109023f00020101100e3e1fe80001020d00000824060001b25cb205240096000d240f0108000000020000100806241a07000c052415ff030724140700001010240740220006000000020006000400052415018007240a0181037c05241504000905810310000321010904010000020d000009040101020081010309050302400000080014170d3bb74ee48b14de1191bea281d84079add08cb73410e14db57902381c97e9e3b6fb0fd5fbd82bd9f8a7ef850bd0ed004436b2affdf94779dcce8e6e9e8ac4cef81c39c0612850fb001cc00fe3168e2ea2977e0459d6bc948e079dc6607f8afed50047d42051f66ef5ffe1c55c138fff53ffc4f840c31d30d6260097866ff3690652422a"], &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x0, 0x1, 0x4, 0x8, 0x4}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2c09}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x53f7a2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat(r0, &(0x7f00000002c0)='./file0\x00', 0x103000, 0x0) getpeername(r1, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000004c0)=0x80) r3 = accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x80000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000100)=0x210, 0x4) unlink(&(0x7f0000000200)='./file0\x00') 14:50:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:50:26 executing program 5: openat$sysfs(0xffffffffffffff9c, 0x0, 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:26 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:26 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 69) [ 809.794263] FAULT_INJECTION: forcing a failure. [ 809.794263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.795243] 9pnet: Insufficient options for proto=fd [ 809.795894] CPU: 1 PID: 6641 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 809.798024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 809.799166] Call Trace: [ 809.799543] dump_stack+0x107/0x167 [ 809.800049] should_fail.cold+0x5/0xa [ 809.800582] _copy_from_user+0x2e/0x1b0 [ 809.801133] io_copy_iov+0xbf/0x1c0 [ 809.801619] ? io_cancel_task_cb+0x80/0x80 [ 809.802205] ? kmalloc_order+0xfe/0x160 [ 809.802737] io_sqe_buffers_register+0x31d/0x880 [ 809.803379] ? io_sqd_handle_event+0x350/0x350 [ 809.804000] __do_sys_io_uring_register+0x1648/0x2fa0 [ 809.804703] ? io_recvmsg+0xd70/0xd70 [ 809.805216] ? fput_many+0x2f/0x1a0 [ 809.805703] ? ksys_write+0x1a9/0x260 [ 809.806219] ? __ia32_sys_read+0xb0/0xb0 [ 809.806767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 809.807473] ? syscall_enter_from_user_mode+0x1d/0x50 [ 809.808171] do_syscall_64+0x33/0x40 [ 809.808668] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 809.809364] RIP: 0033:0x7f748a34ab19 [ 809.809858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 809.812327] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 809.813337] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 809.814285] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 809.815239] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 809.816184] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 809.817128] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 809.823783] FAULT_INJECTION: forcing a failure. [ 809.823783] name failslab, interval 1, probability 0, space 0, times 0 [ 809.825313] CPU: 1 PID: 6649 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 809.826214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 809.827344] Call Trace: [ 809.827698] dump_stack+0x107/0x167 [ 809.828188] should_fail.cold+0x5/0xa [ 809.828423] FAULT_INJECTION: forcing a failure. [ 809.828423] name failslab, interval 1, probability 0, space 0, times 0 [ 809.828692] ? create_object.isra.0+0x3a/0xa30 [ 809.828704] should_failslab+0x5/0x20 [ 809.828716] kmem_cache_alloc+0x5b/0x310 [ 809.828735] create_object.isra.0+0x3a/0xa30 [ 809.833436] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 809.834110] __kmalloc_track_caller+0x177/0x370 [ 809.834744] ? v9fs_session_init+0xa7/0x1680 [ 809.835344] ? kernel_text_address+0xf2/0x120 [ 809.835952] kstrdup+0x36/0x70 [ 809.836378] v9fs_session_init+0xa7/0x1680 [ 809.836941] ? lock_release+0x680/0x680 [ 809.837488] ? find_held_lock+0x2c/0x110 [ 809.838049] ? kmem_cache_alloc_trace+0x151/0x320 [ 809.838712] ? v9fs_show_options+0x690/0x690 [ 809.839336] ? trace_hardirqs_on+0x5b/0x180 [ 809.839909] ? kasan_unpoison_shadow+0x33/0x50 [ 809.840536] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 809.841234] v9fs_mount+0x79/0x8f0 [ 809.841721] ? v9fs_write_inode+0x60/0x60 [ 809.842276] legacy_get_tree+0x105/0x220 [ 809.842816] vfs_get_tree+0x8e/0x300 [ 809.843313] path_mount+0x1490/0x21e0 [ 809.843837] ? strncpy_from_user+0x9e/0x470 [ 809.844410] ? finish_automount+0xa90/0xa90 [ 809.844983] ? getname_flags.part.0+0x1dd/0x4f0 [ 809.845604] ? _copy_from_user+0xfb/0x1b0 [ 809.846159] __x64_sys_mount+0x282/0x300 [ 809.846716] ? copy_mnt_ns+0xa00/0xa00 [ 809.847255] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 809.847945] ? syscall_enter_from_user_mode+0x1d/0x50 [ 809.848633] do_syscall_64+0x33/0x40 [ 809.849129] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 809.849807] RIP: 0033:0x7f9de321cb19 [ 809.850295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 809.852703] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 809.853717] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 809.854657] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 809.855597] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 809.856545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 809.857515] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 809.858524] CPU: 0 PID: 6648 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 809.860132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 809.862060] Call Trace: [ 809.862674] dump_stack+0x107/0x167 [ 809.863535] should_fail.cold+0x5/0xa [ 809.864423] ? create_object.isra.0+0x3a/0xa30 [ 809.865484] should_failslab+0x5/0x20 [ 809.866374] kmem_cache_alloc+0x5b/0x310 [ 809.867334] ? cred_has_capability.isra.0+0x152/0x2b0 [ 809.868541] create_object.isra.0+0x3a/0xa30 [ 809.869565] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 809.870755] kmem_cache_alloc_trace+0x151/0x320 [ 809.871849] ? v9fs_write_inode+0x60/0x60 [ 809.872793] v9fs_mount+0x5a/0x8f0 [ 809.873628] ? v9fs_write_inode+0x60/0x60 [ 809.874588] legacy_get_tree+0x105/0x220 [ 809.875528] vfs_get_tree+0x8e/0x300 [ 809.876381] path_mount+0x1490/0x21e0 [ 809.877277] ? strncpy_from_user+0x9e/0x470 [ 809.878282] ? finish_automount+0xa90/0xa90 [ 809.879297] ? getname_flags.part.0+0x1dd/0x4f0 [ 809.880383] ? _copy_from_user+0xfb/0x1b0 [ 809.881340] __x64_sys_mount+0x282/0x300 [ 809.882261] ? copy_mnt_ns+0xa00/0xa00 [ 809.883172] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 809.884379] ? syscall_enter_from_user_mode+0x1d/0x50 [ 809.885562] do_syscall_64+0x33/0x40 [ 809.886410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 809.887583] RIP: 0033:0x7f5ea7bffb19 [ 809.888432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 809.892632] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 809.894358] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 809.896003] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 809.897640] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 809.899278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 809.900908] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 [ 823.213094] FAULT_INJECTION: forcing a failure. [ 823.213094] name failslab, interval 1, probability 0, space 0, times 0 [ 823.214811] CPU: 1 PID: 6659 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 823.216188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 823.217594] Call Trace: [ 823.218002] dump_stack+0x107/0x167 [ 823.218566] should_fail.cold+0x5/0xa [ 823.219151] should_failslab+0x5/0x20 [ 823.219743] __kmalloc_track_caller+0x79/0x370 [ 823.220438] ? v9fs_session_init+0xe9/0x1680 [ 823.220521] FAULT_INJECTION: forcing a failure. [ 823.220521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.221107] ? kernel_text_address+0xf2/0x120 [ 823.221128] kstrdup+0x36/0x70 [ 823.224921] v9fs_session_init+0xe9/0x1680 [ 823.225573] ? lock_release+0x680/0x680 [ 823.226183] ? find_held_lock+0x2c/0x110 [ 823.226811] ? kmem_cache_alloc_trace+0x151/0x320 [ 823.227553] ? v9fs_show_options+0x690/0x690 [ 823.228227] ? trace_hardirqs_on+0x5b/0x180 [ 823.228882] ? kasan_unpoison_shadow+0x33/0x50 [ 823.229577] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 823.230347] v9fs_mount+0x79/0x8f0 [ 823.230887] ? v9fs_write_inode+0x60/0x60 [ 823.231561] legacy_get_tree+0x105/0x220 [ 823.232288] vfs_get_tree+0x8e/0x300 [ 823.232963] path_mount+0x1490/0x21e0 [ 823.233660] ? strncpy_from_user+0x9e/0x470 [ 823.234342] ? finish_automount+0xa90/0xa90 [ 823.234998] ? getname_flags.part.0+0x1dd/0x4f0 [ 823.235718] ? _copy_from_user+0xfb/0x1b0 [ 823.236357] __x64_sys_mount+0x282/0x300 [ 823.236980] ? copy_mnt_ns+0xa00/0xa00 [ 823.237582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 823.238386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 823.239178] do_syscall_64+0x33/0x40 [ 823.239757] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 823.240541] RIP: 0033:0x7f5ea7bffb19 [ 823.241112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 823.243924] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 823.245090] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 823.246179] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 823.247262] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 823.248382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 823.249493] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 [ 823.250642] CPU: 0 PID: 6657 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 823.252221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 823.254098] Call Trace: [ 823.254711] dump_stack+0x107/0x167 [ 823.255559] should_fail.cold+0x5/0xa [ 823.255658] 9pnet: Insufficient options for proto=fd [ 823.256438] _copy_from_user+0x2e/0x1b0 [ 823.256462] io_copy_iov+0xbf/0x1c0 [ 823.258952] ? io_cancel_task_cb+0x80/0x80 [ 823.259953] ? kmalloc_order+0xfe/0x160 [ 823.260876] io_sqe_buffers_register+0x31d/0x880 [ 823.261969] ? io_sqd_handle_event+0x350/0x350 [ 823.263045] __do_sys_io_uring_register+0x1648/0x2fa0 [ 823.264246] ? io_recvmsg+0xd70/0xd70 [ 823.265120] ? fput_many+0x2f/0x1a0 [ 823.265953] ? ksys_write+0x1a9/0x260 [ 823.266827] ? __ia32_sys_read+0xb0/0xb0 [ 823.267777] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 823.268981] ? syscall_enter_from_user_mode+0x1d/0x50 [ 823.270170] do_syscall_64+0x33/0x40 [ 823.271028] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 823.272211] RIP: 0033:0x7f748a34ab19 [ 823.273067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 823.277250] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 823.278985] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 823.280604] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 823.282212] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 823.283825] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 823.285434] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:50:39 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 70) 14:50:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) [ 823.305957] FAULT_INJECTION: forcing a failure. [ 823.305957] name failslab, interval 1, probability 0, space 0, times 0 [ 823.308572] CPU: 0 PID: 6671 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 823.310119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 823.311996] Call Trace: [ 823.312607] dump_stack+0x107/0x167 [ 823.313443] should_fail.cold+0x5/0xa [ 823.314313] should_failslab+0x5/0x20 [ 823.315181] __kmalloc_track_caller+0x79/0x370 [ 823.316254] ? v9fs_session_init+0xe9/0x1680 [ 823.317254] ? kernel_text_address+0xf2/0x120 [ 823.318279] kstrdup+0x36/0x70 [ 823.319010] v9fs_session_init+0xe9/0x1680 [ 823.319985] ? lock_release+0x680/0x680 [ 823.320877] ? find_held_lock+0x2c/0x110 [ 823.321799] ? kmem_cache_alloc_trace+0x151/0x320 [ 823.322881] ? v9fs_show_options+0x690/0x690 [ 823.323891] ? trace_hardirqs_on+0x5b/0x180 [ 823.324866] ? kasan_unpoison_shadow+0x33/0x50 [ 823.325895] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 823.327039] v9fs_mount+0x79/0x8f0 [ 823.327859] ? v9fs_write_inode+0x60/0x60 [ 823.328795] legacy_get_tree+0x105/0x220 [ 823.329714] vfs_get_tree+0x8e/0x300 [ 823.330554] path_mount+0x1490/0x21e0 [ 823.331427] ? strncpy_from_user+0x9e/0x470 [ 823.332397] ? finish_automount+0xa90/0xa90 [ 823.333369] ? getname_flags.part.0+0x1dd/0x4f0 [ 823.334419] ? _copy_from_user+0xfb/0x1b0 [ 823.335377] __x64_sys_mount+0x282/0x300 [ 823.336291] ? copy_mnt_ns+0xa00/0xa00 [ 823.337174] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 823.338352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 823.339522] do_syscall_64+0x33/0x40 [ 823.340362] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 823.341511] RIP: 0033:0x7f9de321cb19 [ 823.342348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 823.346457] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 823.348170] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 823.349772] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 823.351383] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 823.352972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 823.354558] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 r1 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000000100)="aca14e7b46f365a73a0fbaf301d690f5036842b577f53293aa68db55d154fdb93c07eb5558d54a09ac332408d7f5df3bd9fc3b301a5bcb8320a75ee933ab3334be28f36cae9927b11005c079c06747a411676d9ed6c64c20e8fdeaad19999d", 0x5f, 0x8}, {&(0x7f00000022c0)="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", 0x1002, 0x14}, {&(0x7f0000001240)="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", 0x1000, 0x80000000}], 0x820000, &(0x7f0000002240)={[{']:])'}, {'\x00'}, {'\x00'}, {',,(\''}, {'\x00'}], [{@audit}]}) openat(r1, &(0x7f0000002280)='./file0\x00', 0xa003, 0x22) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x70, 0x0, 0xb86a}) unlink(&(0x7f0000000200)='./file0\x00') 14:50:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 18) 14:50:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x7}}], [{@smackfsdef}]}}) 14:50:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 20) 14:50:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x1) 14:50:39 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:39 executing program 5: openat$sysfs(0xffffffffffffff9c, 0x0, 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}], [{@smackfsdef}]}}) 14:50:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) ftruncate(r0, 0x1) 14:50:39 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:39 executing program 5: openat$sysfs(0xffffffffffffff9c, 0x0, 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:39 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 71) 14:50:39 executing program 2: r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="c7dbed542b49bcb0bbf5129db84425523b8d0521fc1c89895993e0faeb093465966eacb0f4eb1ce6a4d516077eef91663279e64e58f2ddaa0f4d0e10d4a85ff31d4c3bf67986d0539093b1b7a4edf606b4fc0e72ca9b0e", @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESHEX=r0]) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') fsetxattr$security_evm(r0, &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "9eb2bdae71b8fc364255ce9424d5144b"}, 0x11, 0x4) syz_io_uring_setup(0x5b47, &(0x7f0000000100)={0x0, 0xecf8, 0x20, 0x1, 0x2ba}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000180), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 14:50:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) ftruncate(r0, 0x1) 14:50:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsdef}]}}) 14:50:39 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) [ 823.515077] FAULT_INJECTION: forcing a failure. [ 823.515077] name failslab, interval 1, probability 0, space 0, times 0 [ 823.516752] CPU: 1 PID: 6692 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 823.517676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 823.518800] Call Trace: [ 823.519161] dump_stack+0x107/0x167 [ 823.519658] should_fail.cold+0x5/0xa [ 823.520173] ? create_object.isra.0+0x3a/0xa30 [ 823.520785] should_failslab+0x5/0x20 [ 823.521297] kmem_cache_alloc+0x5b/0x310 [ 823.521858] create_object.isra.0+0x3a/0xa30 [ 823.522453] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 823.523141] __kmalloc_track_caller+0x177/0x370 [ 823.523773] ? v9fs_session_init+0xe9/0x1680 [ 823.524362] kstrdup+0x36/0x70 [ 823.524794] v9fs_session_init+0xe9/0x1680 [ 823.525359] ? lock_release+0x680/0x680 [ 823.525886] ? find_held_lock+0x2c/0x110 [ 823.526432] ? kmem_cache_alloc_trace+0x151/0x320 [ 823.527080] ? v9fs_show_options+0x690/0x690 [ 823.527688] ? trace_hardirqs_on+0x5b/0x180 [ 823.528263] ? kasan_unpoison_shadow+0x33/0x50 [ 823.528881] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 823.529559] v9fs_mount+0x79/0x8f0 [ 823.530034] ? v9fs_write_inode+0x60/0x60 [ 823.530593] legacy_get_tree+0x105/0x220 [ 823.531143] vfs_get_tree+0x8e/0x300 [ 823.531649] path_mount+0x1490/0x21e0 [ 823.532163] ? strncpy_from_user+0x9e/0x470 [ 823.532736] ? finish_automount+0xa90/0xa90 [ 823.533312] ? getname_flags.part.0+0x1dd/0x4f0 [ 823.533931] ? _copy_from_user+0xfb/0x1b0 [ 823.534495] __x64_sys_mount+0x282/0x300 [ 823.535043] ? copy_mnt_ns+0xa00/0xa00 [ 823.535579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 823.536275] ? syscall_enter_from_user_mode+0x1d/0x50 [ 823.536978] do_syscall_64+0x33/0x40 [ 823.537487] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 823.538180] RIP: 0033:0x7f9de321cb19 [ 823.538689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 823.541177] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 823.542199] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 823.543153] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 823.543465] FAULT_INJECTION: forcing a failure. [ 823.543465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.544113] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 823.544120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 823.544127] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 823.553471] CPU: 0 PID: 6694 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 823.555070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 823.557025] Call Trace: [ 823.557657] dump_stack+0x107/0x167 [ 823.558535] should_fail.cold+0x5/0xa [ 823.559461] _copy_from_user+0x2e/0x1b0 [ 823.560401] io_copy_iov+0xbf/0x1c0 [ 823.561261] ? io_cancel_task_cb+0x80/0x80 [ 823.562262] ? kmalloc_order+0xfe/0x160 [ 823.563213] io_sqe_buffers_register+0x31d/0x880 [ 823.564341] ? io_sqd_handle_event+0x350/0x350 [ 823.565454] __do_sys_io_uring_register+0x1648/0x2fa0 [ 823.566669] ? io_recvmsg+0xd70/0xd70 [ 823.567574] ? fput_many+0x2f/0x1a0 [ 823.568430] ? ksys_write+0x1a9/0x260 [ 823.569321] ? __ia32_sys_read+0xb0/0xb0 [ 823.570292] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 823.571526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 823.572727] do_syscall_64+0x33/0x40 [ 823.573594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 823.574780] RIP: 0033:0x7f748a34ab19 [ 823.575664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 823.579964] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 823.581741] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 823.583392] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 823.585042] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 823.586686] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 823.588341] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:50:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 19) [ 823.606804] FAULT_INJECTION: forcing a failure. [ 823.606804] name failslab, interval 1, probability 0, space 0, times 0 [ 823.609394] CPU: 0 PID: 6696 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 823.610942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 823.612853] Call Trace: [ 823.613485] dump_stack+0x107/0x167 [ 823.614331] should_fail.cold+0x5/0xa [ 823.615219] ? create_object.isra.0+0x3a/0xa30 [ 823.616291] should_failslab+0x5/0x20 [ 823.617179] kmem_cache_alloc+0x5b/0x310 [ 823.618129] create_object.isra.0+0x3a/0xa30 [ 823.619147] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 823.620341] __kmalloc_track_caller+0x177/0x370 [ 823.621411] ? v9fs_session_init+0xe9/0x1680 [ 823.622426] ? kernel_text_address+0xf2/0x120 [ 823.623498] kstrdup+0x36/0x70 [ 823.624257] v9fs_session_init+0xe9/0x1680 [ 823.625251] ? lock_release+0x680/0x680 [ 823.626176] ? find_held_lock+0x2c/0x110 [ 823.627133] ? kmem_cache_alloc_trace+0x151/0x320 [ 823.628253] ? v9fs_show_options+0x690/0x690 [ 823.629286] ? trace_hardirqs_on+0x5b/0x180 [ 823.630291] ? kasan_unpoison_shadow+0x33/0x50 [ 823.631355] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 823.632533] v9fs_mount+0x79/0x8f0 [ 823.633356] ? v9fs_write_inode+0x60/0x60 [ 823.634309] legacy_get_tree+0x105/0x220 [ 823.635253] vfs_get_tree+0x8e/0x300 [ 823.636128] path_mount+0x1490/0x21e0 [ 823.637020] ? strncpy_from_user+0x9e/0x470 [ 823.638019] ? finish_automount+0xa90/0xa90 [ 823.639028] ? getname_flags.part.0+0x1dd/0x4f0 [ 823.640117] ? _copy_from_user+0xfb/0x1b0 [ 823.641089] __x64_sys_mount+0x282/0x300 [ 823.642028] ? copy_mnt_ns+0xa00/0xa00 [ 823.642940] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 823.644164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 823.645373] do_syscall_64+0x33/0x40 [ 823.646245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 823.647434] RIP: 0033:0x7f5ea7bffb19 [ 823.648297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 823.652489] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 823.654252] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 823.655884] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 823.657526] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 823.659157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 823.660786] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 14:50:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 20) 14:50:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:50:52 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 72) 14:50:52 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 22) 14:50:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) ftruncate(r0, 0x1) 14:50:52 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:52 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x1f, 0x9, 0x9, 0x68, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x20, 0x5db0, 0x100}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x108, 0x12, 0x300, 0x70bd2b, 0x25dfdbfb, {0x10, 0xfd, 0x7f, 0x5, {0x4e23, 0x4e22, [0x1, 0x9, 0x3, 0xf0], [0x7fffffff, 0xfff, 0x9, 0x4], r0, [0x1, 0xd3ae]}, 0x3, 0xffff}, [@INET_DIAG_REQ_BYTECODE={0x30, 0x1, "6f975de89e397bc79db446881045391edeee949ef81831fe3a0a9ca4333c4f523a2b25e029babeaa9c5d5831"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "39364dfc8956a67ff05347fa4287e64336a97414ab58610b709931687939550682eeb3d31dc7d2a383d1f5560df9bce55bcb9d2227a305db30368614bfe017c5cf82c92ec1f594857ebfd16d01521d56cea739d13a5054ae37013497107e326c6002122c755eb52380eb0c9911a6828d64016367ef917e9cb2bf5be6bd5aa6d9b6e8d92cdcc2"}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000020}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/kernel/kexec_crash_size', 0x20841, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="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"]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x340, 0xc5) unlink(&(0x7f0000000200)='./file0\x00') [ 836.043879] FAULT_INJECTION: forcing a failure. [ 836.043879] name failslab, interval 1, probability 0, space 0, times 0 [ 836.046370] CPU: 0 PID: 6704 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 836.047918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 836.049736] Call Trace: [ 836.050318] dump_stack+0x107/0x167 [ 836.051119] should_fail.cold+0x5/0xa [ 836.051975] should_failslab+0x5/0x20 [ 836.052811] __kmalloc_track_caller+0x79/0x370 [ 836.053806] ? v9fs_session_init+0xe9/0x1680 [ 836.054765] ? kernel_text_address+0xf2/0x120 [ 836.055748] kstrdup+0x36/0x70 [ 836.056447] v9fs_session_init+0xe9/0x1680 [ 836.057371] ? lock_release+0x680/0x680 [ 836.058236] ? find_held_lock+0x2c/0x110 [ 836.059132] ? kmem_cache_alloc_trace+0x151/0x320 [ 836.060206] ? v9fs_show_options+0x690/0x690 [ 836.061180] ? trace_hardirqs_on+0x5b/0x180 [ 836.062123] ? kasan_unpoison_shadow+0x33/0x50 [ 836.063115] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 836.064229] v9fs_mount+0x79/0x8f0 [ 836.065006] ? v9fs_write_inode+0x60/0x60 [ 836.065910] legacy_get_tree+0x105/0x220 [ 836.066797] vfs_get_tree+0x8e/0x300 [ 836.067616] path_mount+0x1490/0x21e0 [ 836.068455] ? strncpy_from_user+0x9e/0x470 [ 836.069396] ? finish_automount+0xa90/0xa90 [ 836.070340] ? getname_flags.part.0+0x1dd/0x4f0 [ 836.071353] ? _copy_from_user+0xfb/0x1b0 [ 836.072274] __x64_sys_mount+0x282/0x300 [ 836.073157] ? copy_mnt_ns+0xa00/0xa00 [ 836.074008] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 836.075144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.076275] do_syscall_64+0x33/0x40 [ 836.077082] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 836.078189] RIP: 0033:0x7f5ea7bffb19 [ 836.078993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.082971] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 836.084497] FAULT_INJECTION: forcing a failure. [ 836.084497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.084619] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 836.084631] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 836.084643] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 836.084653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.084668] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 [ 836.093772] CPU: 1 PID: 6705 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 836.094617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 836.095655] Call Trace: [ 836.095981] dump_stack+0x107/0x167 [ 836.096430] should_fail.cold+0x5/0xa [ 836.096899] _copy_from_user+0x2e/0x1b0 [ 836.097387] io_copy_iov+0xbf/0x1c0 [ 836.097832] ? io_cancel_task_cb+0x80/0x80 [ 836.098350] ? kmalloc_order+0xfe/0x160 [ 836.098848] io_sqe_buffers_register+0x31d/0x880 [ 836.099435] ? io_sqd_handle_event+0x350/0x350 [ 836.100015] __do_sys_io_uring_register+0x1648/0x2fa0 [ 836.100650] ? io_recvmsg+0xd70/0xd70 [ 836.101116] ? fput_many+0x2f/0x1a0 [ 836.101562] ? ksys_write+0x1a9/0x260 [ 836.102031] ? __ia32_sys_read+0xb0/0xb0 [ 836.102536] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 836.103174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.103812] do_syscall_64+0x33/0x40 [ 836.104267] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 836.104892] RIP: 0033:0x7f748a34ab19 [ 836.105352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.107604] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 836.108535] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 14:50:52 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ftruncate(r0, 0x1) [ 836.109403] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 836.110510] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.111386] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 836.112262] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 836.129120] FAULT_INJECTION: forcing a failure. [ 836.129120] name failslab, interval 1, probability 0, space 0, times 0 [ 836.131559] CPU: 0 PID: 6715 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 836.133016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 836.134771] Call Trace: [ 836.135333] dump_stack+0x107/0x167 [ 836.136117] should_fail.cold+0x5/0xa [ 836.136935] should_failslab+0x5/0x20 [ 836.137740] __kmalloc_track_caller+0x79/0x370 [ 836.138699] ? p9_client_create+0x41d/0x1230 [ 836.139640] kstrdup+0x36/0x70 [ 836.140315] p9_client_create+0x41d/0x1230 [ 836.141207] ? lock_downgrade+0x6d0/0x6d0 [ 836.142091] ? p9_client_flush+0x430/0x430 [ 836.142986] ? trace_hardirqs_on+0x5b/0x180 [ 836.143903] ? lockdep_init_map_type+0x2c7/0x780 [ 836.144906] ? __raw_spin_lock_init+0x36/0x110 [ 836.145876] v9fs_session_init+0x1dd/0x1680 [ 836.146788] ? lock_release+0x680/0x680 [ 836.147647] ? kmem_cache_alloc_trace+0x151/0x320 [ 836.148665] ? v9fs_show_options+0x690/0x690 [ 836.149602] ? trace_hardirqs_on+0x5b/0x180 [ 836.150511] ? kasan_unpoison_shadow+0x33/0x50 [ 836.151472] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 836.152544] v9fs_mount+0x79/0x8f0 [ 836.153291] ? v9fs_write_inode+0x60/0x60 [ 836.154158] legacy_get_tree+0x105/0x220 [ 836.155009] vfs_get_tree+0x8e/0x300 [ 836.155803] path_mount+0x1490/0x21e0 [ 836.156604] ? strncpy_from_user+0x9e/0x470 [ 836.157516] ? finish_automount+0xa90/0xa90 [ 836.158423] ? getname_flags.part.0+0x1dd/0x4f0 [ 836.159397] ? _copy_from_user+0xfb/0x1b0 [ 836.160281] __x64_sys_mount+0x282/0x300 [ 836.161134] ? copy_mnt_ns+0xa00/0xa00 [ 836.161953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 836.163047] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.164142] do_syscall_64+0x33/0x40 [ 836.164917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 836.165987] RIP: 0033:0x7f9de321cb19 [ 836.166768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.171129] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 836.172972] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 836.174697] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 836.176414] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 836.178109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.179849] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 836.223670] FAULT_INJECTION: forcing a failure. [ 836.223670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.225089] CPU: 1 PID: 6727 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 836.225881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 836.226847] Call Trace: [ 836.227159] dump_stack+0x107/0x167 [ 836.227605] should_fail.cold+0x5/0xa [ 836.228056] _copy_from_user+0x2e/0x1b0 [ 836.228521] io_copy_iov+0xbf/0x1c0 [ 836.228948] ? io_cancel_task_cb+0x80/0x80 [ 836.229443] ? kmalloc_order+0xfe/0x160 [ 836.229913] io_sqe_buffers_register+0x31d/0x880 [ 836.230469] ? io_sqd_handle_event+0x350/0x350 [ 836.231013] __do_sys_io_uring_register+0x1648/0x2fa0 [ 836.231626] ? io_recvmsg+0xd70/0xd70 [ 836.232073] ? fput_many+0x2f/0x1a0 [ 836.232496] ? ksys_write+0x1a9/0x260 [ 836.232940] ? __ia32_sys_read+0xb0/0xb0 [ 836.233417] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 836.234026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.234627] do_syscall_64+0x33/0x40 [ 836.235056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 836.235657] RIP: 0033:0x7f748a34ab19 [ 836.236084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.238199] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 836.239080] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 836.239911] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 836.240735] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.241558] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 836.242381] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:50:52 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) lseek(r1, 0x800, 0x2) fallocate(r0, 0x1, 0xb7d, 0x552d7ea8) unlink(&(0x7f0000000200)='./file0\x00') 14:50:52 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 73) 14:50:52 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:50:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ftruncate(r0, 0x1) 14:50:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) 14:50:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 23) 14:50:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ftruncate(r0, 0x1) [ 836.344264] FAULT_INJECTION: forcing a failure. [ 836.344264] name failslab, interval 1, probability 0, space 0, times 0 [ 836.345673] CPU: 1 PID: 6739 Comm: syz-executor.6 Not tainted 5.10.247 #1 [ 836.346472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 836.347445] Call Trace: [ 836.347765] dump_stack+0x107/0x167 [ 836.348192] should_fail.cold+0x5/0xa [ 836.348630] ? create_object.isra.0+0x3a/0xa30 [ 836.349172] should_failslab+0x5/0x20 [ 836.349608] kmem_cache_alloc+0x5b/0x310 [ 836.350085] create_object.isra.0+0x3a/0xa30 [ 836.350583] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 836.351182] __kmalloc_track_caller+0x177/0x370 [ 836.351720] ? v9fs_session_init+0xe9/0x1680 [ 836.352237] ? kernel_text_address+0xf2/0x120 [ 836.352748] kstrdup+0x36/0x70 [ 836.353123] v9fs_session_init+0xe9/0x1680 [ 836.353607] ? lock_release+0x680/0x680 [ 836.354074] ? find_held_lock+0x2c/0x110 [ 836.354540] ? kmem_cache_alloc_trace+0x151/0x320 [ 836.355106] ? v9fs_show_options+0x690/0x690 [ 836.355617] ? trace_hardirqs_on+0x5b/0x180 [ 836.356122] ? kasan_unpoison_shadow+0x33/0x50 [ 836.356642] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 836.357240] v9fs_mount+0x79/0x8f0 [ 836.357657] ? v9fs_write_inode+0x60/0x60 [ 836.358129] legacy_get_tree+0x105/0x220 [ 836.358605] vfs_get_tree+0x8e/0x300 [ 836.359047] path_mount+0x1490/0x21e0 [ 836.359505] ? strncpy_from_user+0x9e/0x470 [ 836.360011] ? finish_automount+0xa90/0xa90 [ 836.360501] ? getname_flags.part.0+0x1dd/0x4f0 [ 836.360783] FAULT_INJECTION: forcing a failure. [ 836.360783] name failslab, interval 1, probability 0, space 0, times 0 [ 836.361046] ? _copy_from_user+0xfb/0x1b0 [ 836.361062] __x64_sys_mount+0x282/0x300 [ 836.364502] ? copy_mnt_ns+0xa00/0xa00 [ 836.364959] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 836.365572] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.366175] do_syscall_64+0x33/0x40 [ 836.366602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 836.367205] RIP: 0033:0x7f5ea7bffb19 [ 836.367637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.369784] RSP: 002b:00007f5ea5175188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 836.370650] RAX: ffffffffffffffda RBX: 00007f5ea7d12f60 RCX: 00007f5ea7bffb19 [ 836.371495] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 836.372328] RBP: 00007f5ea51751d0 R08: 00000000200000c0 R09: 0000000000000000 [ 836.373160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.373989] R13: 00007ffde1fdb17f R14: 00007f5ea5175300 R15: 0000000000022000 [ 836.374845] CPU: 0 PID: 6740 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 836.376431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 836.378347] Call Trace: [ 836.378959] dump_stack+0x107/0x167 [ 836.379812] should_fail.cold+0x5/0xa [ 836.380691] ? create_object.isra.0+0x3a/0xa30 [ 836.381741] should_failslab+0x5/0x20 [ 836.382617] kmem_cache_alloc+0x5b/0x310 [ 836.383561] ? kernel_text_address+0xf2/0x120 [ 836.384602] create_object.isra.0+0x3a/0xa30 [ 836.385614] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 836.386791] kmem_cache_alloc_trace+0x151/0x320 [ 836.387870] ? find_held_lock+0x2c/0x110 [ 836.388811] p9_client_create+0xaf/0x1230 [ 836.389770] ? lock_downgrade+0x6d0/0x6d0 [ 836.390729] ? p9_client_flush+0x430/0x430 [ 836.391716] ? trace_hardirqs_on+0x5b/0x180 [ 836.392713] ? lockdep_init_map_type+0x2c7/0x780 [ 836.393809] ? __raw_spin_lock_init+0x36/0x110 [ 836.394866] v9fs_session_init+0x1dd/0x1680 [ 836.395872] ? lock_release+0x680/0x680 [ 836.396799] ? kmem_cache_alloc_trace+0x151/0x320 [ 836.397909] ? v9fs_show_options+0x690/0x690 [ 836.398937] ? trace_hardirqs_on+0x5b/0x180 [ 836.399939] ? kasan_unpoison_shadow+0x33/0x50 [ 836.400992] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 836.402163] v9fs_mount+0x79/0x8f0 [ 836.402985] ? v9fs_write_inode+0x60/0x60 [ 836.403944] legacy_get_tree+0x105/0x220 [ 836.404883] vfs_get_tree+0x8e/0x300 [ 836.405739] path_mount+0x1490/0x21e0 [ 836.406627] ? strncpy_from_user+0x9e/0x470 [ 836.407629] ? finish_automount+0xa90/0xa90 [ 836.408622] ? getname_flags.part.0+0x1dd/0x4f0 [ 836.409695] ? _copy_from_user+0xfb/0x1b0 [ 836.410660] __x64_sys_mount+0x282/0x300 [ 836.411601] ? copy_mnt_ns+0xa00/0xa00 [ 836.412503] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 836.413709] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.414900] do_syscall_64+0x33/0x40 [ 836.415788] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 836.417137] RIP: 0033:0x7f9de321cb19 [ 836.418001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.422229] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 836.423990] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 836.425623] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 836.427260] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 836.428897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.430527] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 14:51:04 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 74) 14:51:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 24) 14:51:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) 14:51:04 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 848.315227] FAULT_INJECTION: forcing a failure. 14:51:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0x1, r1, &(0x7f00000000c0)=0x3, 0xb, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') [ 848.315227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.318379] CPU: 0 PID: 6746 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 848.319970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 848.322071] Call Trace: 14:51:04 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:51:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(0xffffffffffffffff, 0x1) [ 848.322759] dump_stack+0x107/0x167 [ 848.323795] should_fail.cold+0x5/0xa [ 848.324797] _copy_from_user+0x2e/0x1b0 [ 848.325835] io_copy_iov+0xbf/0x1c0 [ 848.326780] ? io_cancel_task_cb+0x80/0x80 [ 848.327889] ? kmalloc_order+0xfe/0x160 [ 848.328939] io_sqe_buffers_register+0x31d/0x880 [ 848.330180] ? io_sqd_handle_event+0x350/0x350 [ 848.331394] __do_sys_io_uring_register+0x1648/0x2fa0 [ 848.332948] ? io_recvmsg+0xd70/0xd70 [ 848.334112] ? fput_many+0x2f/0x1a0 [ 848.334739] FAULT_INJECTION: forcing a failure. [ 848.334739] name failslab, interval 1, probability 0, space 0, times 0 [ 848.335223] ? ksys_write+0x1a9/0x260 [ 848.337667] ? __ia32_sys_read+0xb0/0xb0 [ 848.338729] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 848.340101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 848.341448] do_syscall_64+0x33/0x40 [ 848.342420] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 848.343764] RIP: 0033:0x7f748a34ab19 [ 848.344733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 848.349476] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 848.351432] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 848.353274] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 848.355108] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 848.356951] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 848.358782] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 848.360649] CPU: 1 PID: 6757 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 848.361571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 14:51:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 22) [ 848.362683] Call Trace: [ 848.363196] dump_stack+0x107/0x167 [ 848.363742] should_fail.cold+0x5/0xa [ 848.364147] FAULT_INJECTION: forcing a failure. [ 848.364147] name failslab, interval 1, probability 0, space 0, times 0 [ 848.364265] ? create_object.isra.0+0x3a/0xa30 [ 848.367632] should_failslab+0x5/0x20 [ 848.368128] kmem_cache_alloc+0x5b/0x310 [ 848.368656] ? lock_downgrade+0x6d0/0x6d0 [ 848.369199] create_object.isra.0+0x3a/0xa30 [ 848.369771] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 848.370438] __kmalloc_track_caller+0x177/0x370 [ 848.371043] ? p9_client_create+0x41d/0x1230 [ 848.371627] kstrdup+0x36/0x70 [ 848.372046] p9_client_create+0x41d/0x1230 [ 848.372600] ? lock_downgrade+0x6d0/0x6d0 [ 848.373143] ? p9_client_flush+0x430/0x430 [ 848.373693] ? trace_hardirqs_on+0x5b/0x180 [ 848.374260] ? lockdep_init_map_type+0x2c7/0x780 [ 848.374889] ? __raw_spin_lock_init+0x36/0x110 [ 848.375490] v9fs_session_init+0x1dd/0x1680 [ 848.376059] ? lock_release+0x680/0x680 [ 848.376582] ? kmem_cache_alloc_trace+0x151/0x320 [ 848.377213] ? v9fs_show_options+0x690/0x690 [ 848.377800] ? trace_hardirqs_on+0x5b/0x180 [ 848.378362] ? kasan_unpoison_shadow+0x33/0x50 [ 848.378959] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 848.379631] v9fs_mount+0x79/0x8f0 [ 848.380096] ? v9fs_write_inode+0x60/0x60 [ 848.380634] legacy_get_tree+0x105/0x220 [ 848.381166] vfs_get_tree+0x8e/0x300 [ 848.381651] path_mount+0x1490/0x21e0 [ 848.382152] ? strncpy_from_user+0x9e/0x470 [ 848.382712] ? finish_automount+0xa90/0xa90 [ 848.383276] ? getname_flags.part.0+0x1dd/0x4f0 [ 848.383893] ? _copy_from_user+0xfb/0x1b0 [ 848.384442] __x64_sys_mount+0x282/0x300 [ 848.384974] ? copy_mnt_ns+0xa00/0xa00 [ 848.385497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 848.386184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 848.386861] do_syscall_64+0x33/0x40 [ 848.387340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 848.388009] RIP: 0033:0x7f9de321cb19 [ 848.388489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 848.390873] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 848.391862] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 848.392791] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 848.393716] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 848.394639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 848.395558] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 848.396505] CPU: 0 PID: 6749 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 848.398044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 848.399912] Call Trace: [ 848.400500] dump_stack+0x107/0x167 [ 848.401317] should_fail.cold+0x5/0xa [ 848.402170] should_failslab+0x5/0x20 [ 848.403020] __kmalloc_track_caller+0x79/0x370 [ 848.404039] ? strndup_user+0x74/0xe0 [ 848.404891] memdup_user+0x22/0xd0 [ 848.405681] strndup_user+0x74/0xe0 [ 848.406491] __x64_sys_mount+0x133/0x300 [ 848.407389] ? copy_mnt_ns+0xa00/0xa00 [ 848.408263] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 848.409421] ? syscall_enter_from_user_mode+0x1d/0x50 [ 848.410567] do_syscall_64+0x33/0x40 [ 848.411392] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 848.412532] RIP: 0033:0x7f11174d2b19 [ 848.413351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 848.417422] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 848.419103] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 848.420686] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 848.422265] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 848.423855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.425436] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 14:51:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:51:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x60}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x70}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4005) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0x7, &(0x7f0000000440)={&(0x7f0000000340)={0xf8, 0x0, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_LABELS_MASK={0x20, 0x17, [0x9, 0x6f, 0xd2, 0x1, 0x9, 0x80, 0x5]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6022}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x54}, @CTA_SEQADJ_OFFSET_AFTER={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xca3}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) splice(r6, &(0x7f00000004c0)=0x10000, r1, &(0x7f0000000500)=0x91, 0x400, 0x3) 14:51:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(0xffffffffffffffff, 0x1) 14:51:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 25) 14:51:05 executing program 3: socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:51:05 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x0, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 848.540666] FAULT_INJECTION: forcing a failure. [ 848.540666] name failslab, interval 1, probability 0, space 0, times 0 [ 848.543405] CPU: 0 PID: 6774 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 848.545038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 848.547001] Call Trace: [ 848.547639] dump_stack+0x107/0x167 14:51:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2200, 0x84) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x1000000) r3 = inotify_add_watch(r2, &(0x7f00000006c0)='./file0\x00', 0x4000200) inotify_rm_watch(r0, r3) lseek(r2, 0x4, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0xc00, 0x1) unlink(&(0x7f0000000200)='./file0\x00') syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, 0x4, &(0x7f0000000540)=[{&(0x7f0000000240)="321b58f4f566153ff4aaef0d9a22c5675020e288a52eb97a99ec391cb5f2d0ba35516c47c1da0c25ee9d016524700bdeed45321967e8a8d4e5128f98823f9ec109367c76dd8cd6a4a1d9b0bd6de3bf706feb5faa69c16a1e60071152a49154a85c35a33a21d20462ed428838e4c8e1da9e4575a9153b15f58f2cea00e61b7fe3b235f1ae68a7e570454696f0814217bd2bb44366ff19caa650b43c93410587cfd9afde2c40bb714e9f815416ed1c1160b053ee8f302dc0ed57b8c525906659c4888d33ff585d9bf878a389fd58fe756db87775e54716d5cd27f377ea6392e314589558af2b1f6106ff29d82429", 0xed, 0xcb}, {&(0x7f0000000340)="bd63a4e282d4bb8edc4188f91cf57863fe36e368e91de3fbc882e2a37ca6c008d0e374aa", 0x24, 0x8}, {&(0x7f0000000380)="49da49af97450bc26d21c351b473336b81eff997724471edb02c81b17a00aca7ccb13febb291e0b2e36885788127b3c00c9aa1bbd3671acb56eb005c142f8ddcace5fe704ffae2b86a243037af7024214875e54fc81638ace8837a8a04e34bb19a268ac8e77db36477e4eabb4e84a2d8e16cc8a8ea5b6405ca3d23360619944140e89148c8aa560346ae02d694f137d4b36f5dd80fdc8264ddda7800d0726dcaf1d2860dc3668e5f7354f71d0d2fc984a5ac020809af7c067e35e4be1fcb6e10", 0xc0, 0x7fffffff}, {&(0x7f0000000440)="fdbb7d33db0880fe36501521125a2011f355251abcc5fab165f04319acadf9f566694e41afb72acddee0ce2f6eb007a763f9699a4a1ba30ec09b2f63aa5855879bdbdbef5e8bc3a18038bf43a6febc19e7924349d8fb3e08b4eac8203d52ae8097c25f2e07eca585be83524af2c94770e8112f3b6e5acf18018f07d1125cc5ba648523227b80adbe358b2c2aca93cff186d922086aa5758e9036c05cee05d5ad4ea7eb95e3d090e4b48e7270bb63c5f410662959108ed954574a547f8efd3db587aa07f677897fa1eb5153b2e70b5e159853", 0xd2, 0x7}], 0x844000, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0xd8}}], [{@smackfsdef={'smackfsdef', 0x3d, '}*'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x31, 0x38, 0x62, 0x63, 0x31, 0x38, 0x64], 0x2d, [0x65, 0x37, 0x65, 0x37], 0x2d, [0x65, 0x38, 0x34, 0x63], 0x2d, [0x34, 0x30, 0x6a, 0x34], 0x2d, [0x34, 0x31, 0x33, 0x66, 0x36, 0x35, 0x62, 0x31]}}}, {@obj_user={'obj_user', 0x3d, 'tmpfs\x00'}}, {@fowner_lt}, {@dont_appraise}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}) [ 848.548510] should_fail.cold+0x5/0xa [ 848.549533] ? create_object.isra.0+0x3a/0xa30 [ 848.550617] should_failslab+0x5/0x20 [ 848.551519] kmem_cache_alloc+0x5b/0x310 [ 848.552510] create_object.isra.0+0x3a/0xa30 [ 848.553558] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 848.554779] __kmalloc_track_caller+0x177/0x370 [ 848.555893] ? p9_client_create+0x51e/0x1230 [ 848.556942] kmemdup_nul+0x2d/0xa0 [ 848.557784] p9_client_create+0x51e/0x1230 [ 848.558795] ? p9_client_flush+0x430/0x430 [ 848.559808] ? trace_hardirqs_on+0x5b/0x180 [ 848.560836] ? lockdep_init_map_type+0x2c7/0x780 [ 848.561963] ? __raw_spin_lock_init+0x36/0x110 [ 848.563054] v9fs_session_init+0x1dd/0x1680 [ 848.564089] ? lock_release+0x680/0x680 [ 848.565034] ? kmem_cache_alloc_trace+0x151/0x320 [ 848.566167] ? v9fs_show_options+0x690/0x690 [ 848.567211] ? trace_hardirqs_on+0x5b/0x180 [ 848.568240] ? kasan_unpoison_shadow+0x33/0x50 [ 848.569322] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 848.570530] v9fs_mount+0x79/0x8f0 [ 848.571376] ? v9fs_write_inode+0x60/0x60 [ 848.572357] legacy_get_tree+0x105/0x220 [ 848.573314] vfs_get_tree+0x8e/0x300 [ 848.574192] path_mount+0x1490/0x21e0 [ 848.575096] ? strncpy_from_user+0x9e/0x470 [ 848.576117] ? finish_automount+0xa90/0xa90 [ 848.577124] ? getname_flags.part.0+0x1dd/0x4f0 [ 848.578211] ? _copy_from_user+0xfb/0x1b0 [ 848.579188] __x64_sys_mount+0x282/0x300 [ 848.580146] ? copy_mnt_ns+0xa00/0xa00 [ 848.581059] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 848.582282] ? syscall_enter_from_user_mode+0x1d/0x50 [ 848.583490] do_syscall_64+0x33/0x40 [ 848.584371] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 848.585572] RIP: 0033:0x7f9de321cb19 [ 848.586444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 848.590739] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 848.592516] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 848.594169] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 848.595828] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 848.597473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 848.599122] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 14:51:05 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x0, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:51:05 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 75) 14:51:05 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x0, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 848.672740] FAULT_INJECTION: forcing a failure. [ 848.672740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.675524] CPU: 0 PID: 6785 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 848.677119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 848.679061] Call Trace: [ 848.679690] dump_stack+0x107/0x167 [ 848.680545] should_fail.cold+0x5/0xa [ 848.681447] _copy_from_user+0x2e/0x1b0 [ 848.682380] io_copy_iov+0xbf/0x1c0 [ 848.683229] ? io_cancel_task_cb+0x80/0x80 [ 848.684229] ? kmalloc_order+0xfe/0x160 [ 848.685176] io_sqe_buffers_register+0x31d/0x880 [ 848.686292] ? io_sqd_handle_event+0x350/0x350 [ 848.687388] __do_sys_io_uring_register+0x1648/0x2fa0 [ 848.688619] ? io_recvmsg+0xd70/0xd70 [ 848.689509] ? fput_many+0x2f/0x1a0 [ 848.690354] ? ksys_write+0x1a9/0x260 [ 848.691242] ? __ia32_sys_read+0xb0/0xb0 [ 848.692198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 848.693418] ? syscall_enter_from_user_mode+0x1d/0x50 [ 848.694623] do_syscall_64+0x33/0x40 [ 848.695490] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 848.696684] RIP: 0033:0x7f748a34ab19 [ 848.697546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 848.701838] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 848.703621] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 848.705282] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 848.706925] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 848.708586] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 848.710232] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 862.277153] FAULT_INJECTION: forcing a failure. [ 862.277153] name failslab, interval 1, probability 0, space 0, times 0 14:51:18 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 76) 14:51:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(0xffffffffffffffff, 0x1) 14:51:18 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:51:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:51:18 executing program 3: socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:51:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) 14:51:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2) 14:51:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 26) [ 862.278579] CPU: 1 PID: 6803 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 862.279586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 862.280537] Call Trace: [ 862.280858] dump_stack+0x107/0x167 [ 862.281288] should_fail.cold+0x5/0xa [ 862.281728] should_failslab+0x5/0x20 [ 862.282180] __kmalloc_track_caller+0x79/0x370 [ 862.282722] ? p9_client_create+0x51e/0x1230 [ 862.283243] kmemdup_nul+0x2d/0xa0 [ 862.283661] p9_client_create+0x51e/0x1230 [ 862.284159] ? p9_client_flush+0x430/0x430 [ 862.284659] ? trace_hardirqs_on+0x5b/0x180 [ 862.285163] ? lockdep_init_map_type+0x2c7/0x780 [ 862.285719] ? __raw_spin_lock_init+0x36/0x110 [ 862.286261] v9fs_session_init+0x1dd/0x1680 [ 862.286774] ? lock_release+0x680/0x680 [ 862.287246] ? kmem_cache_alloc_trace+0x151/0x320 [ 862.287818] ? v9fs_show_options+0x690/0x690 [ 862.288340] ? trace_hardirqs_on+0x5b/0x180 [ 862.288849] ? kasan_unpoison_shadow+0x33/0x50 [ 862.289372] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 862.289973] v9fs_mount+0x79/0x8f0 [ 862.290388] ? v9fs_write_inode+0x60/0x60 [ 862.290861] legacy_get_tree+0x105/0x220 [ 862.291338] vfs_get_tree+0x8e/0x300 [ 862.291785] path_mount+0x1490/0x21e0 [ 862.292235] ? strncpy_from_user+0x9e/0x470 [ 862.292739] ? finish_automount+0xa90/0xa90 [ 862.293236] ? getname_flags.part.0+0x1dd/0x4f0 [ 862.293781] ? _copy_from_user+0xfb/0x1b0 [ 862.294269] __x64_sys_mount+0x282/0x300 [ 862.294734] ? copy_mnt_ns+0xa00/0xa00 [ 862.295191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 862.295798] ? syscall_enter_from_user_mode+0x1d/0x50 [ 862.296404] do_syscall_64+0x33/0x40 [ 862.296845] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 862.297445] RIP: 0033:0x7f9de321cb19 [ 862.297869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 862.300044] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 862.300944] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 862.301785] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 862.302601] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 862.303447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 862.304303] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 862.306169] FAULT_INJECTION: forcing a failure. [ 862.306169] name failslab, interval 1, probability 0, space 0, times 0 [ 862.309122] CPU: 0 PID: 6801 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 862.310882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 862.313025] Call Trace: [ 862.313713] dump_stack+0x107/0x167 [ 862.314657] should_fail.cold+0x5/0xa [ 862.315643] ? create_object.isra.0+0x3a/0xa30 [ 862.316832] should_failslab+0x5/0x20 [ 862.317822] kmem_cache_alloc+0x5b/0x310 [ 862.318882] create_object.isra.0+0x3a/0xa30 [ 862.320033] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 862.321293] __kmalloc_track_caller+0x177/0x370 [ 862.322371] ? strndup_user+0x74/0xe0 [ 862.323260] memdup_user+0x22/0xd0 [ 862.324094] strndup_user+0x74/0xe0 [ 862.324940] __x64_sys_mount+0x133/0x300 [ 862.325881] ? copy_mnt_ns+0xa00/0xa00 [ 862.326793] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 862.328024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 862.329227] do_syscall_64+0x33/0x40 [ 862.330095] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 862.331287] RIP: 0033:0x7f11174d2b19 [ 862.332156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 862.336414] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 862.338173] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 862.339823] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 862.341467] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 862.342101] FAULT_INJECTION: forcing a failure. [ 862.342101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.343107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:51:18 executing program 3: socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 862.343121] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 [ 862.346408] CPU: 1 PID: 6806 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 862.347220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 862.348174] Call Trace: [ 862.348480] dump_stack+0x107/0x167 [ 862.348912] should_fail.cold+0x5/0xa [ 862.349363] _copy_from_user+0x2e/0x1b0 [ 862.349833] io_copy_iov+0xbf/0x1c0 [ 862.350264] ? io_cancel_task_cb+0x80/0x80 [ 862.350757] ? kmalloc_order+0xfe/0x160 [ 862.351227] io_sqe_buffers_register+0x31d/0x880 [ 862.351794] ? io_sqd_handle_event+0x350/0x350 [ 862.352346] __do_sys_io_uring_register+0x1648/0x2fa0 [ 862.352963] ? io_recvmsg+0xd70/0xd70 [ 862.353411] ? fput_many+0x2f/0x1a0 [ 862.353841] ? ksys_write+0x1a9/0x260 [ 862.354275] ? __ia32_sys_read+0xb0/0xb0 [ 862.354757] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 862.355376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 862.355999] do_syscall_64+0x33/0x40 [ 862.356435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 862.357038] RIP: 0033:0x7f748a34ab19 [ 862.357463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 862.359641] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 862.360543] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 862.361380] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 862.362190] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 862.363029] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 862.363876] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:51:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) [ 876.371031] FAULT_INJECTION: forcing a failure. [ 876.371031] name failslab, interval 1, probability 0, space 0, times 0 [ 876.373420] CPU: 1 PID: 6822 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 876.374798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 876.376478] Call Trace: [ 876.377014] dump_stack+0x107/0x167 [ 876.377755] should_fail.cold+0x5/0xa [ 876.378525] ? create_object.isra.0+0x3a/0xa30 [ 876.379439] should_failslab+0x5/0x20 14:51:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) 14:51:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x2}) unlink(&(0x7f0000000200)='./file0\x00') 14:51:32 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:51:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) (fail_nth: 1) 14:51:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:51:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 27) 14:51:32 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:51:32 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 77) [ 876.380212] kmem_cache_alloc+0x5b/0x310 [ 876.381277] create_object.isra.0+0x3a/0xa30 [ 876.381719] FAULT_INJECTION: forcing a failure. [ 876.381719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.382157] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 876.382185] __kmalloc_track_caller+0x177/0x370 [ 876.386763] ? p9_client_create+0x51e/0x1230 [ 876.387653] kmemdup_nul+0x2d/0xa0 [ 876.388371] p9_client_create+0x51e/0x1230 [ 876.389226] ? p9_client_flush+0x430/0x430 [ 876.390082] ? trace_hardirqs_on+0x5b/0x180 [ 876.390953] ? lockdep_init_map_type+0x2c7/0x780 [ 876.391915] ? __raw_spin_lock_init+0x36/0x110 [ 876.392842] v9fs_session_init+0x1dd/0x1680 [ 876.393706] ? lock_release+0x680/0x680 [ 876.394502] ? kmem_cache_alloc_trace+0x151/0x320 [ 876.395461] ? v9fs_show_options+0x690/0x690 [ 876.396352] ? trace_hardirqs_on+0x5b/0x180 [ 876.397213] ? kasan_unpoison_shadow+0x33/0x50 [ 876.398120] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 876.399131] v9fs_mount+0x79/0x8f0 [ 876.399838] ? v9fs_write_inode+0x60/0x60 [ 876.400672] legacy_get_tree+0x105/0x220 [ 876.401476] vfs_get_tree+0x8e/0x300 [ 876.402215] path_mount+0x1490/0x21e0 [ 876.402981] ? strncpy_from_user+0x9e/0x470 [ 876.403837] ? finish_automount+0xa90/0xa90 [ 876.404703] ? getname_flags.part.0+0x1dd/0x4f0 [ 876.405627] ? _copy_from_user+0xfb/0x1b0 [ 876.406455] __x64_sys_mount+0x282/0x300 [ 876.407256] ? copy_mnt_ns+0xa00/0xa00 [ 876.408038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 876.409087] ? syscall_enter_from_user_mode+0x1d/0x50 [ 876.410113] do_syscall_64+0x33/0x40 [ 876.410854] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 876.411875] RIP: 0033:0x7f9de321cb19 [ 876.412622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 876.416275] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 876.417789] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 876.419190] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 876.420598] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 876.421998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 876.423399] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 876.424843] CPU: 0 PID: 6825 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 876.426431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 876.428357] Call Trace: [ 876.428972] dump_stack+0x107/0x167 [ 876.429831] should_fail.cold+0x5/0xa [ 876.430722] _copy_from_user+0x2e/0x1b0 [ 876.431643] memdup_user+0x65/0xd0 [ 876.432469] strndup_user+0x74/0xe0 [ 876.433311] __x64_sys_mount+0x133/0x300 [ 876.434247] ? copy_mnt_ns+0xa00/0xa00 [ 876.434932] FAULT_INJECTION: forcing a failure. [ 876.434932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.435154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 876.438576] ? syscall_enter_from_user_mode+0x1d/0x50 [ 876.439771] do_syscall_64+0x33/0x40 [ 876.440642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 876.441825] RIP: 0033:0x7f11174d2b19 [ 876.442684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 876.446901] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 876.448660] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 876.450297] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 876.451944] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 876.453715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.455485] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 [ 876.457295] CPU: 1 PID: 6824 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 876.458626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 876.460238] Call Trace: [ 876.460751] dump_stack+0x107/0x167 [ 876.461464] should_fail.cold+0x5/0xa [ 876.462207] _copy_from_user+0x2e/0x1b0 [ 876.462984] io_copy_iov+0xbf/0x1c0 [ 876.463689] ? io_cancel_task_cb+0x80/0x80 [ 876.464513] ? kmalloc_order+0xfe/0x160 [ 876.465291] io_sqe_buffers_register+0x31d/0x880 [ 876.466217] ? io_sqd_handle_event+0x350/0x350 [ 876.467128] __do_sys_io_uring_register+0x1648/0x2fa0 [ 876.468144] ? io_recvmsg+0xd70/0xd70 [ 876.468880] ? fput_many+0x2f/0x1a0 [ 876.469583] ? ksys_write+0x1a9/0x260 [ 876.470327] ? __ia32_sys_read+0xb0/0xb0 [ 876.471119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 876.472146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 876.473147] do_syscall_64+0x33/0x40 [ 876.473869] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 876.474864] RIP: 0033:0x7f748a34ab19 [ 876.475583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 876.479094] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 876.480560] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 876.481920] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 876.483280] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 876.484763] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 876.486342] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 876.497165] FAULT_INJECTION: forcing a failure. [ 876.497165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.499356] CPU: 1 PID: 6832 Comm: syz-executor.7 Not tainted 5.10.247 #1 [ 876.500672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 876.502241] Call Trace: [ 876.502749] dump_stack+0x107/0x167 [ 876.503442] should_fail.cold+0x5/0xa [ 876.504183] _copy_to_user+0x2e/0x180 [ 876.504911] simple_read_from_buffer+0xcc/0x160 [ 876.505800] proc_fail_nth_read+0x198/0x230 [ 876.506622] ? proc_sessionid_read+0x230/0x230 [ 876.507488] ? security_file_permission+0xb1/0xe0 [ 876.508421] ? proc_sessionid_read+0x230/0x230 [ 876.509287] vfs_read+0x228/0x620 [ 876.509952] ksys_read+0x12d/0x260 [ 876.510626] ? vfs_write+0xb10/0xb10 [ 876.511336] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 876.512336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 876.513317] do_syscall_64+0x33/0x40 [ 876.514023] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 876.514991] RIP: 0033:0x7f25aeed869c [ 876.515694] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 876.519159] RSP: 002b:00007f25ac49b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 876.520588] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f25aeed869c [ 876.521916] RDX: 000000000000000f RSI: 00007f25ac49b1e0 RDI: 0000000000000004 [ 876.523244] RBP: 00007f25ac49b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 876.524580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.525914] R13: 00007ffffd55b23f R14: 00007f25ac49b300 R15: 0000000000022000 14:51:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 28) 14:51:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:51:33 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:51:33 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:51:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x8010, r0, 0x10000000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5069bf0b79fc99ea, 0x110, r0, 0x3e1d2000) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x72, 0xcc}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) unlink(&(0x7f0000000200)='./file0\x00') 14:51:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:51:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 4) [ 876.645458] FAULT_INJECTION: forcing a failure. [ 876.645458] name failslab, interval 1, probability 0, space 0, times 0 [ 876.648379] CPU: 0 PID: 6845 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 876.650078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 876.652153] Call Trace: [ 876.652822] dump_stack+0x107/0x167 [ 876.653732] should_fail.cold+0x5/0xa [ 876.654686] ? copy_mount_options+0x55/0x180 [ 876.655783] should_failslab+0x5/0x20 [ 876.656723] kmem_cache_alloc_trace+0x55/0x320 [ 876.657860] ? _copy_from_user+0xfb/0x1b0 [ 876.658900] copy_mount_options+0x55/0x180 [ 876.659965] __x64_sys_mount+0x1a8/0x300 [ 876.660976] ? copy_mnt_ns+0xa00/0xa00 [ 876.661951] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 876.663259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 876.664553] do_syscall_64+0x33/0x40 [ 876.665485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 876.666037] FAULT_INJECTION: forcing a failure. [ 876.666037] name failslab, interval 1, probability 0, space 0, times 0 [ 876.666753] RIP: 0033:0x7f11174d2b19 [ 876.666785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 876.674197] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 876.676096] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 876.677865] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 876.679632] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 876.681412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.683179] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 [ 876.684995] CPU: 1 PID: 6848 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 876.686156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 876.687559] Call Trace: [ 876.688036] dump_stack+0x107/0x167 [ 876.688749] should_fail.cold+0x5/0xa [ 876.689505] should_failslab+0x5/0x20 [ 876.690269] __kmalloc_track_caller+0x79/0x370 [ 876.691052] ? parse_opts.part.0+0x8e/0x340 [ 876.691784] kstrdup+0x36/0x70 [ 876.692334] parse_opts.part.0+0x8e/0x340 [ 876.693044] ? p9_fd_show_options+0x1c0/0x1c0 [ 876.693809] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 876.694699] ? quarantine_put+0x8b/0x1a0 [ 876.695381] ? trace_hardirqs_on+0x5b/0x180 [ 876.696126] ? kfree+0xd7/0x340 [ 876.696687] p9_fd_create+0x98/0x4a0 [ 876.697311] ? p9_conn_create+0x510/0x510 [ 876.698009] ? p9_client_create+0x798/0x1230 [ 876.698750] ? kfree+0xd7/0x340 [ 876.699306] ? do_raw_spin_unlock+0x4f/0x220 [ 876.700059] p9_client_create+0x7ff/0x1230 [ 876.700772] ? p9_client_flush+0x430/0x430 [ 876.701478] ? trace_hardirqs_on+0x5b/0x180 [ 876.702199] ? lockdep_init_map_type+0x2c7/0x780 [ 876.703001] ? __raw_spin_lock_init+0x36/0x110 [ 876.703768] v9fs_session_init+0x1dd/0x1680 [ 876.704492] ? lock_release+0x680/0x680 [ 876.705165] ? kmem_cache_alloc_trace+0x151/0x320 [ 876.705978] ? v9fs_show_options+0x690/0x690 [ 876.706721] ? trace_hardirqs_on+0x5b/0x180 [ 876.707444] ? kasan_unpoison_shadow+0x33/0x50 [ 876.708219] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 876.709076] v9fs_mount+0x79/0x8f0 [ 876.709669] ? v9fs_write_inode+0x60/0x60 [ 876.710360] legacy_get_tree+0x105/0x220 [ 876.711041] vfs_get_tree+0x8e/0x300 [ 876.711661] path_mount+0x1490/0x21e0 [ 876.712310] ? strncpy_from_user+0x9e/0x470 [ 876.713028] ? finish_automount+0xa90/0xa90 [ 876.713749] ? getname_flags.part.0+0x1dd/0x4f0 [ 876.714519] ? _copy_from_user+0xfb/0x1b0 [ 876.715211] __x64_sys_mount+0x282/0x300 [ 876.715881] ? copy_mnt_ns+0xa00/0xa00 [ 876.716533] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 876.717403] ? syscall_enter_from_user_mode+0x1d/0x50 [ 876.718260] do_syscall_64+0x33/0x40 [ 876.718877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 876.719727] RIP: 0033:0x7f9de321cb19 [ 876.720348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 876.723398] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 876.724673] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 876.725852] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 876.727032] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 876.728222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 876.729398] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 876.731388] 9pnet: Insufficient options for proto=fd 14:51:33 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 78) 14:51:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:51:33 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 876.795850] FAULT_INJECTION: forcing a failure. [ 876.795850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.797805] CPU: 1 PID: 6857 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 876.798874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 876.800175] Call Trace: [ 876.800592] dump_stack+0x107/0x167 [ 876.801161] should_fail.cold+0x5/0xa [ 876.801762] _copy_from_user+0x2e/0x1b0 [ 876.802385] io_copy_iov+0xbf/0x1c0 [ 876.802952] ? io_cancel_task_cb+0x80/0x80 [ 876.803613] ? kmalloc_order+0xfe/0x160 [ 876.804248] io_sqe_buffers_register+0x31d/0x880 [ 876.804994] ? io_sqd_handle_event+0x350/0x350 [ 876.805723] __do_sys_io_uring_register+0x1648/0x2fa0 [ 876.806541] ? io_recvmsg+0xd70/0xd70 [ 876.807139] ? fput_many+0x2f/0x1a0 [ 876.807708] ? ksys_write+0x1a9/0x260 [ 876.808314] ? __ia32_sys_read+0xb0/0xb0 [ 876.808953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 876.809769] ? syscall_enter_from_user_mode+0x1d/0x50 14:51:33 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 876.810574] do_syscall_64+0x33/0x40 [ 876.811305] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 876.812139] RIP: 0033:0x7f748a34ab19 [ 876.812713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 876.815573] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 876.816765] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 876.817802] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 876.818904] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 876.819935] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 876.821036] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:51:33 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 14:51:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:51:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x1) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x4008090) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000300)=0x3ff) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r2], 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0xcb6b7000) pwrite64(r0, &(0x7f0000000240)="6358df31d01ed901fafc4e5771a002aed6ef736d72919e14f9483ccd10ff27f343fdc0b08f2a9fbab39190d4d6081d6890dfdbea99fd9529137f7b7b738f6edfae82e92610e291cbd3ca1413394fc67b40fffe8b88e1dcd356e4b2bfbcc4d3532a872c7c661241d3376c1fca755a93ef51eb2eb57bf6a138a51a657b47bac5c6fdc579954054bbc7a3877773", 0x8c, 0xd85c) openat(r0, &(0x7f0000000100)='./file0\x00', 0x4000, 0x100) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000080)=""/125) r4 = syz_open_dev$vcsn(&(0x7f0000000340), 0x2, 0xa280) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000000380)=""/252) write$binfmt_elf64(r2, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x5d6) unlink(&(0x7f0000000200)='./file0\x00') 14:51:33 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 79) 14:51:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 876.920123] FAULT_INJECTION: forcing a failure. [ 876.920123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.921866] CPU: 1 PID: 6869 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 876.922833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 876.924003] Call Trace: [ 876.924373] dump_stack+0x107/0x167 [ 876.924865] should_fail.cold+0x5/0xa [ 876.925392] _copy_from_user+0x2e/0x1b0 [ 876.925936] io_copy_iov+0xbf/0x1c0 [ 876.926424] ? io_cancel_task_cb+0x80/0x80 [ 876.927004] ? kmalloc_order+0xfe/0x160 [ 876.927543] io_sqe_buffers_register+0x31d/0x880 [ 876.928196] ? io_sqd_handle_event+0x350/0x350 [ 876.928822] __do_sys_io_uring_register+0x1648/0x2fa0 [ 876.929521] ? io_recvmsg+0xd70/0xd70 [ 876.930031] ? io_schedule_timeout+0x140/0x140 [ 876.930650] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 876.931281] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 876.932015] ? ksys_write+0x1a9/0x260 [ 876.932541] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 876.933247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 876.933947] do_syscall_64+0x33/0x40 [ 876.934455] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 876.935149] RIP: 0033:0x7f748a34ab19 [ 876.935653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 876.938133] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 876.939147] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 876.940104] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 876.941061] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 876.942026] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 876.942987] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:51:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 29) 14:51:33 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:51:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:51:33 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:51:33 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 80) 14:51:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10f6e2, 0x80) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x1000072, 0xfffffffe, 0x0, 0x0, 0x2}) unlink(&(0x7f0000000200)='./file0\x00') chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 877.080707] FAULT_INJECTION: forcing a failure. [ 877.080707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.083567] CPU: 1 PID: 6882 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 877.085119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 877.086986] Call Trace: [ 877.087590] dump_stack+0x107/0x167 [ 877.088436] should_fail.cold+0x5/0xa [ 877.089323] _copy_from_user+0x2e/0x1b0 [ 877.090235] io_copy_iov+0xbf/0x1c0 [ 877.091066] ? io_cancel_task_cb+0x80/0x80 [ 877.092034] ? kmalloc_order+0xfe/0x160 [ 877.092955] io_sqe_buffers_register+0x31d/0x880 [ 877.094043] ? io_sqd_handle_event+0x350/0x350 [ 877.095120] __do_sys_io_uring_register+0x1648/0x2fa0 [ 877.096322] ? io_recvmsg+0xd70/0xd70 [ 877.097187] ? fput_many+0x2f/0x1a0 [ 877.098015] ? ksys_write+0x1a9/0x260 [ 877.098881] ? __ia32_sys_read+0xb0/0xb0 [ 877.099806] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 877.101004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 877.102169] do_syscall_64+0x33/0x40 [ 877.103012] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 877.104176] RIP: 0033:0x7f748a34ab19 [ 877.105017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 877.109299] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 877.111022] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 877.112635] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 877.114240] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 877.115845] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 877.117481] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 877.147408] FAULT_INJECTION: forcing a failure. [ 877.147408] name failslab, interval 1, probability 0, space 0, times 0 [ 877.150054] CPU: 0 PID: 6889 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 877.151611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 877.153481] Call Trace: [ 877.154078] dump_stack+0x107/0x167 [ 877.154905] should_fail.cold+0x5/0xa [ 877.155773] ? create_object.isra.0+0x3a/0xa30 [ 877.156814] should_failslab+0x5/0x20 [ 877.157677] kmem_cache_alloc+0x5b/0x310 [ 877.158589] ? legacy_get_tree+0x105/0x220 [ 877.159541] ? vfs_get_tree+0x8e/0x300 [ 877.160436] create_object.isra.0+0x3a/0xa30 [ 877.161426] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 877.162575] __kmalloc_track_caller+0x177/0x370 [ 877.163634] ? parse_opts.part.0+0x8e/0x340 [ 877.164624] kstrdup+0x36/0x70 [ 877.165355] parse_opts.part.0+0x8e/0x340 [ 877.166295] ? p9_fd_show_options+0x1c0/0x1c0 [ 877.167322] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 877.168509] ? quarantine_put+0x8b/0x1a0 [ 877.169433] ? trace_hardirqs_on+0x5b/0x180 [ 877.170408] ? kfree+0xd7/0x340 [ 877.171161] p9_fd_create+0x98/0x4a0 [ 877.172015] ? p9_conn_create+0x510/0x510 [ 877.172944] ? p9_client_create+0x798/0x1230 [ 877.173936] ? kfree+0xd7/0x340 [ 877.174676] ? do_raw_spin_unlock+0x4f/0x220 [ 877.175683] p9_client_create+0x7ff/0x1230 [ 877.176654] ? p9_client_flush+0x430/0x430 [ 877.177611] ? trace_hardirqs_on+0x5b/0x180 [ 877.178595] ? lockdep_init_map_type+0x2c7/0x780 [ 877.179688] ? __raw_spin_lock_init+0x36/0x110 [ 877.180740] v9fs_session_init+0x1dd/0x1680 [ 877.181722] ? lock_release+0x680/0x680 [ 877.182632] ? kmem_cache_alloc_trace+0x151/0x320 [ 877.183725] ? v9fs_show_options+0x690/0x690 [ 877.184738] ? trace_hardirqs_on+0x5b/0x180 [ 877.185719] ? kasan_unpoison_shadow+0x33/0x50 [ 877.186752] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 877.187900] v9fs_mount+0x79/0x8f0 [ 877.188718] ? v9fs_write_inode+0x60/0x60 [ 877.189654] legacy_get_tree+0x105/0x220 [ 877.190573] vfs_get_tree+0x8e/0x300 [ 877.191414] path_mount+0x1490/0x21e0 [ 877.192288] ? strncpy_from_user+0x9e/0x470 [ 877.193263] ? finish_automount+0xa90/0xa90 [ 877.194241] ? getname_flags.part.0+0x1dd/0x4f0 [ 877.195289] ? _copy_from_user+0xfb/0x1b0 [ 877.196245] __x64_sys_mount+0x282/0x300 [ 877.197165] ? copy_mnt_ns+0xa00/0xa00 [ 877.198049] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 877.199235] ? syscall_enter_from_user_mode+0x1d/0x50 [ 877.200412] do_syscall_64+0x33/0x40 [ 877.201258] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 877.202419] RIP: 0033:0x7f9de321cb19 [ 877.203260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 877.207416] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 877.209142] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 877.210758] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 877.212368] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 877.213974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 877.215584] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 891.478854] FAULT_INJECTION: forcing a failure. [ 891.478854] name failslab, interval 1, probability 0, space 0, times 0 [ 891.481434] CPU: 0 PID: 6894 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 891.482981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 891.484853] Call Trace: [ 891.485449] dump_stack+0x107/0x167 [ 891.486276] should_fail.cold+0x5/0xa [ 891.487144] ? create_object.isra.0+0x3a/0xa30 [ 891.488177] should_failslab+0x5/0x20 [ 891.489038] kmem_cache_alloc+0x5b/0x310 [ 891.489955] create_object.isra.0+0x3a/0xa30 [ 891.490946] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 891.491074] FAULT_INJECTION: forcing a failure. [ 891.491074] name failslab, interval 1, probability 0, space 0, times 0 [ 891.492103] kmem_cache_alloc_trace+0x151/0x320 [ 891.492124] ? _copy_from_user+0xfb/0x1b0 [ 891.492153] copy_mount_options+0x55/0x180 [ 891.496568] __x64_sys_mount+0x1a8/0x300 [ 891.497489] ? copy_mnt_ns+0xa00/0xa00 [ 891.498380] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 891.499569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 891.500741] do_syscall_64+0x33/0x40 [ 891.501577] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 891.502725] RIP: 0033:0x7f11174d2b19 [ 891.503563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.507692] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 891.509407] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 891.511008] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 891.512634] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 891.514240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.515842] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 [ 891.517476] CPU: 1 PID: 6899 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 891.518401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 891.519501] Call Trace: [ 891.519860] dump_stack+0x107/0x167 [ 891.520373] should_fail.cold+0x5/0xa [ 891.520886] should_failslab+0x5/0x20 [ 891.521395] __kmalloc_track_caller+0x79/0x370 [ 891.522007] ? match_number+0xaf/0x1d0 [ 891.522526] ? kfree+0xd7/0x340 [ 891.522974] kmemdup_nul+0x2d/0xa0 [ 891.523449] match_number+0xaf/0x1d0 [ 891.523947] ? match_u64+0x190/0x190 [ 891.524479] ? __kmalloc_track_caller+0x2c6/0x370 [ 891.525126] ? memcpy+0x39/0x60 [ 891.525575] parse_opts.part.0+0x1f3/0x340 [ 891.526140] ? p9_fd_show_options+0x1c0/0x1c0 [ 891.526744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 891.527443] ? trace_hardirqs_on+0x5b/0x180 [ 891.528021] ? kfree+0xd7/0x340 [ 891.528483] p9_fd_create+0x98/0x4a0 [ 891.528977] ? p9_conn_create+0x510/0x510 [ 891.529526] ? p9_client_create+0x798/0x1230 [ 891.530109] ? kfree+0xd7/0x340 [ 891.530548] ? do_raw_spin_unlock+0x4f/0x220 [ 891.531139] p9_client_create+0x7ff/0x1230 [ 891.531706] ? p9_client_flush+0x430/0x430 [ 891.532302] ? trace_hardirqs_on+0x5b/0x180 [ 891.532880] ? lockdep_init_map_type+0x2c7/0x780 [ 891.533550] ? __raw_spin_lock_init+0x36/0x110 [ 891.534161] v9fs_session_init+0x1dd/0x1680 [ 891.534744] ? lock_release+0x680/0x680 [ 891.535279] ? kmem_cache_alloc_trace+0x151/0x320 [ 891.535919] ? v9fs_show_options+0x690/0x690 14:51:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 5) 14:51:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20000, 0x2) ftruncate(r0, 0x0) 14:51:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:51:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 30) 14:51:48 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:51:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) signalfd(r0, &(0x7f00000000c0)={[0x3]}, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') chdir(&(0x7f0000000080)='./file0\x00') 14:51:48 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 891.536562] ? trace_hardirqs_on+0x5b/0x180 [ 891.537386] ? kasan_unpoison_shadow+0x33/0x50 [ 891.537998] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 891.538676] v9fs_mount+0x79/0x8f0 [ 891.539156] ? v9fs_write_inode+0x60/0x60 [ 891.539708] legacy_get_tree+0x105/0x220 [ 891.540276] vfs_get_tree+0x8e/0x300 [ 891.540774] path_mount+0x1490/0x21e0 [ 891.541286] ? strncpy_from_user+0x9e/0x470 [ 891.541860] ? finish_automount+0xa90/0xa90 [ 891.542439] ? getname_flags.part.0+0x1dd/0x4f0 [ 891.543057] ? _copy_from_user+0xfb/0x1b0 [ 891.543639] __x64_sys_mount+0x282/0x300 [ 891.544198] ? copy_mnt_ns+0xa00/0xa00 [ 891.544724] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 891.545423] ? syscall_enter_from_user_mode+0x1d/0x50 [ 891.546110] do_syscall_64+0x33/0x40 [ 891.546608] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 891.547294] RIP: 0033:0x7f9de321cb19 [ 891.547791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.550254] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 891.551313] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 891.552286] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 891.553277] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 891.554232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 891.555227] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 891.557008] 9pnet: Insufficient options for proto=fd 14:51:48 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 81) [ 891.572215] FAULT_INJECTION: forcing a failure. [ 891.572215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.574950] CPU: 0 PID: 6909 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 891.576497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 891.578341] Call Trace: [ 891.578935] dump_stack+0x107/0x167 [ 891.579756] should_fail.cold+0x5/0xa [ 891.580634] _copy_from_user+0x2e/0x1b0 [ 891.581530] io_copy_iov+0xbf/0x1c0 [ 891.582348] ? io_cancel_task_cb+0x80/0x80 [ 891.583291] ? kmalloc_order+0xfe/0x160 [ 891.584212] io_sqe_buffers_register+0x31d/0x880 [ 891.585284] ? io_sqd_handle_event+0x350/0x350 [ 891.586336] __do_sys_io_uring_register+0x1648/0x2fa0 [ 891.587515] ? io_recvmsg+0xd70/0xd70 [ 891.588381] ? fput_many+0x2f/0x1a0 [ 891.589199] ? ksys_write+0x1a9/0x260 [ 891.590064] ? __ia32_sys_read+0xb0/0xb0 [ 891.590989] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 891.592190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 891.593357] do_syscall_64+0x33/0x40 [ 891.594195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 891.595344] RIP: 0033:0x7f748a34ab19 [ 891.596189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.600301] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 891.602008] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 891.603607] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 891.605209] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 891.606798] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 891.608398] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:51:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:51:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) write$P9_RREADLINK(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10) unlink(&(0x7f0000000200)='./file0\x00') r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x7be8}}, './file0\x00'}) bind$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 14:51:48 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:51:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x341ac0, 0x50) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x41, 0x20) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) lseek(r1, 0xb274, 0x3) 14:51:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 31) 14:51:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:51:48 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 891.755442] FAULT_INJECTION: forcing a failure. [ 891.755442] name failslab, interval 1, probability 0, space 0, times 0 [ 891.758075] CPU: 1 PID: 6923 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 891.759609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 891.761477] Call Trace: [ 891.762076] dump_stack+0x107/0x167 [ 891.762900] should_fail.cold+0x5/0xa [ 891.763768] ? create_object.isra.0+0x3a/0xa30 [ 891.764801] should_failslab+0x5/0x20 [ 891.765664] kmem_cache_alloc+0x5b/0x310 [ 891.766583] create_object.isra.0+0x3a/0xa30 [ 891.767568] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 891.768727] __kmalloc_track_caller+0x177/0x370 [ 891.769772] ? match_number+0xaf/0x1d0 [ 891.770655] kmemdup_nul+0x2d/0xa0 [ 891.771469] match_number+0xaf/0x1d0 14:51:48 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 82) [ 891.772325] ? match_u64+0x190/0x190 [ 891.773356] ? __kmalloc_track_caller+0x2c6/0x370 [ 891.774452] ? memcpy+0x39/0x60 [ 891.775207] parse_opts.part.0+0x1f3/0x340 [ 891.776181] ? p9_fd_show_options+0x1c0/0x1c0 [ 891.777198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 891.778386] ? trace_hardirqs_on+0x5b/0x180 [ 891.779375] ? kfree+0xd7/0x340 [ 891.780140] p9_fd_create+0x98/0x4a0 [ 891.780981] ? p9_conn_create+0x510/0x510 [ 891.781918] ? p9_client_create+0x798/0x1230 [ 891.782927] ? kfree+0xd7/0x340 [ 891.783670] ? do_raw_spin_unlock+0x4f/0x220 [ 891.784689] p9_client_create+0x7ff/0x1230 [ 891.785653] ? p9_client_flush+0x430/0x430 [ 891.786616] ? trace_hardirqs_on+0x5b/0x180 [ 891.787597] ? lockdep_init_map_type+0x2c7/0x780 [ 891.788676] ? __raw_spin_lock_init+0x36/0x110 [ 891.789716] v9fs_session_init+0x1dd/0x1680 [ 891.790703] ? lock_release+0x680/0x680 [ 891.791624] ? kmem_cache_alloc_trace+0x151/0x320 [ 891.792736] ? v9fs_show_options+0x690/0x690 [ 891.793741] ? trace_hardirqs_on+0x5b/0x180 [ 891.794719] ? kasan_unpoison_shadow+0x33/0x50 [ 891.795753] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 891.796908] v9fs_mount+0x79/0x8f0 [ 891.797711] ? v9fs_write_inode+0x60/0x60 [ 891.798654] legacy_get_tree+0x105/0x220 [ 891.799578] vfs_get_tree+0x8e/0x300 [ 891.800437] path_mount+0x1490/0x21e0 [ 891.801315] ? strncpy_from_user+0x9e/0x470 [ 891.802289] ? finish_automount+0xa90/0xa90 [ 891.803264] ? getname_flags.part.0+0x1dd/0x4f0 [ 891.804327] ? _copy_from_user+0xfb/0x1b0 [ 891.805283] __x64_sys_mount+0x282/0x300 [ 891.806219] ? copy_mnt_ns+0xa00/0xa00 [ 891.807108] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 891.808314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 891.809490] do_syscall_64+0x33/0x40 [ 891.810329] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 891.811489] RIP: 0033:0x7f9de321cb19 [ 891.812348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.816502] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 891.818223] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 891.819847] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 891.821465] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 891.823069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 891.824681] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 891.877067] FAULT_INJECTION: forcing a failure. [ 891.877067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.879772] CPU: 1 PID: 6929 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 891.881323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 891.883187] Call Trace: [ 891.883799] dump_stack+0x107/0x167 [ 891.884648] should_fail.cold+0x5/0xa [ 891.885525] _copy_from_user+0x2e/0x1b0 [ 891.886434] io_copy_iov+0xbf/0x1c0 [ 891.887262] ? io_cancel_task_cb+0x80/0x80 [ 891.888234] ? kmalloc_order+0xfe/0x160 [ 891.889152] io_sqe_buffers_register+0x31d/0x880 [ 891.890249] ? io_sqd_handle_event+0x350/0x350 [ 891.891326] __do_sys_io_uring_register+0x1648/0x2fa0 [ 891.892533] ? io_recvmsg+0xd70/0xd70 [ 891.893403] ? fput_many+0x2f/0x1a0 [ 891.894234] ? ksys_write+0x1a9/0x260 [ 891.895111] ? __ia32_sys_read+0xb0/0xb0 [ 891.896046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 891.897262] ? syscall_enter_from_user_mode+0x1d/0x50 [ 891.898444] do_syscall_64+0x33/0x40 [ 891.899481] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 891.900667] RIP: 0033:0x7f748a34ab19 [ 891.901519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.905671] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 891.907390] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 891.909001] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 891.910616] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 891.912260] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 891.913881] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:52:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) 14:52:04 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 83) 14:52:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x622bb31d, 0xff, 0x6, 0xffc6, 0xffffffc1}) ftruncate(r0, 0x0) 14:52:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 32) 14:52:04 executing program 2: ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000080)={&(0x7f0000000240)=""/4096, 0x1000, 0xf787, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') 14:52:04 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:52:04 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x0, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:52:04 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 908.193732] FAULT_INJECTION: forcing a failure. [ 908.193732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.195416] CPU: 0 PID: 6948 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 908.196327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 908.197433] Call Trace: [ 908.197795] dump_stack+0x107/0x167 [ 908.198286] should_fail.cold+0x5/0xa [ 908.198797] _copy_from_user+0x2e/0x1b0 [ 908.199330] copy_mount_options+0x76/0x180 [ 908.199896] __x64_sys_mount+0x1a8/0x300 [ 908.200455] ? copy_mnt_ns+0xa00/0xa00 [ 908.200987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 908.201691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 908.202377] do_syscall_64+0x33/0x40 [ 908.202886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 908.203575] RIP: 0033:0x7f11174d2b19 [ 908.204072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 908.206526] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 908.207548] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 908.208508] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 908.209467] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 908.210417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.211375] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 14:52:04 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 908.237648] FAULT_INJECTION: forcing a failure. [ 908.237648] name failslab, interval 1, probability 0, space 0, times 0 [ 908.239096] CPU: 0 PID: 6952 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 908.239995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 908.241085] Call Trace: [ 908.241430] dump_stack+0x107/0x167 [ 908.241907] should_fail.cold+0x5/0xa [ 908.242420] ? create_object.isra.0+0x3a/0xa30 [ 908.243032] should_failslab+0x5/0x20 [ 908.243534] kmem_cache_alloc+0x5b/0x310 [ 908.244070] create_object.isra.0+0x3a/0xa30 [ 908.244302] FAULT_INJECTION: forcing a failure. [ 908.244302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.244654] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 908.244671] __kmalloc_track_caller+0x177/0x370 [ 908.244685] ? match_number+0xaf/0x1d0 [ 908.244700] kmemdup_nul+0x2d/0xa0 [ 908.244721] match_number+0xaf/0x1d0 [ 908.250026] ? match_u64+0x190/0x190 [ 908.250533] ? __kmalloc_track_caller+0x2c6/0x370 [ 908.251190] ? memcpy+0x39/0x60 [ 908.251642] parse_opts.part.0+0x1f3/0x340 [ 908.252217] ? p9_fd_show_options+0x1c0/0x1c0 [ 908.252811] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 908.253523] ? trace_hardirqs_on+0x5b/0x180 [ 908.254110] ? kfree+0xd7/0x340 [ 908.254564] p9_fd_create+0x98/0x4a0 [ 908.255065] ? p9_conn_create+0x510/0x510 [ 908.255621] ? p9_client_create+0x798/0x1230 [ 908.256214] ? kfree+0xd7/0x340 [ 908.256665] ? do_raw_spin_unlock+0x4f/0x220 [ 908.257261] p9_client_create+0x7ff/0x1230 [ 908.257836] ? p9_client_flush+0x430/0x430 [ 908.258407] ? trace_hardirqs_on+0x5b/0x180 [ 908.258990] ? lockdep_init_map_type+0x2c7/0x780 [ 908.259631] ? __raw_spin_lock_init+0x36/0x110 [ 908.260253] v9fs_session_init+0x1dd/0x1680 [ 908.260843] ? lock_release+0x680/0x680 [ 908.261386] ? kmem_cache_alloc_trace+0x151/0x320 [ 908.262037] ? v9fs_show_options+0x690/0x690 [ 908.262637] ? trace_hardirqs_on+0x5b/0x180 [ 908.263221] ? kasan_unpoison_shadow+0x33/0x50 [ 908.263836] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 908.264528] v9fs_mount+0x79/0x8f0 [ 908.265008] ? v9fs_write_inode+0x60/0x60 [ 908.265567] legacy_get_tree+0x105/0x220 [ 908.266120] vfs_get_tree+0x8e/0x300 [ 908.266623] path_mount+0x1490/0x21e0 [ 908.267143] ? strncpy_from_user+0x9e/0x470 [ 908.267726] ? finish_automount+0xa90/0xa90 [ 908.268314] ? getname_flags.part.0+0x1dd/0x4f0 [ 908.268941] ? _copy_from_user+0xfb/0x1b0 [ 908.269507] __x64_sys_mount+0x282/0x300 [ 908.270055] ? copy_mnt_ns+0xa00/0xa00 [ 908.270581] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 908.271290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 908.271987] do_syscall_64+0x33/0x40 [ 908.272512] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 908.273203] RIP: 0033:0x7f9de321cb19 [ 908.273707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 908.276180] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 908.277201] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 908.278159] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 908.279116] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 908.280072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 908.281038] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 908.282027] CPU: 1 PID: 6953 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 908.283610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 908.285554] Call Trace: [ 908.286172] dump_stack+0x107/0x167 [ 908.287019] should_fail.cold+0x5/0xa [ 908.287915] _copy_from_user+0x2e/0x1b0 [ 908.288846] io_copy_iov+0xbf/0x1c0 [ 908.289686] ? io_cancel_task_cb+0x80/0x80 [ 908.290661] ? kmalloc_order+0xfe/0x160 [ 908.291591] io_sqe_buffers_register+0x31d/0x880 [ 908.292702] ? io_sqd_handle_event+0x350/0x350 [ 908.293784] __do_sys_io_uring_register+0x1648/0x2fa0 [ 908.294990] ? io_recvmsg+0xd70/0xd70 [ 908.295873] ? fput_many+0x2f/0x1a0 [ 908.296721] ? ksys_write+0x1a9/0x260 [ 908.297602] ? __ia32_sys_read+0xb0/0xb0 [ 908.298549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 908.299762] ? syscall_enter_from_user_mode+0x1d/0x50 [ 908.300967] do_syscall_64+0x33/0x40 [ 908.301830] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 908.303017] RIP: 0033:0x7f748a34ab19 [ 908.303875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 908.308111] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 908.309864] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 908.311498] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 908.313142] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 908.314778] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 908.316425] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:52:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 7) 14:52:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 33) 14:52:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) getdents64(r1, &(0x7f0000000080)=""/202, 0xca) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x74, 0x0, 0xdffffffd, 0xffffffff}) ftruncate(r0, 0x0) 14:52:18 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x0, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:52:18 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:52:18 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 84) 14:52:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, 0x4, &(0x7f0000000380)=[{&(0x7f0000000100)="0423c25c270d646b084e07d4ac9dbc2cb1661753e4137ee65fb5dda9c12798c77138ea4aef80b6efcb2c", 0x37, 0x9}, {&(0x7f0000000140)="ebd817a6ee77b8b6836f6c56e4cffcaf254a946c5d4dc2725601bfbdcbbb4796b0a1334d2b356edd2075f33530092ada6e3b4d65dda4c51b45771e69d7f1db011ae649483de1e1608df87771fdde80001efe2e8c7dbc75a7c1c4991c35749b400c223d1123ceeb46a4cfd6d92ce506a988230c8ff722149cb9055c8fb6aab458020633029f1f4cb50264c32a10032551bcb7a478e49bf9bc6143dcf70bfc4e261b23dc11", 0xffffffffffffff59, 0x100000001}, {&(0x7f0000000240)="eaaa5c8845a7fe9af97f89e1332080b40f9db4d0a135d90a9fc03d014d25f339ea40a64af75a7565429b137b7b03b430bfe63645b3ac2dafc44b8deb9f0918905aa262f407904d8ea920a45aee79cf9ca64653d21587b827f61d9f9fff22a9aff572", 0x62, 0xb0bc}, {&(0x7f00000002c0)="f70fd7bc107ee589e797aaea8d3a6c41d3ca46857fafe5deec9f3febd0d6dd5348a741bdf80efc0f41f9c6c7e9b6c3067063f7d8008c15d4a1262331fecde6c4933c8fe0b3bbe3f1f5a962f92e0eb72cbcd8c340e6308df847449926f36d7f135979e2b7ebc6f89e3238c2e19ade5aa04e7b8d5d47a3319707ac026dc7d72c6b6d5c831df7780da9c9cb63e40edd1b92252345ea579cb1a0aa573881c333ad", 0x9f, 0x200}], 0x1000042, &(0x7f0000000400)=ANY=[@ANYBLOB='nodots,dots,dots,nodots,nodotsDnodots,nodots00000000000000000000007,fowner=\x00'/90, @ANYRESDEC, @ANYBLOB=',\x00']) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000004c0)={0x72}) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000480)) unlink(&(0x7f0000000200)='./file0\x00') 14:52:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 921.965063] FAULT_INJECTION: forcing a failure. [ 921.965063] name failslab, interval 1, probability 0, space 0, times 0 [ 921.966389] CPU: 1 PID: 6968 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 921.967165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 921.968105] Call Trace: [ 921.968414] dump_stack+0x107/0x167 [ 921.968850] should_fail.cold+0x5/0xa [ 921.969287] ? getname_flags.part.0+0x50/0x4f0 [ 921.969811] should_failslab+0x5/0x20 [ 921.970252] kmem_cache_alloc+0x5b/0x310 [ 921.970730] getname_flags.part.0+0x50/0x4f0 [ 921.971255] ? _copy_from_user+0xfb/0x1b0 [ 921.971747] user_path_at_empty+0xa1/0x100 [ 921.972250] __x64_sys_mount+0x1e9/0x300 [ 921.972731] ? copy_mnt_ns+0xa00/0xa00 [ 921.973191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 921.973816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 921.974407] do_syscall_64+0x33/0x40 [ 921.974835] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 921.975427] RIP: 0033:0x7f11174d2b19 [ 921.975855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 921.977994] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 921.978890] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 921.979715] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 921.980570] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 921.981410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.982252] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 [ 921.986295] FAULT_INJECTION: forcing a failure. [ 921.986295] name failslab, interval 1, probability 0, space 0, times 0 [ 921.989260] CPU: 0 PID: 6965 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 921.991029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 921.993287] Call Trace: [ 921.993971] dump_stack+0x107/0x167 [ 921.995088] should_fail.cold+0x5/0xa [ 921.996260] should_failslab+0x5/0x20 [ 921.997309] __kmalloc_track_caller+0x79/0x370 [ 921.998497] ? match_number+0xaf/0x1d0 [ 921.999494] ? kfree+0xd7/0x340 [ 922.000346] kmemdup_nul+0x2d/0xa0 [ 922.001278] match_number+0xaf/0x1d0 [ 922.002240] ? match_u64+0x190/0x190 [ 922.003197] ? __kmalloc_track_caller+0x2c6/0x370 [ 922.004464] ? memcpy+0x39/0x60 [ 922.005344] parse_opts.part.0+0x1f3/0x340 [ 922.006458] ? p9_fd_show_options+0x1c0/0x1c0 [ 922.007619] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 922.008991] ? trace_hardirqs_on+0x5b/0x180 [ 922.010081] ? kfree+0xd7/0x340 [ 922.010851] p9_fd_create+0x98/0x4a0 [ 922.011707] ? p9_conn_create+0x510/0x510 [ 922.012676] ? p9_client_create+0x798/0x1230 [ 922.013684] ? kfree+0xd7/0x340 [ 922.014442] ? do_raw_spin_unlock+0x4f/0x220 [ 922.015461] p9_client_create+0x7ff/0x1230 [ 922.016456] ? p9_client_flush+0x430/0x430 [ 922.017437] ? trace_hardirqs_on+0x5b/0x180 [ 922.018435] ? lockdep_init_map_type+0x2c7/0x780 [ 922.019540] ? __raw_spin_lock_init+0x36/0x110 [ 922.020784] v9fs_session_init+0x1dd/0x1680 [ 922.021778] ? lock_release+0x680/0x680 [ 922.022703] ? kmem_cache_alloc_trace+0x151/0x320 [ 922.023834] ? v9fs_show_options+0x690/0x690 [ 922.024936] ? trace_hardirqs_on+0x5b/0x180 [ 922.025931] ? kasan_unpoison_shadow+0x33/0x50 [ 922.027002] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 922.028183] v9fs_mount+0x79/0x8f0 [ 922.029034] ? v9fs_write_inode+0x60/0x60 [ 922.030015] legacy_get_tree+0x105/0x220 [ 922.031142] vfs_get_tree+0x8e/0x300 [ 922.032039] path_mount+0x1490/0x21e0 [ 922.032993] ? strncpy_from_user+0x9e/0x470 [ 922.034010] ? finish_automount+0xa90/0xa90 [ 922.035001] ? getname_flags.part.0+0x1dd/0x4f0 [ 922.036100] ? _copy_from_user+0xfb/0x1b0 [ 922.037096] __x64_sys_mount+0x282/0x300 [ 922.038174] ? copy_mnt_ns+0xa00/0xa00 [ 922.039091] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 922.040308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 922.041511] do_syscall_64+0x33/0x40 [ 922.042369] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 922.043550] RIP: 0033:0x7f9de321cb19 [ 922.044493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 922.048783] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 922.050559] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 922.052291] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 922.054261] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 922.055510] FAULT_INJECTION: forcing a failure. [ 922.055510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.055917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 922.055931] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 922.057605] 9pnet: Insufficient options for proto=fd [ 922.058067] CPU: 1 PID: 6974 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 922.061568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 922.062545] Call Trace: [ 922.062864] dump_stack+0x107/0x167 [ 922.063285] should_fail.cold+0x5/0xa [ 922.063730] _copy_from_user+0x2e/0x1b0 [ 922.064190] io_copy_iov+0xbf/0x1c0 [ 922.064624] ? io_cancel_task_cb+0x80/0x80 [ 922.065123] ? kmalloc_order+0xfe/0x160 [ 922.065598] io_sqe_buffers_register+0x31d/0x880 [ 922.066158] ? io_sqd_handle_event+0x350/0x350 [ 922.066707] __do_sys_io_uring_register+0x1648/0x2fa0 [ 922.067319] ? io_recvmsg+0xd70/0xd70 [ 922.067770] ? fput_many+0x2f/0x1a0 [ 922.068196] ? ksys_write+0x1a9/0x260 [ 922.068659] ? __ia32_sys_read+0xb0/0xb0 [ 922.069144] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 922.069759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 922.070355] do_syscall_64+0x33/0x40 [ 922.070794] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 922.071396] RIP: 0033:0x7f748a34ab19 [ 922.071838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 922.073956] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 922.074829] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 922.075642] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 922.076458] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 922.077273] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 922.078088] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 922.095660] FAULT_INJECTION: forcing a failure. [ 922.095660] name failslab, interval 1, probability 0, space 0, times 0 [ 922.096978] CPU: 1 PID: 6984 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 922.097753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 922.098682] Call Trace: [ 922.098982] dump_stack+0x107/0x167 [ 922.099400] should_fail.cold+0x5/0xa [ 922.099833] ? create_object.isra.0+0x3a/0xa30 [ 922.100354] should_failslab+0x5/0x20 [ 922.100802] kmem_cache_alloc+0x5b/0x310 [ 922.101266] create_object.isra.0+0x3a/0xa30 [ 922.101771] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 922.102349] kmem_cache_alloc+0x159/0x310 [ 922.102828] getname_flags.part.0+0x50/0x4f0 [ 922.103327] ? _copy_from_user+0xfb/0x1b0 [ 922.103798] user_path_at_empty+0xa1/0x100 [ 922.104278] __x64_sys_mount+0x1e9/0x300 [ 922.104747] ? copy_mnt_ns+0xa00/0xa00 [ 922.105200] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 922.105797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 922.106383] do_syscall_64+0x33/0x40 [ 922.106815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 922.107398] RIP: 0033:0x7f11174d2b19 [ 922.107831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 922.109929] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 922.110797] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 922.111610] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 922.112420] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 922.113237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:52:18 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x0, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:52:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 8) [ 922.114050] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 14:52:18 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:52:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 34) [ 922.167231] FAULT_INJECTION: forcing a failure. [ 922.167231] name failslab, interval 1, probability 0, space 0, times 0 [ 922.168621] CPU: 1 PID: 6988 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 922.169430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 922.170415] Call Trace: [ 922.170736] dump_stack+0x107/0x167 [ 922.171165] should_fail.cold+0x5/0xa [ 922.171618] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 922.172228] should_failslab+0x5/0x20 [ 922.172690] kmem_cache_alloc+0x5b/0x310 [ 922.173172] p9_client_prepare_req.part.0+0x3a/0xac0 [ 922.173774] ? do_raw_spin_lock+0x121/0x260 [ 922.174279] p9_client_rpc+0x220/0x1370 [ 922.174734] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 922.175342] ? unix_write_space+0x3f0/0x3f0 [ 922.175841] ? sock_poll+0x165/0x510 [ 922.176264] ? kernel_sendpage+0xd0/0xd0 [ 922.176752] ? p9_fd_poll+0x1e0/0x2c0 [ 922.177201] ? p9_fd_create+0x357/0x4a0 [ 922.177661] ? p9_conn_create+0x510/0x510 [ 922.178132] ? p9_client_create+0x798/0x1230 [ 922.178628] ? kfree+0xd7/0x340 [ 922.178999] ? do_raw_spin_unlock+0x4f/0x220 [ 922.179502] p9_client_create+0xa76/0x1230 [ 922.179983] ? p9_client_flush+0x430/0x430 [ 922.180468] ? trace_hardirqs_on+0x5b/0x180 [ 922.180963] ? lockdep_init_map_type+0x2c7/0x780 [ 922.181499] ? __raw_spin_lock_init+0x36/0x110 [ 922.182026] v9fs_session_init+0x1dd/0x1680 [ 922.182513] ? lock_release+0x680/0x680 [ 922.182984] ? kmem_cache_alloc_trace+0x151/0x320 [ 922.183541] ? v9fs_show_options+0x690/0x690 [ 922.184059] ? trace_hardirqs_on+0x5b/0x180 [ 922.184570] ? kasan_unpoison_shadow+0x33/0x50 [ 922.185102] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 922.185695] v9fs_mount+0x79/0x8f0 [ 922.186100] ? v9fs_write_inode+0x60/0x60 [ 922.186589] legacy_get_tree+0x105/0x220 [ 922.187070] vfs_get_tree+0x8e/0x300 [ 922.187508] path_mount+0x1490/0x21e0 [ 922.187956] ? strncpy_from_user+0x9e/0x470 [ 922.188469] ? finish_automount+0xa90/0xa90 [ 922.188981] ? getname_flags.part.0+0x1dd/0x4f0 [ 922.189526] ? _copy_from_user+0xfb/0x1b0 [ 922.190016] __x64_sys_mount+0x282/0x300 [ 922.190494] ? copy_mnt_ns+0xa00/0xa00 [ 922.190954] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 922.191574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 922.192181] do_syscall_64+0x33/0x40 [ 922.192629] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 922.193215] RIP: 0033:0x7f9de321cb19 [ 922.193643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 922.195778] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 922.196673] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 922.197480] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 922.198289] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 922.199098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 922.199906] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 14:52:33 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 85) 14:52:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:52:33 executing program 2: r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x8000, 0x8, &(0x7f0000001740)=[{&(0x7f0000000380)="1c02c7e2651123aa47c1fc4448dc9f789772614e796bae8e9f5710c4968f6df7f3859a0c", 0x24, 0x7}, {&(0x7f00000003c0)="309509d00cf5b74d8a2165ddb94de5f04ed3f11108d957b729dca5e562c34436f465da4392ab9ca0df346a003810c1d7a308b1405b33e1510e0adf4c3f2f27e51d3465ebe4e9e10fcbf2409c28b153542722c638b881cd13d5b1eb9fbc607061f0f7e5bf778d1b6e4c3207903cf5", 0x6e, 0xe86}, {&(0x7f0000000440)="29be9b006378f99d6184ba5e1ae0edb144fc02c030b7ad8c21cebd09abe9329fd78489bcd187606624da37d333d3ec0b3ebc7a9398b34d1e6682aa7f22d0331e9aa2", 0x42, 0x1}, {&(0x7f00000004c0)="1f9795efecfe2814af153dd60435e3ddc8d31f13118914c50a6bf4aba5b50a1af85ede425fbd9e89fc6c6c387d9d5603bc9dd7eabd37ad981013e88e0ba8f2b46e525608a6f02a9d7476ff593f80d951ec32f8ba000dc70e30f92e63243c429b1e1eca1031ce3fefc4e247fc287fc7a875d6b878f25281e3d826d6a5575933a684ab6a07a2263610ccc8b2533d9c1e3059de09a469c28bdee6f856dd92eaa2ab185dd2f51af5f94401d4dc04f2afd57b2fa6928ac539", 0xbe, 0x166e}, {&(0x7f0000000580)="898d54d5fb986a4df5160538fb112c1eb1caf2022662f1461508977bd821882b76426c7c4985f29e437dca630a011afdde78b682ef45f258f774cc2f9dca57bdabce58aecd9f8cb2d3ad0fae60fb8d53554a02c5251eb744a43ed1e4f77e3c45b58e6e6fd201c83af458ec7d7abc892f547661907bf8e10ce462dc8a558795f208f74b", 0x83, 0x4}, {&(0x7f0000000640)="770157402d891508e2023178422e8e45b8f4214eec62ca0ec378", 0x1a, 0x5}, {&(0x7f0000000680)="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", 0x1000, 0x3}, {&(0x7f0000001680)="2c665a68c9daca9546859146dff9b7f99e632d693af7ba6be4e254296f966be8a8d4f750de3d858fa4d6acd1349e80c54291f40773885532ea3a0bfc880fe745ab64f582d1530d265f3adbd630db3feb204d7ab0a2932b04be7e666b617c3dccb27d24db5447d24b0c5cfa3629559b8defd2e6583d9c3c2848bd6612ab70823906c1854d67", 0x85, 0x2}], 0x22004, &(0x7f0000001800)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@fsname={'fsname', 0x3d, '\x00'}}]}) openat(r2, &(0x7f0000001840)='./file0\x00', 0x10800, 0x70) unlink(&(0x7f0000000200)='./file0\x00') connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xe634, @private1, 0x72b}, 0x1c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x4010, r0, 0x768ce000) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000240)={0x0, 0xfb, 0xf2, 0x4, 0x1, "4bd8fe28f5e7379a05a217c5bb837280", "345fa6e542f9f26ca41f4972cfe1a2b8c646f354bfbdbdd307fd6cf64a3baaa3b984d9a9cf1b0516416a384e57f03b0cbc61742c312c23f064354f65193eafadcb4eab43ff423bac682db94e771396526f9a97802723377a05d483188ebc2d1093e8457440021905d64a2173fb0aa88463d15f5353c7bff30d9282a0b3d90440e34f1c59e6193af93896e97d39562924d98cfd6c6d173181e0b569e3259c36b26dd5391f8e30f428940df2495967edbb4e5cc178b375eaecf8d1d5077f145b18834e1b3b4382e7f67051d7e93eee4c5974f87769640d62078e734b983b"}, 0xf2, 0x1) 14:52:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 35) 14:52:33 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:52:33 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:52:33 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) r2 = getpid() r3 = getpgrp(0x0) pidfd_open(r3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000002780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002740)={&(0x7f0000000100)={0x263c, 0x17, 0x703, 0x70bd2d, 0x25dfdbfd, {0x17}, [@generic, @nested={0x12a4, 0x79, 0x0, 0x1, [@typed={0x14, 0x31, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0xc, 0x39, 0x0, 0x0, @u64=0x5}, @generic="9b88c48faefd7afb7cd3600bce0138303c761bf2357c7af9667ecbe1dec3498a12b1f354caee92eb28c04d479452259c4e7d644677bcff7be0eb7e8ee9d9cc0e7660531139ccc52416f39ef5e8941525d84acd5b10575af1ef446bf65b944c4322b28ffd22b025495ba352cf29e6e382cfb9788bb34d834e3cf5e2cb56ef9a827ca8868bc7fa06aa81322156510bd46b87ea03bbd6b96b38f6a1cf1712733f320046a07b2e01573d72e1831cd55781f392b5dd1d13c505a0359ddaae8013a77ca6", @generic="96efbdfc34e4f30d8f00866fe60216498229ffd3eddd5be22138d2ae7abe66baa5d1d30b6c1b9e31cd3413deff93ce1f5ec4486005919603e5f19644a78820e099550551bc93c4107ccc4123bcca429184069ac7d8777b5ff7420d8f30a7115796a0e5", @typed={0x8, 0x75, 0x0, 0x0, @pid=r2}, @generic, @generic="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", @generic="4eb73eeb31bfc458acb4fbd389e2cdd79cfad9d0fe9cc5bb6ea2791ea53d9e13e30081cfb2e14b6377093b581a57e5a2eb3ad5f5a1513a2af6b9d5cdb145bbb96292c1a2308f5f8e4c53ecee86e63ceaaf9bff674f1c065fcea7973fc8db47eeecb6c24d76baab8c31c50992717701c457eb63c2ac6d41171578ce28d611e4a65e5cd1e4bfba098dc5a2950c712e5c86511286e801e7328aebd5493bd3c2cee9225075a6834f58824705b78a577a64ad446a5b56f65263aaea24cee5d82712b2dced6ba8c92ace16dfb18daa80d67eccff967c2a02b17b7c7e838be0bef38134c5f35caf337f59d506d1", @generic="5e4f80b3441ca98d242b3a7bc17109a516fb3a54da63a62d2b2158bddb84da2fc2939f881e90b50a7ef0bd3510292667f35cb63dedd72790b1a697d770a923c8ad52bf87c35ff5e3ef8981441d2dcbd4d4ec3c2b6b146b50138264277853d05d9ac8f636d9b44f02250c"]}, @generic="440c1072b5cfc1c278eaf2dc7cd7a1404d5bbb69a683c203e884ea81462f1bbe40d6a9766902ebb4ee7a873c355373586dd2a4f6f50e8520b602b919772d493a8a9b8292d0b9af2515c05facfbd334baad2fd7df0b6fe5b9b485a7d3832d78976d52110b8bf79c9215fc8ece231ff65359cbaf5dfb5d7c7a8a009ed48fb9dd923ae4d9ebe9b90f0361c78bf5c5bbbf4159a36f9464b925ee34cdbf4d460585a7e0eb6b38e62b6858d5f02132bb9b0e70a3cfbe", @nested={0x8c, 0x34, 0x0, 0x1, [@typed={0x88, 0x25, 0x0, 0x0, @binary="814eea4e8c6e2ef8e6975610e541f0f75e12e28ae504515563fbb40a65d53b891cbbbd403ba50b680239bc38b301204c77c33bea0566d18417ad75c4e60ec77eb9dd8af6e57b811ca80b4c86ce5e88345895559b7ddedf603ebcea7535a44e4bfcf3bc9f4973a3e2c2e44c5fa33cee187140110305b913273436b7983e157f444e0d0666"}]}, @nested={0x1197, 0xa, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @ipv4=@remote}, @generic="169fef9832a9fd6f4da409d32c12079c4cf6083800290c2ee01d368317c5406a9c2b0befc135eb72d1bbf636ecb3603f008e821043c6c0090a3c7546b715c405d05c000c8d2fd6933c21babc7fdb4501a074368256ababd38bd4b530c3f3c29656a353a1fe47a5d19523ccc8390204dacb0d80ef62bdd9f40644649ac5fd301aadf44453d109a7175e978a017605dd2dc6e552a146bddd9d6365df2278095247151ac8fa710c353e2bcf64ff85b4c906b05ed8d7375a96e373178004200bc93e79632a319fe8021cdf58252dd090192188741d60df0e2df8b7b0b7be52", @generic="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", @generic="9c31be273b736e18c491b1914e6026bac25e29af59815b398a8aebbfb51071615755a2ed41e0ccfb67cd673bec1bfade3974d427b97c0ba8a510957ad2c4925f8adc867a58d7a917da4a25a83a103c5f47360ff28a093830f5a6145761834986ed858f2414ce938936a53941980ff82a3fb527b45baeea7fa055c1d8a4d05690e72a721cfe4c2be59c2318433c710dc9016e2b869e07896879abd0e601aaa35b474262893c0b476591c28e39fbee"]}, @generic="00f91622c9dc9d133897eeaf7fb672fda4d79c8dac7b2f5963d7951e1e839e6c2292ae2f2a8a761f8f1b6502adbedbad6e40fc6f93d23e7d89bc3d1cd605e3bfd4dd13f213900e6a56f5736aae34c25bcfc314afa082f4e9a4b83af33dbbdb2e113e89eee0b3221fbcdd1ae562a669b6c1ad0edcb5691e7dec3f7b369eb239af49131997412263c58762a510ec401787266caecf46db78d2b001e81d307c", @nested={0xc, 0x37, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @pid=r3}]}]}, 0x263c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) ftruncate(r0, 0x0) [ 937.248051] FAULT_INJECTION: forcing a failure. [ 937.248051] name failslab, interval 1, probability 0, space 0, times 0 [ 937.250681] CPU: 1 PID: 7011 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 937.252216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 937.254092] Call Trace: [ 937.254684] dump_stack+0x107/0x167 [ 937.255498] should_fail.cold+0x5/0xa [ 937.256356] ? create_object.isra.0+0x3a/0xa30 [ 937.257380] should_failslab+0x5/0x20 [ 937.258228] kmem_cache_alloc+0x5b/0x310 [ 937.259129] ? p9_fd_show_options+0x1c0/0x1c0 [ 937.260137] create_object.isra.0+0x3a/0xa30 [ 937.261119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 937.262260] kmem_cache_alloc_trace+0x151/0x320 [ 937.263315] p9_fd_create+0x161/0x4a0 [ 937.264173] ? p9_conn_create+0x510/0x510 [ 937.265116] ? p9_client_create+0x798/0x1230 [ 937.266097] ? kfree+0xd7/0x340 [ 937.266828] ? do_raw_spin_unlock+0x4f/0x220 [ 937.267810] p9_client_create+0x7ff/0x1230 [ 937.268775] ? p9_client_flush+0x430/0x430 [ 937.269724] ? trace_hardirqs_on+0x5b/0x180 [ 937.270683] ? lockdep_init_map_type+0x2c7/0x780 [ 937.271739] ? __raw_spin_lock_init+0x36/0x110 [ 937.272777] v9fs_session_init+0x1dd/0x1680 [ 937.273750] ? lock_release+0x680/0x680 [ 937.274644] ? kmem_cache_alloc_trace+0x151/0x320 [ 937.275719] ? v9fs_show_options+0x690/0x690 [ 937.276717] ? trace_hardirqs_on+0x5b/0x180 [ 937.277684] ? kasan_unpoison_shadow+0x33/0x50 [ 937.278702] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 937.279838] v9fs_mount+0x79/0x8f0 [ 937.280640] ? v9fs_write_inode+0x60/0x60 [ 937.281561] legacy_get_tree+0x105/0x220 [ 937.282476] vfs_get_tree+0x8e/0x300 [ 937.283305] path_mount+0x1490/0x21e0 [ 937.284163] ? strncpy_from_user+0x9e/0x470 [ 937.285129] ? finish_automount+0xa90/0xa90 [ 937.286089] ? getname_flags.part.0+0x1dd/0x4f0 14:52:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 9) [ 937.287127] ? _copy_from_user+0xfb/0x1b0 [ 937.288276] __x64_sys_mount+0x282/0x300 [ 937.289187] ? copy_mnt_ns+0xa00/0xa00 [ 937.290058] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 937.291227] ? syscall_enter_from_user_mode+0x1d/0x50 [ 937.292375] do_syscall_64+0x33/0x40 [ 937.293233] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 937.294397] RIP: 0033:0x7f9de321cb19 [ 937.295228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 937.299358] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 937.301063] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 937.302658] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 937.304269] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 937.305878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 937.307479] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 937.312420] FAULT_INJECTION: forcing a failure. [ 937.312420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.316121] CPU: 1 PID: 7014 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 937.317665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 937.319523] Call Trace: [ 937.320118] dump_stack+0x107/0x167 [ 937.320948] should_fail.cold+0x5/0xa [ 937.321809] _copy_from_user+0x2e/0x1b0 [ 937.322704] io_copy_iov+0xbf/0x1c0 [ 937.323517] ? io_cancel_task_cb+0x80/0x80 [ 937.324465] ? kmalloc_order+0xfe/0x160 [ 937.325372] io_sqe_buffers_register+0x31d/0x880 [ 937.326443] ? io_sqd_handle_event+0x350/0x350 [ 937.327494] __do_sys_io_uring_register+0x1648/0x2fa0 [ 937.328675] ? io_recvmsg+0xd70/0xd70 [ 937.329528] ? fput_many+0x2f/0x1a0 [ 937.330342] ? ksys_write+0x1a9/0x260 [ 937.331200] ? __ia32_sys_read+0xb0/0xb0 [ 937.332117] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 937.333297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 937.334453] do_syscall_64+0x33/0x40 [ 937.335297] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 937.336441] RIP: 0033:0x7f748a34ab19 [ 937.337280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 937.341436] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 937.343144] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 937.344761] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 937.346366] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 937.347969] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 937.349573] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 937.360324] FAULT_INJECTION: forcing a failure. [ 937.360324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.363047] CPU: 1 PID: 7016 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 937.364583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 937.366444] Call Trace: [ 937.367040] dump_stack+0x107/0x167 [ 937.367862] should_fail.cold+0x5/0xa [ 937.368742] strncpy_from_user+0x34/0x470 [ 937.369676] getname_flags.part.0+0x95/0x4f0 [ 937.370677] ? _copy_from_user+0xfb/0x1b0 [ 937.371613] user_path_at_empty+0xa1/0x100 [ 937.372567] __x64_sys_mount+0x1e9/0x300 [ 937.373479] ? copy_mnt_ns+0xa00/0xa00 [ 937.374356] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 937.375540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 937.376713] do_syscall_64+0x33/0x40 [ 937.377557] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 937.378709] RIP: 0033:0x7f11174d2b19 14:52:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:52:33 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) r1 = accept4$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80800) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendfile(r0, r1, &(0x7f0000000140)=0x81, 0x1) 14:52:33 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:52:33 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 937.379544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 937.383831] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 937.385551] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 937.387154] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 937.388749] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 937.390336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.391939] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 14:52:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) openat(r1, &(0x7f0000000100)='./file0\x00', 0x200000, 0x2) unlink(&(0x7f0000000200)='./file0\x00') ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) 14:52:34 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:52:34 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 86) 14:52:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 10) 14:52:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 937.542115] FAULT_INJECTION: forcing a failure. [ 937.542115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.544853] CPU: 1 PID: 7032 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 937.546381] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 937.548216] Call Trace: [ 937.548818] dump_stack+0x107/0x167 [ 937.549633] should_fail.cold+0x5/0xa [ 937.550504] _copy_from_user+0x2e/0x1b0 [ 937.551401] io_copy_iov+0xbf/0x1c0 [ 937.552216] ? io_cancel_task_cb+0x80/0x80 [ 937.553171] ? kmalloc_order+0xfe/0x160 [ 937.554086] io_sqe_buffers_register+0x31d/0x880 [ 937.555158] ? io_sqd_handle_event+0x350/0x350 [ 937.555664] FAULT_INJECTION: forcing a failure. [ 937.555664] name failslab, interval 1, probability 0, space 0, times 0 [ 937.556209] __do_sys_io_uring_register+0x1648/0x2fa0 [ 937.556243] ? io_recvmsg+0xd70/0xd70 [ 937.560770] ? fput_many+0x2f/0x1a0 [ 937.561588] ? ksys_write+0x1a9/0x260 [ 937.562444] ? __ia32_sys_read+0xb0/0xb0 [ 937.563365] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 937.564543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 937.565712] do_syscall_64+0x33/0x40 [ 937.566546] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 937.567704] RIP: 0033:0x7f748a34ab19 [ 937.568530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 937.572629] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 937.574319] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 937.575902] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 937.577497] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 937.579079] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 937.580667] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:52:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) socket$packet(0x11, 0x28e33ab72eb93816, 0x300) ftruncate(r0, 0x0) [ 937.582292] CPU: 0 PID: 7033 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 937.584024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 937.585907] Call Trace: [ 937.586505] dump_stack+0x107/0x167 [ 937.587334] should_fail.cold+0x5/0xa [ 937.588209] ? alloc_fs_context+0x57/0x840 [ 937.589186] should_failslab+0x5/0x20 [ 937.590060] kmem_cache_alloc_trace+0x55/0x320 [ 937.591104] alloc_fs_context+0x57/0x840 [ 937.592043] path_mount+0xab1/0x21e0 [ 937.592912] ? strncpy_from_user+0x9e/0x470 [ 937.593901] ? finish_automount+0xa90/0xa90 [ 937.594892] ? getname_flags.part.0+0x1dd/0x4f0 [ 937.595951] ? _copy_from_user+0xfb/0x1b0 [ 937.596909] __x64_sys_mount+0x282/0x300 [ 937.597829] ? copy_mnt_ns+0xa00/0xa00 [ 937.598733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 937.599936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 937.601127] do_syscall_64+0x33/0x40 [ 937.601968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 937.603132] RIP: 0033:0x7f11174d2b19 [ 937.603993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 937.608122] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 937.609829] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 937.611427] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 937.613040] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 937.614675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 937.616272] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 14:52:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 36) 14:52:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3f00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:52:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x287828, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0xffffffffffffffc1}}, {@cache_fscache}], [{@appraise_type}]}}) ftruncate(r0, 0x0) [ 937.678489] FAULT_INJECTION: forcing a failure. [ 937.678489] name failslab, interval 1, probability 0, space 0, times 0 [ 937.681193] CPU: 0 PID: 7044 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 937.683001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 937.684936] Call Trace: [ 937.685566] dump_stack+0x107/0x167 [ 937.686436] should_fail.cold+0x5/0xa [ 937.687343] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 937.688575] should_failslab+0x5/0x20 [ 937.689490] kmem_cache_alloc+0x5b/0x310 [ 937.690429] p9_client_prepare_req.part.0+0x3a/0xac0 [ 937.691592] ? do_raw_spin_lock+0x121/0x260 [ 937.692585] p9_client_rpc+0x220/0x1370 [ 937.693533] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 937.694769] ? unix_write_space+0x3f0/0x3f0 [ 937.695770] ? sock_poll+0x165/0x510 [ 937.696644] ? kernel_sendpage+0xd0/0xd0 [ 937.697740] ? p9_fd_poll+0x1e0/0x2c0 [ 937.698686] ? p9_fd_create+0x357/0x4a0 [ 937.699598] ? p9_conn_create+0x510/0x510 [ 937.700568] ? p9_client_create+0x798/0x1230 [ 937.701595] ? kfree+0xd7/0x340 [ 937.702364] ? do_raw_spin_unlock+0x4f/0x220 [ 937.703379] p9_client_create+0xa76/0x1230 [ 937.704362] ? p9_client_flush+0x430/0x430 [ 937.705463] ? trace_hardirqs_on+0x5b/0x180 [ 937.706459] ? lockdep_init_map_type+0x2c7/0x780 [ 937.707553] ? __raw_spin_lock_init+0x36/0x110 [ 937.708632] v9fs_session_init+0x1dd/0x1680 [ 937.709635] ? lock_release+0x680/0x680 [ 937.710563] ? kmem_cache_alloc_trace+0x151/0x320 [ 937.711834] ? v9fs_show_options+0x690/0x690 [ 937.712945] ? trace_hardirqs_on+0x5b/0x180 [ 937.713966] ? kasan_unpoison_shadow+0x33/0x50 [ 937.715052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 937.716252] v9fs_mount+0x79/0x8f0 [ 937.717107] ? v9fs_write_inode+0x60/0x60 [ 937.718125] legacy_get_tree+0x105/0x220 [ 937.719068] vfs_get_tree+0x8e/0x300 [ 937.720007] path_mount+0x1490/0x21e0 [ 937.720880] ? strncpy_from_user+0x9e/0x470 [ 937.721865] ? finish_automount+0xa90/0xa90 [ 937.722887] ? getname_flags.part.0+0x1dd/0x4f0 [ 937.723951] ? _copy_from_user+0xfb/0x1b0 [ 937.725008] __x64_sys_mount+0x282/0x300 [ 937.725945] ? copy_mnt_ns+0xa00/0xa00 [ 937.726848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 937.728042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 937.729246] do_syscall_64+0x33/0x40 [ 937.730247] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 937.731431] RIP: 0033:0x7f9de321cb19 [ 937.732437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 937.737105] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 937.738826] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 937.740429] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 937.742102] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 937.743998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 937.745629] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 14:52:34 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:52:34 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 87) 14:52:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:52:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0xfffffff9}) statx(r0, &(0x7f0000000100)='./file0\x00', 0x3d00, 0x100, &(0x7f0000000240)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x40, @empty, 0x6515}, {0xa, 0x4e20, 0x6, @mcast1, 0xffffffff}, 0x195e, [0x2137, 0x1, 0x10000, 0x1c88, 0x1, 0x8, 0x5, 0x7]}, 0x5c) unlink(&(0x7f0000000200)='./file0\x00') 14:52:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 37) 14:52:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 11) [ 937.882777] FAULT_INJECTION: forcing a failure. [ 937.882777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.885491] CPU: 1 PID: 7058 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 937.887023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 937.888874] Call Trace: [ 937.889466] dump_stack+0x107/0x167 [ 937.890284] should_fail.cold+0x5/0xa [ 937.891152] _copy_from_user+0x2e/0x1b0 [ 937.892045] io_copy_iov+0xbf/0x1c0 [ 937.892872] ? io_cancel_task_cb+0x80/0x80 [ 937.893822] ? kmalloc_order+0xfe/0x160 [ 937.894727] io_sqe_buffers_register+0x31d/0x880 [ 937.895796] ? io_sqd_handle_event+0x350/0x350 [ 937.896849] __do_sys_io_uring_register+0x1648/0x2fa0 [ 937.898015] ? io_recvmsg+0xd70/0xd70 [ 937.898867] ? fput_many+0x2f/0x1a0 [ 937.899678] ? ksys_write+0x1a9/0x260 [ 937.900531] ? __ia32_sys_read+0xb0/0xb0 [ 937.901461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 937.902639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 937.903787] do_syscall_64+0x33/0x40 [ 937.904630] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 937.905767] RIP: 0033:0x7f748a34ab19 [ 937.906599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 937.910718] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 937.912407] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 937.914000] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 937.915587] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 937.917194] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 937.918794] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 937.942257] FAULT_INJECTION: forcing a failure. [ 937.942257] name failslab, interval 1, probability 0, space 0, times 0 [ 937.944912] CPU: 1 PID: 7063 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 937.946454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 937.948304] Call Trace: [ 937.948901] dump_stack+0x107/0x167 [ 937.949718] should_fail.cold+0x5/0xa [ 937.950571] ? alloc_fs_context+0x57/0x840 [ 937.951519] should_failslab+0x5/0x20 [ 937.952373] kmem_cache_alloc_trace+0x55/0x320 [ 937.953424] alloc_fs_context+0x57/0x840 [ 937.954349] path_mount+0xab1/0x21e0 [ 937.955200] ? strncpy_from_user+0x9e/0x470 [ 937.956175] ? finish_automount+0xa90/0xa90 [ 937.957157] ? getname_flags.part.0+0x1dd/0x4f0 [ 937.958188] ? _copy_from_user+0xfb/0x1b0 [ 937.959116] __x64_sys_mount+0x282/0x300 [ 937.960032] ? copy_mnt_ns+0xa00/0xa00 [ 937.960924] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 937.962098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 937.963246] do_syscall_64+0x33/0x40 [ 937.964073] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 937.965219] RIP: 0033:0x7f11174d2b19 [ 937.966047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 937.970158] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 937.971864] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 937.973453] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 937.975035] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 937.976630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 937.978240] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 [ 937.998973] FAULT_INJECTION: forcing a failure. [ 937.998973] name failslab, interval 1, probability 0, space 0, times 0 [ 938.001335] CPU: 0 PID: 7064 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 938.002736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 938.004414] Call Trace: [ 938.004963] dump_stack+0x107/0x167 [ 938.005710] should_fail.cold+0x5/0xa [ 938.006482] ? p9_client_prepare_req.part.0+0x3a/0xac0 [ 938.007544] should_failslab+0x5/0x20 [ 938.008325] kmem_cache_alloc+0x5b/0x310 [ 938.009165] p9_client_prepare_req.part.0+0x3a/0xac0 [ 938.010198] ? do_raw_spin_lock+0x121/0x260 [ 938.011072] p9_client_rpc+0x220/0x1370 [ 938.011895] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 938.013010] ? unix_write_space+0x3f0/0x3f0 [ 938.013907] ? sock_poll+0x165/0x510 [ 938.014719] ? kernel_sendpage+0xd0/0xd0 [ 938.015546] ? p9_fd_poll+0x1e0/0x2c0 [ 938.016311] ? p9_fd_create+0x357/0x4a0 [ 938.017129] ? p9_conn_create+0x510/0x510 [ 938.017967] ? p9_client_create+0x798/0x1230 [ 938.018856] ? kfree+0xd7/0x340 [ 938.019521] ? do_raw_spin_unlock+0x4f/0x220 [ 938.020537] p9_client_create+0xa76/0x1230 [ 938.021411] ? p9_client_flush+0x430/0x430 [ 938.022271] ? trace_hardirqs_on+0x5b/0x180 [ 938.023190] ? lockdep_init_map_type+0x2c7/0x780 [ 938.024150] ? __raw_spin_lock_init+0x36/0x110 [ 938.025257] v9fs_session_init+0x1dd/0x1680 [ 938.026157] ? lock_release+0x680/0x680 [ 938.027107] ? kmem_cache_alloc_trace+0x151/0x320 [ 938.028106] ? v9fs_show_options+0x690/0x690 [ 938.029037] ? trace_hardirqs_on+0x5b/0x180 [ 938.030066] ? kasan_unpoison_shadow+0x33/0x50 [ 938.031094] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 938.032130] v9fs_mount+0x79/0x8f0 [ 938.032862] ? v9fs_write_inode+0x60/0x60 [ 938.033702] legacy_get_tree+0x105/0x220 [ 938.034545] vfs_get_tree+0x8e/0x300 [ 938.035317] path_mount+0x1490/0x21e0 [ 938.036119] ? strncpy_from_user+0x9e/0x470 [ 938.037022] ? finish_automount+0xa90/0xa90 [ 938.037909] ? getname_flags.part.0+0x1dd/0x4f0 [ 938.038878] ? _copy_from_user+0xfb/0x1b0 [ 938.039801] __x64_sys_mount+0x282/0x300 [ 938.040637] ? copy_mnt_ns+0xa00/0xa00 [ 938.041434] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 938.042516] ? syscall_enter_from_user_mode+0x1d/0x50 [ 938.043588] do_syscall_64+0x33/0x40 [ 938.044370] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 938.045436] RIP: 0033:0x7f9de321cb19 [ 938.046332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 938.050092] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 938.051642] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 938.053094] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 938.054544] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 938.055986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 938.057460] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 14:52:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x8001, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') 14:52:49 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:52:49 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:52:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) r1 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x0) copy_file_range(r0, 0x0, r1, &(0x7f0000000100)=0x9cee, 0x5, 0x0) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FITHAW(r2, 0xc0045878) fcntl$dupfd(r2, 0x406, r2) 14:52:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 12) 14:52:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x80000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:52:49 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 88) 14:52:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 38) [ 952.518833] FAULT_INJECTION: forcing a failure. [ 952.518833] name failslab, interval 1, probability 0, space 0, times 0 [ 952.520465] CPU: 0 PID: 7079 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 952.521456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.522649] Call Trace: [ 952.523032] dump_stack+0x107/0x167 [ 952.523558] should_fail.cold+0x5/0xa [ 952.524111] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 952.524876] should_failslab+0x5/0x20 [ 952.525426] __kmalloc_node+0x76/0x420 [ 952.525994] ? lock_downgrade+0x6d0/0x6d0 [ 952.526598] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 952.527336] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 952.528055] ? trace_hardirqs_on+0x5b/0x180 [ 952.528681] kmem_cache_alloc_trace+0x169/0x320 [ 952.529360] alloc_fs_context+0x57/0x840 [ 952.529952] path_mount+0xab1/0x21e0 [ 952.530491] ? strncpy_from_user+0x9e/0x470 [ 952.531114] ? finish_automount+0xa90/0xa90 [ 952.531426] FAULT_INJECTION: forcing a failure. [ 952.531426] name failslab, interval 1, probability 0, space 0, times 0 [ 952.531733] ? getname_flags.part.0+0x1dd/0x4f0 [ 952.531748] ? _copy_from_user+0xfb/0x1b0 [ 952.531766] __x64_sys_mount+0x282/0x300 [ 952.531789] ? copy_mnt_ns+0xa00/0xa00 [ 952.536968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 952.537723] ? syscall_enter_from_user_mode+0x1d/0x50 [ 952.538468] do_syscall_64+0x33/0x40 [ 952.539003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 952.539738] RIP: 0033:0x7f11174d2b19 [ 952.540271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.542922] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 952.544016] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 952.545050] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 952.546074] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 952.547101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 952.548089] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 [ 952.549154] CPU: 1 PID: 7083 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 952.549779] FAULT_INJECTION: forcing a failure. [ 952.549779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.550874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.550883] Call Trace: [ 952.550916] dump_stack+0x107/0x167 [ 952.556152] should_fail.cold+0x5/0xa [ 952.557127] ? p9_fcall_init+0x97/0x290 [ 952.558126] should_failslab+0x5/0x20 [ 952.559084] __kmalloc+0x72/0x390 [ 952.559956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 952.561248] p9_fcall_init+0x97/0x290 [ 952.562210] p9_client_prepare_req.part.0+0xf4/0xac0 [ 952.563482] ? do_raw_spin_lock+0x121/0x260 [ 952.564564] p9_client_rpc+0x220/0x1370 [ 952.565565] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 952.566902] ? unix_write_space+0x3f0/0x3f0 [ 952.567986] ? sock_poll+0x165/0x510 [ 952.568935] ? kernel_sendpage+0xd0/0xd0 [ 952.569954] ? p9_fd_poll+0x1e0/0x2c0 [ 952.570919] ? p9_fd_create+0x357/0x4a0 [ 952.571914] ? p9_conn_create+0x510/0x510 [ 952.572957] ? p9_client_create+0x798/0x1230 [ 952.574066] ? kfree+0xd7/0x340 [ 952.574868] ? do_raw_spin_unlock+0x4f/0x220 [ 952.575982] p9_client_create+0xa76/0x1230 [ 952.577063] ? p9_client_flush+0x430/0x430 [ 952.578127] ? trace_hardirqs_on+0x5b/0x180 [ 952.579212] ? lockdep_init_map_type+0x2c7/0x780 [ 952.580403] ? __raw_spin_lock_init+0x36/0x110 [ 952.581574] v9fs_session_init+0x1dd/0x1680 [ 952.582658] ? lock_release+0x680/0x680 [ 952.583671] ? kmem_cache_alloc_trace+0x151/0x320 [ 952.584902] ? v9fs_show_options+0x690/0x690 [ 952.586030] ? trace_hardirqs_on+0x5b/0x180 [ 952.587095] ? kasan_unpoison_shadow+0x33/0x50 [ 952.588249] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 952.589545] v9fs_mount+0x79/0x8f0 [ 952.590444] ? v9fs_write_inode+0x60/0x60 [ 952.591493] legacy_get_tree+0x105/0x220 [ 952.592523] vfs_get_tree+0x8e/0x300 [ 952.593477] path_mount+0x1490/0x21e0 [ 952.594449] ? strncpy_from_user+0x9e/0x470 [ 952.595538] ? finish_automount+0xa90/0xa90 [ 952.596628] ? getname_flags.part.0+0x1dd/0x4f0 [ 952.597815] ? _copy_from_user+0xfb/0x1b0 [ 952.598869] __x64_sys_mount+0x282/0x300 [ 952.599893] ? copy_mnt_ns+0xa00/0xa00 [ 952.600893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 952.602220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 952.603523] do_syscall_64+0x33/0x40 [ 952.604467] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 952.605775] RIP: 0033:0x7f9de321cb19 [ 952.606711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.611357] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 952.613334] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 952.615138] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 952.616964] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 952.618774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 952.620585] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 952.622444] CPU: 0 PID: 7085 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 952.623441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.624634] Call Trace: [ 952.625018] dump_stack+0x107/0x167 [ 952.625543] should_fail.cold+0x5/0xa [ 952.626093] _copy_from_user+0x2e/0x1b0 [ 952.626666] io_copy_iov+0xbf/0x1c0 [ 952.627190] ? io_cancel_task_cb+0x80/0x80 [ 952.627799] ? kmalloc_order+0xfe/0x160 [ 952.628378] io_sqe_buffers_register+0x31d/0x880 [ 952.629074] ? io_sqd_handle_event+0x350/0x350 [ 952.629749] __do_sys_io_uring_register+0x1648/0x2fa0 [ 952.630499] ? io_recvmsg+0xd70/0xd70 [ 952.631046] ? fput_many+0x2f/0x1a0 [ 952.631570] ? ksys_write+0x1a9/0x260 [ 952.632121] ? __ia32_sys_read+0xb0/0xb0 [ 952.632709] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 952.633471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 952.634217] do_syscall_64+0x33/0x40 [ 952.634753] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 952.635489] RIP: 0033:0x7f748a34ab19 [ 952.636023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.638669] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 952.639761] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 952.640790] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 952.641822] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 952.642850] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 952.643873] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:52:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:52:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 14:52:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 39) 14:52:49 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 952.772524] FAULT_INJECTION: forcing a failure. [ 952.772524] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 952.775590] CPU: 1 PID: 7097 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 952.777226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.779184] Call Trace: [ 952.779809] dump_stack+0x107/0x167 [ 952.780676] should_fail.cold+0x5/0xa [ 952.781613] __alloc_pages_nodemask+0x182/0x600 [ 952.782714] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 952.784156] ? __kmalloc+0x379/0x390 [ 952.785062] alloc_pages_current+0x187/0x280 [ 952.786118] allocate_slab+0x26f/0x380 [ 952.787052] ___slab_alloc+0x470/0x700 [ 952.787975] ? p9_fcall_init+0x97/0x290 [ 952.788931] ? kmem_cache_alloc+0x159/0x310 [ 952.789953] ? lock_downgrade+0x6d0/0x6d0 [ 952.790943] ? p9_fcall_init+0x97/0x290 [ 952.791884] ? __kmalloc+0x379/0x390 [ 952.792764] ? p9_fcall_init+0x97/0x290 [ 952.793714] __kmalloc+0x379/0x390 [ 952.794567] p9_fcall_init+0x97/0x290 [ 952.795474] p9_client_prepare_req.part.0+0x8c/0xac0 [ 952.796676] ? do_raw_spin_lock+0x121/0x260 [ 952.797701] p9_client_rpc+0x220/0x1370 [ 952.798659] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 952.799919] ? unix_write_space+0x3f0/0x3f0 [ 952.800950] ? sock_poll+0x165/0x510 [ 952.801831] ? kernel_sendpage+0xd0/0xd0 [ 952.802798] ? p9_fd_poll+0x1e0/0x2c0 [ 952.803703] ? p9_fd_create+0x357/0x4a0 [ 952.804648] ? p9_conn_create+0x510/0x510 [ 952.805592] ? p9_client_create+0x798/0x1230 [ 952.806565] ? kfree+0xd7/0x340 [ 952.807303] ? do_raw_spin_unlock+0x4f/0x220 [ 952.808283] p9_client_create+0xa76/0x1230 [ 952.809251] ? p9_client_flush+0x430/0x430 [ 952.810191] ? trace_hardirqs_on+0x5b/0x180 [ 952.811170] ? lockdep_init_map_type+0x2c7/0x780 [ 952.812230] ? __raw_spin_lock_init+0x36/0x110 [ 952.813276] v9fs_session_init+0x1dd/0x1680 [ 952.814258] ? lock_release+0x680/0x680 [ 952.815153] ? kmem_cache_alloc_trace+0x151/0x320 [ 952.816234] ? v9fs_show_options+0x690/0x690 [ 952.817239] ? trace_hardirqs_on+0x5b/0x180 [ 952.818212] ? kasan_unpoison_shadow+0x33/0x50 [ 952.819217] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 952.820344] v9fs_mount+0x79/0x8f0 [ 952.821147] ? v9fs_write_inode+0x60/0x60 [ 952.822093] legacy_get_tree+0x105/0x220 [ 952.823037] vfs_get_tree+0x8e/0x300 [ 952.823870] path_mount+0x1490/0x21e0 [ 952.824754] ? strncpy_from_user+0x9e/0x470 [ 952.825728] ? finish_automount+0xa90/0xa90 [ 952.826688] ? getname_flags.part.0+0x1dd/0x4f0 [ 952.827749] ? _copy_from_user+0xfb/0x1b0 [ 952.828683] __x64_sys_mount+0x282/0x300 [ 952.829588] ? copy_mnt_ns+0xa00/0xa00 [ 952.830483] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 952.831645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 952.832806] do_syscall_64+0x33/0x40 [ 952.833615] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 952.834759] RIP: 0033:0x7f9de321cb19 [ 952.835599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.839710] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 952.841438] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 952.843045] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 952.844641] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 952.846217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 952.847831] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 14:53:06 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:53:06 executing program 2: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) linkat(r1, &(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) bind$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000680)={'vlan1\x00'}) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/162, 0xa2) setxattr$trusted_overlay_nlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)={'U-', 0x8001}, 0x16, 0x1) 14:53:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 40) 14:53:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:53:06 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2, 0x2e) ftruncate(r0, 0x0) 14:53:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 13) 14:53:06 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:53:06 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 89) [ 969.976367] FAULT_INJECTION: forcing a failure. [ 969.976367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.979500] CPU: 1 PID: 7114 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 969.981084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 969.982986] Call Trace: [ 969.983596] dump_stack+0x107/0x167 [ 969.984439] should_fail.cold+0x5/0xa [ 969.985337] _copy_from_user+0x2e/0x1b0 [ 969.986254] io_copy_iov+0xbf/0x1c0 [ 969.987089] ? io_cancel_task_cb+0x80/0x80 [ 969.988061] ? kmalloc_order+0xfe/0x160 [ 969.988748] FAULT_INJECTION: forcing a failure. [ 969.988748] name failslab, interval 1, probability 0, space 0, times 0 [ 969.988995] io_sqe_buffers_register+0x31d/0x880 [ 969.992555] ? io_sqd_handle_event+0x350/0x350 [ 969.993639] __do_sys_io_uring_register+0x1648/0x2fa0 [ 969.994841] ? io_recvmsg+0xd70/0xd70 [ 969.995718] ? fput_many+0x2f/0x1a0 [ 969.996555] ? ksys_write+0x1a9/0x260 [ 969.997444] ? __ia32_sys_read+0xb0/0xb0 [ 969.998390] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 969.999599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 970.000795] do_syscall_64+0x33/0x40 [ 970.001660] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 970.002843] RIP: 0033:0x7f748a34ab19 [ 970.003701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 970.007954] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 970.009691] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 970.011294] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 970.012900] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 970.014512] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 970.016114] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 970.017748] CPU: 0 PID: 7116 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 970.019305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 970.021173] Call Trace: [ 970.021760] dump_stack+0x107/0x167 [ 970.022432] FAULT_INJECTION: forcing a failure. [ 970.022432] name failslab, interval 1, probability 0, space 0, times 0 [ 970.022576] should_fail.cold+0x5/0xa [ 970.022598] ? create_object.isra.0+0x3a/0xa30 [ 970.022617] should_failslab+0x5/0x20 [ 970.022636] kmem_cache_alloc+0x5b/0x310 [ 970.022661] ? create_object.isra.0+0x3ad/0xa30 [ 970.022686] create_object.isra.0+0x3a/0xa30 [ 970.030826] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 970.031978] __kmalloc_node+0x1ae/0x420 [ 970.032881] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 970.034039] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 970.035150] ? trace_hardirqs_on+0x5b/0x180 [ 970.036122] kmem_cache_alloc_trace+0x169/0x320 [ 970.037183] alloc_fs_context+0x57/0x840 [ 970.038104] path_mount+0xab1/0x21e0 [ 970.038950] ? strncpy_from_user+0x9e/0x470 [ 970.039918] ? finish_automount+0xa90/0xa90 [ 970.040889] ? getname_flags.part.0+0x1dd/0x4f0 [ 970.041957] ? _copy_from_user+0xfb/0x1b0 [ 970.042894] __x64_sys_mount+0x282/0x300 [ 970.043802] ? copy_mnt_ns+0xa00/0xa00 [ 970.044677] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 970.045865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 970.047027] do_syscall_64+0x33/0x40 [ 970.047866] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 970.049019] RIP: 0033:0x7f11174d2b19 [ 970.049849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 970.053967] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 970.055674] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 970.057278] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 970.058867] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 970.060451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 970.062058] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 [ 970.063673] CPU: 1 PID: 7111 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 970.065211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 970.067065] Call Trace: [ 970.067652] dump_stack+0x107/0x167 [ 970.068471] should_fail.cold+0x5/0xa [ 970.069333] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 970.070621] should_failslab+0x5/0x20 [ 970.071466] kmem_cache_alloc+0x5b/0x310 [ 970.072390] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 970.073646] idr_get_free+0x4b5/0x8f0 [ 970.074522] idr_alloc_u32+0x170/0x2d0 [ 970.075408] ? __fprop_inc_percpu_max+0x130/0x130 [ 970.076494] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 970.077718] ? lock_release+0x680/0x680 [ 970.078619] idr_alloc+0xc2/0x130 [ 970.079405] ? idr_alloc_u32+0x2d0/0x2d0 [ 970.080321] ? rwlock_bug.part.0+0x90/0x90 [ 970.081288] p9_client_prepare_req.part.0+0x612/0xac0 [ 970.082453] ? do_raw_spin_lock+0x121/0x260 [ 970.083429] p9_client_rpc+0x220/0x1370 [ 970.084338] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 970.085560] ? unix_write_space+0x3f0/0x3f0 [ 970.086538] ? sock_poll+0x165/0x510 [ 970.087376] ? kernel_sendpage+0xd0/0xd0 [ 970.088288] ? p9_fd_poll+0x1e0/0x2c0 [ 970.089159] ? p9_fd_create+0x357/0x4a0 [ 970.090058] ? p9_conn_create+0x510/0x510 [ 970.090988] ? p9_client_create+0x798/0x1230 [ 970.091973] ? kfree+0xd7/0x340 [ 970.092716] ? do_raw_spin_unlock+0x4f/0x220 [ 970.093722] p9_client_create+0xa76/0x1230 [ 970.094687] ? p9_client_flush+0x430/0x430 [ 970.095661] ? trace_hardirqs_on+0x5b/0x180 [ 970.096634] ? lockdep_init_map_type+0x2c7/0x780 [ 970.097711] ? __raw_spin_lock_init+0x36/0x110 [ 970.098752] v9fs_session_init+0x1dd/0x1680 [ 970.099719] ? lock_release+0x680/0x680 [ 970.100625] ? kmem_cache_alloc_trace+0x151/0x320 [ 970.101733] ? v9fs_show_options+0x690/0x690 [ 970.102749] ? trace_hardirqs_on+0x5b/0x180 [ 970.103716] ? kasan_unpoison_shadow+0x33/0x50 [ 970.104755] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 970.105909] v9fs_mount+0x79/0x8f0 [ 970.106722] ? v9fs_write_inode+0x60/0x60 [ 970.107667] legacy_get_tree+0x105/0x220 [ 970.108584] vfs_get_tree+0x8e/0x300 [ 970.109424] path_mount+0x1490/0x21e0 [ 970.110291] ? strncpy_from_user+0x9e/0x470 [ 970.111272] ? finish_automount+0xa90/0xa90 [ 970.112251] ? getname_flags.part.0+0x1dd/0x4f0 [ 970.113303] ? _copy_from_user+0xfb/0x1b0 [ 970.114246] __x64_sys_mount+0x282/0x300 [ 970.115158] ? copy_mnt_ns+0xa00/0xa00 [ 970.116049] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 970.117242] ? syscall_enter_from_user_mode+0x1d/0x50 [ 970.118408] do_syscall_64+0x33/0x40 [ 970.119245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 970.120400] RIP: 0033:0x7f9de321cb19 [ 970.121242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 970.125403] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 970.127143] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 970.128760] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 970.130374] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 970.131993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 970.133609] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 14:53:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:53:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 14) 14:53:06 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 970.259227] FAULT_INJECTION: forcing a failure. [ 970.259227] name failslab, interval 1, probability 0, space 0, times 0 [ 970.261683] CPU: 0 PID: 7128 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 970.263137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 970.264898] Call Trace: [ 970.265481] dump_stack+0x107/0x167 [ 970.266275] should_fail.cold+0x5/0xa [ 970.267092] ? v9fs_mount+0x5a/0x8f0 [ 970.267894] should_failslab+0x5/0x20 [ 970.268714] kmem_cache_alloc_trace+0x55/0x320 [ 970.269707] ? v9fs_write_inode+0x60/0x60 [ 970.270596] v9fs_mount+0x5a/0x8f0 [ 970.271359] ? v9fs_write_inode+0x60/0x60 [ 970.272246] legacy_get_tree+0x105/0x220 [ 970.273135] vfs_get_tree+0x8e/0x300 [ 970.273944] path_mount+0x1490/0x21e0 [ 970.274777] ? strncpy_from_user+0x9e/0x470 [ 970.275709] ? finish_automount+0xa90/0xa90 [ 970.276646] ? getname_flags.part.0+0x1dd/0x4f0 [ 970.277659] ? _copy_from_user+0xfb/0x1b0 [ 970.278566] __x64_sys_mount+0x282/0x300 [ 970.279450] ? copy_mnt_ns+0xa00/0xa00 [ 970.280302] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 970.281449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 970.282576] do_syscall_64+0x33/0x40 [ 970.283399] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 970.284517] RIP: 0033:0x7f11174d2b19 [ 970.285342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 970.289327] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 970.290989] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 970.292554] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 970.294128] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 970.295697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 970.297270] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 14:53:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:53:20 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 14:53:20 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)={0x0, 0xb199, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000080)={0x72, 0x4, 0x6, 0x52d80000, 0x400009}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ftruncate(r0, 0x0) 14:53:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 41) 14:53:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x31}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', r1) [ 984.173806] FAULT_INJECTION: forcing a failure. [ 984.173806] name failslab, interval 1, probability 0, space 0, times 0 [ 984.175099] CPU: 1 PID: 7140 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 984.175866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 984.176790] Call Trace: [ 984.177093] dump_stack+0x107/0x167 [ 984.177513] should_fail.cold+0x5/0xa [ 984.177950] ? create_object.isra.0+0x3a/0xa30 [ 984.178480] should_failslab+0x5/0x20 [ 984.178927] kmem_cache_alloc+0x5b/0x310 [ 984.179389] create_object.isra.0+0x3a/0xa30 [ 984.179888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 984.180458] kmem_cache_alloc_trace+0x151/0x320 [ 984.180985] ? lockdep_init_map_type+0x2c7/0x780 [ 984.181531] legacy_init_fs_context+0x44/0xe0 [ 984.182040] ? generic_parse_monolithic+0x1f0/0x1f0 [ 984.182602] alloc_fs_context+0x4fd/0x840 [ 984.183089] path_mount+0xab1/0x21e0 [ 984.183513] ? strncpy_from_user+0x9e/0x470 [ 984.184001] ? finish_automount+0xa90/0xa90 [ 984.184493] ? getname_flags.part.0+0x1dd/0x4f0 [ 984.185020] ? _copy_from_user+0xfb/0x1b0 [ 984.185506] __x64_sys_mount+0x282/0x300 [ 984.185966] ? copy_mnt_ns+0xa00/0xa00 [ 984.186426] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 984.187014] ? syscall_enter_from_user_mode+0x1d/0x50 [ 984.187593] do_syscall_64+0x33/0x40 [ 984.188017] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 984.188591] RIP: 0033:0x7f11174d2b19 [ 984.189014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 984.190682] FAULT_INJECTION: forcing a failure. [ 984.190682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.191114] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 984.191131] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 984.194075] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 984.194883] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 984.195688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 984.196485] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 [ 984.197314] CPU: 0 PID: 7148 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 984.198088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 984.199008] Call Trace: [ 984.199310] dump_stack+0x107/0x167 [ 984.199720] should_fail.cold+0x5/0xa [ 984.200154] _copy_from_user+0x2e/0x1b0 [ 984.200606] io_copy_iov+0xbf/0x1c0 [ 984.201012] ? io_cancel_task_cb+0x80/0x80 [ 984.201503] ? kmalloc_order+0xfe/0x160 [ 984.201963] io_sqe_buffers_register+0x31d/0x880 [ 984.202518] ? io_sqd_handle_event+0x350/0x350 [ 984.203049] __do_sys_io_uring_register+0x1648/0x2fa0 [ 984.203638] ? io_recvmsg+0xd70/0xd70 [ 984.204067] ? fput_many+0x2f/0x1a0 [ 984.204475] ? ksys_write+0x1a9/0x260 [ 984.204910] ? __ia32_sys_read+0xb0/0xb0 [ 984.205384] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 984.205976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 984.206559] do_syscall_64+0x33/0x40 [ 984.206976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 984.207560] RIP: 0033:0x7f748a34ab19 14:53:20 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:53:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 15) 14:53:20 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 90) [ 984.207977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 984.210175] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 984.211033] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 984.211857] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 984.212678] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 984.213494] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 984.214301] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 984.219540] FAULT_INJECTION: forcing a failure. [ 984.219540] name failslab, interval 1, probability 0, space 0, times 0 [ 984.220852] CPU: 0 PID: 7144 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 984.221621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 984.222541] Call Trace: [ 984.222840] dump_stack+0x107/0x167 [ 984.223250] should_fail.cold+0x5/0xa [ 984.223677] ? create_object.isra.0+0x3a/0xa30 [ 984.224188] should_failslab+0x5/0x20 [ 984.224617] kmem_cache_alloc+0x5b/0x310 [ 984.225077] create_object.isra.0+0x3a/0xa30 [ 984.225576] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 984.226143] __kmalloc+0x16e/0x390 [ 984.226553] p9_fcall_init+0x97/0x290 [ 984.226986] p9_client_prepare_req.part.0+0xf4/0xac0 [ 984.227552] ? do_raw_spin_lock+0x121/0x260 [ 984.228036] p9_client_rpc+0x220/0x1370 [ 984.228485] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 984.229084] ? unix_write_space+0x3f0/0x3f0 [ 984.229585] ? sock_poll+0x165/0x510 [ 984.230000] ? kernel_sendpage+0xd0/0xd0 [ 984.230455] ? p9_fd_poll+0x1e0/0x2c0 [ 984.230896] ? p9_fd_create+0x357/0x4a0 [ 984.231342] ? p9_conn_create+0x510/0x510 [ 984.231806] ? p9_client_create+0x798/0x1230 [ 984.232307] ? kfree+0xd7/0x340 [ 984.232675] ? do_raw_spin_unlock+0x4f/0x220 [ 984.233196] p9_client_create+0xa76/0x1230 [ 984.233680] ? p9_client_flush+0x430/0x430 [ 984.234154] ? trace_hardirqs_on+0x5b/0x180 [ 984.234658] ? lockdep_init_map_type+0x2c7/0x780 [ 984.235195] ? __raw_spin_lock_init+0x36/0x110 [ 984.235727] v9fs_session_init+0x1dd/0x1680 [ 984.236224] ? lock_release+0x680/0x680 [ 984.236687] ? kmem_cache_alloc_trace+0x151/0x320 [ 984.237234] ? v9fs_show_options+0x690/0x690 [ 984.237751] ? trace_hardirqs_on+0x5b/0x180 [ 984.238246] ? kasan_unpoison_shadow+0x33/0x50 [ 984.238771] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 984.239356] v9fs_mount+0x79/0x8f0 [ 984.239762] ? v9fs_write_inode+0x60/0x60 [ 984.240238] legacy_get_tree+0x105/0x220 [ 984.240702] vfs_get_tree+0x8e/0x300 [ 984.241132] path_mount+0x1490/0x21e0 [ 984.241571] ? strncpy_from_user+0x9e/0x470 [ 984.242066] ? finish_automount+0xa90/0xa90 [ 984.242554] ? getname_flags.part.0+0x1dd/0x4f0 [ 984.243088] ? _copy_from_user+0xfb/0x1b0 [ 984.243566] __x64_sys_mount+0x282/0x300 [ 984.244035] ? copy_mnt_ns+0xa00/0xa00 [ 984.244475] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 984.245078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 984.245665] do_syscall_64+0x33/0x40 [ 984.246092] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 984.246668] RIP: 0033:0x7f9de321cb19 [ 984.247094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 984.249193] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 984.250067] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 984.250872] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 984.251691] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 984.252497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 984.253325] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 14:53:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 16) 14:53:20 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:53:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:53:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 42) 14:53:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0xa6bf, 0x420000}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sysfs$1(0x1, &(0x7f0000000080)='ext4\x00') r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000240)={{r2}, "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"}) signalfd(r1, &(0x7f0000000100)={[0x8]}, 0x8) [ 984.307227] FAULT_INJECTION: forcing a failure. [ 984.307227] name failslab, interval 1, probability 0, space 0, times 0 [ 984.308552] CPU: 1 PID: 7161 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 984.309317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 984.310256] Call Trace: [ 984.310565] dump_stack+0x107/0x167 [ 984.310985] should_fail.cold+0x5/0xa [ 984.311411] ? v9fs_mount+0x5a/0x8f0 [ 984.311839] should_failslab+0x5/0x20 [ 984.312272] kmem_cache_alloc_trace+0x55/0x320 [ 984.312789] ? v9fs_write_inode+0x60/0x60 [ 984.313265] v9fs_mount+0x5a/0x8f0 [ 984.313679] ? v9fs_write_inode+0x60/0x60 [ 984.314143] legacy_get_tree+0x105/0x220 [ 984.314598] vfs_get_tree+0x8e/0x300 [ 984.315020] path_mount+0x1490/0x21e0 [ 984.315451] ? strncpy_from_user+0x9e/0x470 [ 984.315943] ? finish_automount+0xa90/0xa90 [ 984.316425] ? getname_flags.part.0+0x1dd/0x4f0 [ 984.316945] ? _copy_from_user+0xfb/0x1b0 [ 984.317420] __x64_sys_mount+0x282/0x300 [ 984.317875] ? copy_mnt_ns+0xa00/0xa00 [ 984.318321] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 984.318917] ? syscall_enter_from_user_mode+0x1d/0x50 [ 984.319505] do_syscall_64+0x33/0x40 [ 984.319932] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 984.320511] RIP: 0033:0x7f11174d2b19 [ 984.320933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 984.323015] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 984.323869] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 984.324677] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 984.325488] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 984.326298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 984.327113] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 14:53:20 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10f6e2, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) sendfile(r0, r0, 0x0, 0x5) 14:53:20 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 91) 14:53:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 984.336612] FAULT_INJECTION: forcing a failure. [ 984.336612] name failslab, interval 1, probability 0, space 0, times 0 [ 984.337880] CPU: 1 PID: 7164 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 984.338640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 984.339567] Call Trace: [ 984.339863] dump_stack+0x107/0x167 [ 984.340275] should_fail.cold+0x5/0xa [ 984.340706] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 984.341366] should_failslab+0x5/0x20 [ 984.341803] kmem_cache_alloc+0x5b/0x310 [ 984.342264] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 984.342900] idr_get_free+0x4b5/0x8f0 [ 984.343334] idr_alloc_u32+0x170/0x2d0 [ 984.343775] ? __fprop_inc_percpu_max+0x130/0x130 [ 984.344319] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 984.344919] ? lock_release+0x680/0x680 [ 984.345373] idr_alloc+0xc2/0x130 [ 984.345770] ? idr_alloc_u32+0x2d0/0x2d0 [ 984.346233] ? rwlock_bug.part.0+0x90/0x90 [ 984.346711] p9_client_prepare_req.part.0+0x612/0xac0 [ 984.347292] ? do_raw_spin_lock+0x121/0x260 [ 984.347783] p9_client_rpc+0x220/0x1370 [ 984.348258] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 984.348876] ? unix_write_space+0x3f0/0x3f0 [ 984.349380] ? sock_poll+0x165/0x510 [ 984.349799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 984.350392] ? asm_sysvec_call_function_single+0x12/0x20 [ 984.350999] ? trace_hardirqs_on+0x5b/0x180 [ 984.351502] p9_client_create+0xa76/0x1230 [ 984.351989] ? p9_client_flush+0x430/0x430 [ 984.352480] ? trace_hardirqs_on+0x5b/0x180 [ 984.352971] ? lockdep_init_map_type+0x2c7/0x780 [ 984.353523] ? __raw_spin_lock_init+0x36/0x110 [ 984.354044] v9fs_session_init+0x1dd/0x1680 [ 984.354538] ? lock_release+0x680/0x680 [ 984.354993] ? kmem_cache_alloc_trace+0x151/0x320 [ 984.355552] ? v9fs_show_options+0x690/0x690 [ 984.356066] ? trace_hardirqs_on+0x5b/0x180 [ 984.356565] ? kasan_unpoison_shadow+0x33/0x50 [ 984.356675] FAULT_INJECTION: forcing a failure. [ 984.356675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.357081] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 984.357098] v9fs_mount+0x79/0x8f0 [ 984.359373] ? v9fs_write_inode+0x60/0x60 [ 984.359842] legacy_get_tree+0x105/0x220 [ 984.360303] vfs_get_tree+0x8e/0x300 [ 984.360724] path_mount+0x1490/0x21e0 [ 984.361169] ? strncpy_from_user+0x9e/0x470 [ 984.361658] ? finish_automount+0xa90/0xa90 [ 984.362144] ? getname_flags.part.0+0x1dd/0x4f0 [ 984.362667] ? _copy_from_user+0xfb/0x1b0 [ 984.363139] __x64_sys_mount+0x282/0x300 [ 984.363593] ? copy_mnt_ns+0xa00/0xa00 [ 984.364033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 984.364622] ? syscall_enter_from_user_mode+0x1d/0x50 [ 984.365213] do_syscall_64+0x33/0x40 [ 984.365632] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 984.366207] RIP: 0033:0x7f9de321cb19 [ 984.366624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 984.368692] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 984.369555] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 984.370354] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 984.371156] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 984.371959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 984.372760] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 984.373585] CPU: 0 PID: 7169 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 984.374359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 984.375288] Call Trace: [ 984.375582] dump_stack+0x107/0x167 [ 984.375990] should_fail.cold+0x5/0xa [ 984.376425] _copy_from_user+0x2e/0x1b0 [ 984.376871] io_copy_iov+0xbf/0x1c0 [ 984.377322] ? io_cancel_task_cb+0x80/0x80 [ 984.377792] ? kmalloc_order+0xfe/0x160 [ 984.378255] io_sqe_buffers_register+0x31d/0x880 [ 984.378789] ? io_sqd_handle_event+0x350/0x350 [ 984.379327] __do_sys_io_uring_register+0x1648/0x2fa0 [ 984.379915] ? io_recvmsg+0xd70/0xd70 [ 984.380350] ? fput_many+0x2f/0x1a0 [ 984.380758] ? ksys_write+0x1a9/0x260 [ 984.381208] ? __ia32_sys_read+0xb0/0xb0 [ 984.381664] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 984.382271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 984.382849] do_syscall_64+0x33/0x40 [ 984.383279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 984.383851] RIP: 0033:0x7f748a34ab19 [ 984.384282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 984.386341] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 984.387188] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 984.387981] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 984.388769] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 984.389575] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 984.390367] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:53:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 17) 14:53:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x6, 0x5, 0xff, 0x5, 0x6}) dup2(r0, r0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000000c0)) [ 984.416110] FAULT_INJECTION: forcing a failure. [ 984.416110] name failslab, interval 1, probability 0, space 0, times 0 [ 984.417488] CPU: 1 PID: 7174 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 984.418274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 984.419225] Call Trace: [ 984.419533] dump_stack+0x107/0x167 [ 984.419958] should_fail.cold+0x5/0xa [ 984.420400] ? create_object.isra.0+0x3a/0xa30 [ 984.420926] should_failslab+0x5/0x20 [ 984.421375] kmem_cache_alloc+0x5b/0x310 [ 984.421843] create_object.isra.0+0x3a/0xa30 [ 984.422345] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 984.422938] __kmalloc_track_caller+0x177/0x370 [ 984.423474] ? v9fs_session_init+0xa7/0x1680 [ 984.423981] ? kernel_text_address+0xf2/0x120 [ 984.424500] kstrdup+0x36/0x70 [ 984.424872] v9fs_session_init+0xa7/0x1680 [ 984.425366] ? lock_release+0x680/0x680 [ 984.425820] ? find_held_lock+0x2c/0x110 [ 984.426297] ? kmem_cache_alloc_trace+0x151/0x320 [ 984.426852] ? v9fs_show_options+0x690/0x690 [ 984.427365] ? trace_hardirqs_on+0x5b/0x180 [ 984.427862] ? kasan_unpoison_shadow+0x33/0x50 [ 984.428385] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 984.428972] v9fs_mount+0x79/0x8f0 [ 984.429390] ? v9fs_write_inode+0x60/0x60 [ 984.429868] legacy_get_tree+0x105/0x220 [ 984.430338] vfs_get_tree+0x8e/0x300 [ 984.430765] path_mount+0x1490/0x21e0 [ 984.431206] ? strncpy_from_user+0x9e/0x470 [ 984.431702] ? finish_automount+0xa90/0xa90 [ 984.432197] ? getname_flags.part.0+0x1dd/0x4f0 [ 984.432728] ? _copy_from_user+0xfb/0x1b0 [ 984.433216] __x64_sys_mount+0x282/0x300 [ 984.433680] ? copy_mnt_ns+0xa00/0xa00 [ 984.434138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 984.434745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 984.435341] do_syscall_64+0x33/0x40 [ 984.435769] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 984.436356] RIP: 0033:0x7f11174d2b19 [ 984.436790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 984.438917] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 984.439785] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 984.440602] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 984.441427] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 984.442244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 984.443066] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 14:53:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 43) 14:53:21 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 14:53:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 18) 14:53:21 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 92) 14:53:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) fchmod(r0, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x35d, 0x4) 14:53:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x2, 0x8, 0x1f, 0x400, 0xcb}) fsetxattr$security_capability(r0, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x1, 0xd}]}, 0xc, 0x2) 14:53:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xa000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 985.057456] FAULT_INJECTION: forcing a failure. [ 985.057456] name failslab, interval 1, probability 0, space 0, times 0 [ 985.059169] CPU: 0 PID: 7189 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 985.060217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 985.061512] Call Trace: [ 985.061916] dump_stack+0x107/0x167 [ 985.062475] should_fail.cold+0x5/0xa [ 985.063082] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 985.063960] should_failslab+0x5/0x20 [ 985.064554] kmem_cache_alloc+0x5b/0x310 [ 985.065194] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 985.066052] idr_get_free+0x4b5/0x8f0 [ 985.066646] idr_alloc_u32+0x170/0x2d0 [ 985.067243] ? __fprop_inc_percpu_max+0x130/0x130 [ 985.067979] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 985.068790] ? lock_release+0x680/0x680 [ 985.069405] idr_alloc+0xc2/0x130 [ 985.069934] ? idr_alloc_u32+0x2d0/0x2d0 [ 985.070570] ? rwlock_bug.part.0+0x90/0x90 [ 985.071224] p9_client_prepare_req.part.0+0x612/0xac0 [ 985.072005] ? do_raw_spin_lock+0x121/0x260 [ 985.072667] p9_client_rpc+0x220/0x1370 [ 985.073290] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 985.074115] ? unix_write_space+0x3f0/0x3f0 [ 985.074772] ? sock_poll+0x165/0x510 [ 985.075340] ? kernel_sendpage+0xd0/0xd0 [ 985.075963] ? p9_fd_poll+0x1e0/0x2c0 [ 985.076554] ? p9_fd_create+0x357/0x4a0 [ 985.077168] ? p9_conn_create+0x510/0x510 [ 985.077808] ? p9_client_create+0x798/0x1230 [ 985.078483] ? kfree+0xd7/0x340 [ 985.078993] ? do_raw_spin_unlock+0x4f/0x220 [ 985.079676] p9_client_create+0xa76/0x1230 [ 985.080342] ? p9_client_flush+0x430/0x430 [ 985.080985] ? trace_hardirqs_on+0x5b/0x180 [ 985.081646] ? lockdep_init_map_type+0x2c7/0x780 [ 985.082372] ? __raw_spin_lock_init+0x36/0x110 [ 985.083070] v9fs_session_init+0x1dd/0x1680 [ 985.083729] ? lock_release+0x680/0x680 [ 985.084346] ? kmem_cache_alloc_trace+0x151/0x320 [ 985.085095] ? v9fs_show_options+0x690/0x690 [ 985.085786] ? trace_hardirqs_on+0x5b/0x180 [ 985.086455] ? kasan_unpoison_shadow+0x33/0x50 [ 985.087086] FAULT_INJECTION: forcing a failure. [ 985.087086] name failslab, interval 1, probability 0, space 0, times 0 [ 985.087152] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 985.090882] v9fs_mount+0x79/0x8f0 [ 985.091428] ? v9fs_write_inode+0x60/0x60 [ 985.092061] legacy_get_tree+0x105/0x220 [ 985.092681] vfs_get_tree+0x8e/0x300 [ 985.093256] path_mount+0x1490/0x21e0 [ 985.093848] ? strncpy_from_user+0x9e/0x470 [ 985.094499] ? finish_automount+0xa90/0xa90 [ 985.095164] ? getname_flags.part.0+0x1dd/0x4f0 [ 985.095867] ? _copy_from_user+0xfb/0x1b0 [ 985.096502] __x64_sys_mount+0x282/0x300 [ 985.097120] ? copy_mnt_ns+0xa00/0xa00 [ 985.097729] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 985.098533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 985.099333] do_syscall_64+0x33/0x40 [ 985.099909] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 985.100683] RIP: 0033:0x7f9de321cb19 [ 985.101268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 985.104053] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 985.105231] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 985.106315] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 985.107404] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 985.108485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 985.109596] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 985.110704] CPU: 1 PID: 7192 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 985.112022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 985.113638] Call Trace: [ 985.114148] dump_stack+0x107/0x167 [ 985.114848] should_fail.cold+0x5/0xa [ 985.115598] should_failslab+0x5/0x20 [ 985.116339] __kmalloc_track_caller+0x79/0x370 [ 985.117216] ? v9fs_session_init+0xa7/0x1680 [ 985.118061] ? kernel_text_address+0xf2/0x120 [ 985.118921] kstrdup+0x36/0x70 [ 985.119537] v9fs_session_init+0xa7/0x1680 [ 985.120352] ? lock_release+0x680/0x680 [ 985.121108] ? find_held_lock+0x2c/0x110 [ 985.121899] ? kmem_cache_alloc_trace+0x151/0x320 [ 985.122820] ? v9fs_show_options+0x690/0x690 [ 985.123668] ? trace_hardirqs_on+0x5b/0x180 [ 985.124490] ? kasan_unpoison_shadow+0x33/0x50 [ 985.125404] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 985.126380] v9fs_mount+0x79/0x8f0 [ 985.127070] ? v9fs_write_inode+0x60/0x60 [ 985.127860] legacy_get_tree+0x105/0x220 [ 985.128642] vfs_get_tree+0x8e/0x300 [ 985.129362] path_mount+0x1490/0x21e0 [ 985.130093] ? strncpy_from_user+0x9e/0x470 [ 985.130917] ? finish_automount+0xa90/0xa90 [ 985.131740] ? getname_flags.part.0+0x1dd/0x4f0 [ 985.132628] ? _copy_from_user+0xfb/0x1b0 [ 985.133446] __x64_sys_mount+0x282/0x300 [ 985.134216] ? copy_mnt_ns+0xa00/0xa00 [ 985.134969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 985.135968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 985.136951] do_syscall_64+0x33/0x40 [ 985.137688] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 985.138663] RIP: 0033:0x7f11174d2b19 [ 985.139370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 985.142859] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 985.144311] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 985.145774] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 985.147132] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 985.148490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 985.149853] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 [ 985.153985] FAULT_INJECTION: forcing a failure. [ 985.153985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.156209] CPU: 1 PID: 7183 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 985.157518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 985.159095] Call Trace: [ 985.159598] dump_stack+0x107/0x167 [ 985.160297] should_fail.cold+0x5/0xa [ 985.161032] _copy_from_user+0x2e/0x1b0 [ 985.161830] io_copy_iov+0xbf/0x1c0 [ 985.162528] ? io_cancel_task_cb+0x80/0x80 [ 985.163333] ? kmalloc_order+0xfe/0x160 [ 985.164108] io_sqe_buffers_register+0x31d/0x880 [ 985.165030] ? io_sqd_handle_event+0x350/0x350 [ 985.165941] __do_sys_io_uring_register+0x1648/0x2fa0 [ 985.166943] ? io_recvmsg+0xd70/0xd70 [ 985.167675] ? fput_many+0x2f/0x1a0 [ 985.168374] ? ksys_write+0x1a9/0x260 [ 985.169103] ? __ia32_sys_read+0xb0/0xb0 [ 985.169897] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 985.170902] ? syscall_enter_from_user_mode+0x1d/0x50 [ 985.171898] do_syscall_64+0x33/0x40 [ 985.172616] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 985.173599] RIP: 0033:0x7f748a34ab19 [ 985.174313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 985.177831] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 985.179283] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 985.180659] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 985.182044] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 985.183414] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 985.184783] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 998.996246] FAULT_INJECTION: forcing a failure. [ 998.996246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.997908] CPU: 0 PID: 7206 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 998.998811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 998.999892] Call Trace: [ 999.000241] dump_stack+0x107/0x167 [ 999.000722] should_fail.cold+0x5/0xa [ 999.001228] _copy_from_user+0x2e/0x1b0 [ 999.001760] io_copy_iov+0xbf/0x1c0 [ 999.002236] ? io_cancel_task_cb+0x80/0x80 [ 999.002792] ? kmalloc_order+0xfe/0x160 [ 999.003320] io_sqe_buffers_register+0x31d/0x880 [ 999.003946] ? io_sqd_handle_event+0x350/0x350 [ 999.004559] __do_sys_io_uring_register+0x1648/0x2fa0 [ 999.005242] ? io_recvmsg+0xd70/0xd70 [ 999.005751] ? fput_many+0x2f/0x1a0 [ 999.006228] ? ksys_write+0x1a9/0x260 [ 999.006729] ? __ia32_sys_read+0xb0/0xb0 [ 999.007268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 999.007955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 999.008632] do_syscall_64+0x33/0x40 [ 999.009122] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 999.009801] RIP: 0033:0x7f748a34ab19 [ 999.010287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 999.012928] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 999.013943] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 999.014888] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 999.015828] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 999.016763] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 999.017707] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:53:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 19) 14:53:35 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:53:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xb000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:53:35 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 14:53:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) openat(r1, &(0x7f00000007c0)='./file0\x00', 0x800, 0x40) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000d40)={0x73, 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5d, 0x2}}, './file0/file0/file0\x00'}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000780)=0x0) recvmsg$unix(r1, &(0x7f0000000d00)={&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f00000008c0)=""/170, 0xaa}, {&(0x7f0000000980)=""/13, 0xd}, {&(0x7f0000000c00)=""/175, 0xaf}, {&(0x7f00000009c0)=""/95, 0x5f}], 0x4}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000b40)=0xe8) getresgid(&(0x7f0000000540), &(0x7f0000000500), &(0x7f0000000580)=0x0) getgroups(0x1, &(0x7f0000000440)=[r5]) sendmsg$netlink(r2, &(0x7f0000000bc0)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)=[{&(0x7f0000000140)={0x5f0, 0x3e, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@generic="49a9f28476130f35adaf3d79fc4f", @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@private2}, @typed={0x95, 0x2c, 0x0, 0x0, @binary="317b1fc2fb4a9bcc74eae6cb994d43b5857887989f65528a0f091c52cd6f23fe34400e76cd9f2ac0cb023942c5c6bee354a898fc24ab398be96c140ced8607df154aaab068ebb3f9eb838bcd9b248a5fb32748c52448932b0255162743220481c26ef6bc97636d7b1e680e012bcf4cd52f91b62661344c098b9565a5b1bfd4aa38671ed33dafe3e775a324bcbaa22c33ce"}, @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@loopback}, @nested={0x33c, 0x46, 0x0, 0x1, [@generic="0f505cb7d2e1a82ef8f0a9e42f1c75d74f2c47c492a8e0619e7ca90de47eb59a7a7f3555b434990ec79de70f87491879bd85568e9139495e1e38cad0158adece", @typed={0xc5, 0x0, 0x0, 0x0, @binary="407ebec4166ae3ad499f4700c82218d1e9ba47404c4b3f74d1bab09c2f8b7874ec90ee5133553914177ea82a46c5a10b53af2e99a6c9465e21d480802683ce40595dcad8e4edd7162dba161d40ddd89b7cdf19edd4c413bccd16cb554dd352819aaade96b9702cd76cd2ed496bd142ba113e3b5450debb0e031aed4866961ca59121a73efc31a961b35129dba33d617c31fbc874bd6ce8bfbca17e375305ea687960a9767c0b5a24f1c82922f539e22af4af96a914cf74ffc2a0186741deb77ceb"}, @generic="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", @generic="e27ae10927686dad03511bfdce295c4f4adeba3bd78768e99905a18bbfd4025e20b8903a58e5524bfc8623bf853eafec0f61c5", @generic="e5e25ca7e9d1893b1f633083897fb441b36c402049890dabfd377f9674a653ad4aca1551bc0e226573e19d77f9b5b986aeae89f6c2c6dbfa6368ad7a940a54a1f899a39d0ddb1652296d8106ea49c6a8a70c8cf9d66fd855fe75f5333d9228acc80638bcdf844221dbbc806524bb6e63ae69bf1074eda784ef44e06939de303c995b0d25257256ba676eedfd0aa623cf3d449515e7df2414117b9fba4f5042ab596cb73753beae2d12370a9c03bbfe1ac02c3f4874331b3639e226b284fe72dd5771c420a5c441626878c0c03d3d89118cf36c25e70b6e6b", @typed={0xc, 0x3a, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x30, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x24}}, @typed={0x8, 0x7b, 0x0, 0x0, @u32=0x400}]}, @generic="0b3e93e659b01f26d09cf0c193f82f58ac374c8427a9d2662508565e7d72a53239f1bdd2d1a145fc35ab224d625602030af4d9741dda59b535f458709d212778a2163b97cac448b397b5482e2c2a801406b625b43df3ecbba49542f8c3a5a4ebf8b1fe339116725397a3015c386eee910b6c39fb5bfcd0ca221ff3c742971eef2bb6210c330125fa188ce87d1ad2584c394640d2a311781f78f25ae087a3978d76630ab6bd63d814c543445195f11659eca3ade4eb45e76b68b3361f58feeda8e5430bf29a38e7da3c9c48d9c352f1acb2a332d78ce907", @generic="8eb49c1b5f9a25ef3a941bdcb5aba159447d6fd8514061db", @typed={0x8, 0x7e, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="e48623d2f6ca312781a2bc8e29cbf9938c929907dac3592e41fc8173aa0576e077f4b12061dfddc6670baad4c4b091d530c1fd8d700407a0ad538927ca79182309e9bb7a2ee13155807dcf62749f77b62ef5cc3c176a8ae1996aa15d90c3d0b2757382304ae9ef428dbbf5a706d363a772b4e94d4c5c870be7f8e554d148345fc3aa4b5e2d7495c0dc3abbfc06cc7336a0822ce461529025265e5223a81f96d11906ab5d0b1a06a88ddc536dfaa62c9179e33e3880b2a7fffeb127ceda4b32d3302551a446e373b9b40c12ce5799c55a0825e4e4e2c0171708e7079492"]}, 0x5f0}], 0x1, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20, 0x4044050}, 0x40800) unlink(&(0x7f0000000080)='./file0/file0\x00') openat$vcsu(0xffffffffffffff9c, &(0x7f0000000800), 0x1158c0, 0x0) 14:53:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x172, 0x0, 0x1, 0x40000}) ftruncate(r0, 0x0) 14:53:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 44) 14:53:35 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 93) [ 999.029246] FAULT_INJECTION: forcing a failure. [ 999.029246] name failslab, interval 1, probability 0, space 0, times 0 [ 999.031731] CPU: 1 PID: 7216 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 999.033262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 999.035147] Call Trace: [ 999.035746] dump_stack+0x107/0x167 [ 999.036574] should_fail.cold+0x5/0xa [ 999.037448] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 999.038744] should_failslab+0x5/0x20 [ 999.039599] kmem_cache_alloc+0x5b/0x310 [ 999.040523] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 999.041793] idr_get_free+0x4b5/0x8f0 [ 999.042666] idr_alloc_u32+0x170/0x2d0 [ 999.043547] ? __fprop_inc_percpu_max+0x130/0x130 [ 999.044633] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 999.045840] ? lock_release+0x680/0x680 [ 999.046737] idr_alloc+0xc2/0x130 [ 999.047515] ? idr_alloc_u32+0x2d0/0x2d0 [ 999.048422] ? rwlock_bug.part.0+0x90/0x90 [ 999.049392] p9_client_prepare_req.part.0+0x612/0xac0 [ 999.050550] ? do_raw_spin_lock+0x121/0x260 [ 999.051517] p9_client_rpc+0x220/0x1370 [ 999.052420] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 999.053622] ? unix_write_space+0x3f0/0x3f0 [ 999.054594] ? sock_poll+0x165/0x510 [ 999.055427] ? kernel_sendpage+0xd0/0xd0 [ 999.056337] ? p9_fd_poll+0x1e0/0x2c0 [ 999.057198] ? p9_fd_create+0x357/0x4a0 [ 999.058073] ? p9_conn_create+0x510/0x510 [ 999.058967] ? p9_client_create+0x798/0x1230 [ 999.059916] ? kfree+0xd7/0x340 [ 999.060623] ? do_raw_spin_unlock+0x4f/0x220 [ 999.061596] p9_client_create+0xa76/0x1230 [ 999.062526] ? p9_client_flush+0x430/0x430 [ 999.063450] ? trace_hardirqs_on+0x5b/0x180 [ 999.064407] ? lockdep_init_map_type+0x2c7/0x780 [ 999.065448] ? __raw_spin_lock_init+0x36/0x110 [ 999.066456] v9fs_session_init+0x1dd/0x1680 [ 999.067411] ? lock_release+0x680/0x680 [ 999.068287] ? kmem_cache_alloc_trace+0x151/0x320 [ 999.069350] ? v9fs_show_options+0x690/0x690 [ 999.070315] ? trace_hardirqs_on+0x5b/0x180 [ 999.071266] ? kasan_unpoison_shadow+0x33/0x50 [ 999.072250] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 999.073360] v9fs_mount+0x79/0x8f0 [ 999.074136] ? v9fs_write_inode+0x60/0x60 [ 999.075030] legacy_get_tree+0x105/0x220 [ 999.075916] vfs_get_tree+0x8e/0x300 [ 999.076726] path_mount+0x1490/0x21e0 [ 999.077567] ? strncpy_from_user+0x9e/0x470 [ 999.078505] ? finish_automount+0xa90/0xa90 [ 999.079431] ? getname_flags.part.0+0x1dd/0x4f0 [ 999.080427] ? _copy_from_user+0xfb/0x1b0 [ 999.081331] __x64_sys_mount+0x282/0x300 [ 999.082207] ? copy_mnt_ns+0xa00/0xa00 [ 999.083051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 999.084183] ? syscall_enter_from_user_mode+0x1d/0x50 [ 999.085295] do_syscall_64+0x33/0x40 [ 999.086101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 999.087200] RIP: 0033:0x7f9de321cb19 [ 999.087994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 999.091938] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 999.093572] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 999.095102] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 999.096633] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 999.098161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 999.099674] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 999.104959] FAULT_INJECTION: forcing a failure. [ 999.104959] name failslab, interval 1, probability 0, space 0, times 0 [ 999.107488] CPU: 1 PID: 7215 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 999.108950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 999.110722] Call Trace: [ 999.111285] dump_stack+0x107/0x167 [ 999.112066] should_fail.cold+0x5/0xa [ 999.112881] should_failslab+0x5/0x20 [ 999.113697] __kmalloc_track_caller+0x79/0x370 [ 999.114663] ? v9fs_session_init+0xe9/0x1680 [ 999.115597] ? kernel_text_address+0xf2/0x120 [ 999.116550] kstrdup+0x36/0x70 [ 999.117227] v9fs_session_init+0xe9/0x1680 [ 999.118134] ? lock_release+0x680/0x680 [ 999.118974] ? find_held_lock+0x2c/0x110 [ 999.119838] ? kmem_cache_alloc_trace+0x151/0x320 [ 999.120851] ? v9fs_show_options+0x690/0x690 [ 999.121801] ? trace_hardirqs_on+0x5b/0x180 [ 999.122712] ? kasan_unpoison_shadow+0x33/0x50 [ 999.123676] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 999.124753] v9fs_mount+0x79/0x8f0 [ 999.125524] ? v9fs_write_inode+0x60/0x60 [ 999.126398] legacy_get_tree+0x105/0x220 [ 999.127262] vfs_get_tree+0x8e/0x300 [ 999.128047] path_mount+0x1490/0x21e0 [ 999.128858] ? strncpy_from_user+0x9e/0x470 [ 999.129774] ? finish_automount+0xa90/0xa90 [ 999.130688] ? getname_flags.part.0+0x1dd/0x4f0 [ 999.131673] ? _copy_from_user+0xfb/0x1b0 [ 999.132556] __x64_sys_mount+0x282/0x300 [ 999.133425] ? copy_mnt_ns+0xa00/0xa00 [ 999.134250] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 999.135351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 999.136432] do_syscall_64+0x33/0x40 [ 999.137214] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 999.138288] RIP: 0033:0x7f11174d2b19 [ 999.139063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:53:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 999.142898] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 999.144702] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 999.146283] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 999.147851] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 999.149428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 999.150995] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 14:53:35 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 94) 14:53:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 45) [ 999.176668] FAULT_INJECTION: forcing a failure. [ 999.176668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 999.179642] CPU: 1 PID: 7227 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 999.181324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 999.183354] Call Trace: [ 999.184005] dump_stack+0x107/0x167 [ 999.184901] should_fail.cold+0x5/0xa [ 999.185842] _copy_from_user+0x2e/0x1b0 [ 999.186811] io_copy_iov+0xbf/0x1c0 14:53:35 executing program 7: read$snapshot(0xffffffffffffffff, &(0x7f0000000080)=""/188, 0xbc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = accept$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) dup(r1) r5 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000c00), 0x1312) fstat(r5, &(0x7f00000002c0)) ftruncate(r0, 0x0) [ 999.187691] ? io_cancel_task_cb+0x80/0x80 [ 999.188780] ? kmalloc_order+0xfe/0x160 [ 999.189736] io_sqe_buffers_register+0x31d/0x880 [ 999.190859] ? io_sqd_handle_event+0x350/0x350 [ 999.191982] __do_sys_io_uring_register+0x1648/0x2fa0 [ 999.193205] ? io_recvmsg+0xd70/0xd70 [ 999.194119] ? fput_many+0x2f/0x1a0 [ 999.194974] ? ksys_write+0x1a9/0x260 [ 999.195875] ? __ia32_sys_read+0xb0/0xb0 [ 999.196835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 999.198082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 999.199317] do_syscall_64+0x33/0x40 [ 999.200209] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 999.201429] RIP: 0033:0x7f748a34ab19 [ 999.202306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 999.206656] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 999.207401] FAULT_INJECTION: forcing a failure. [ 999.207401] name failslab, interval 1, probability 0, space 0, times 0 [ 999.208463] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 999.211426] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 999.213132] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 999.214799] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 999.216456] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 999.218144] CPU: 0 PID: 7231 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 999.218926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 999.219876] Call Trace: [ 999.220178] dump_stack+0x107/0x167 [ 999.220597] should_fail.cold+0x5/0xa [ 999.221035] ? create_object.isra.0+0x3a/0xa30 [ 999.221567] should_failslab+0x5/0x20 [ 999.222005] kmem_cache_alloc+0x5b/0x310 [ 999.222476] create_object.isra.0+0x3a/0xa30 [ 999.222989] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 999.223577] kmem_cache_alloc+0x159/0x310 [ 999.224062] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 999.224707] idr_get_free+0x4b5/0x8f0 [ 999.225154] idr_alloc_u32+0x170/0x2d0 [ 999.225625] ? __fprop_inc_percpu_max+0x130/0x130 [ 999.226190] ? p9_client_prepare_req.part.0+0x20a/0xac0 [ 999.226804] ? lock_release+0x680/0x680 [ 999.227264] idr_alloc+0xc2/0x130 [ 999.227662] ? idr_alloc_u32+0x2d0/0x2d0 [ 999.228143] ? rwlock_bug.part.0+0x90/0x90 [ 999.228638] p9_client_prepare_req.part.0+0x612/0xac0 [ 999.229231] ? do_raw_spin_lock+0x121/0x260 [ 999.229734] p9_client_rpc+0x220/0x1370 [ 999.230196] ? p9_client_prepare_req.part.0+0xac0/0xac0 [ 999.230809] ? unix_write_space+0x3f0/0x3f0 [ 999.231310] ? sock_poll+0x165/0x510 [ 999.231738] ? kernel_sendpage+0xd0/0xd0 [ 999.232206] ? p9_fd_poll+0x1e0/0x2c0 [ 999.232645] ? p9_fd_create+0x357/0x4a0 [ 999.233099] ? p9_conn_create+0x510/0x510 [ 999.233577] ? p9_client_create+0x798/0x1230 [ 999.234079] ? kfree+0xd7/0x340 [ 999.234456] ? do_raw_spin_unlock+0x4f/0x220 [ 999.234960] p9_client_create+0xa76/0x1230 [ 999.235448] ? p9_client_flush+0x430/0x430 [ 999.235935] ? trace_hardirqs_on+0x5b/0x180 [ 999.236429] ? lockdep_init_map_type+0x2c7/0x780 [ 999.236971] ? __raw_spin_lock_init+0x36/0x110 [ 999.237503] v9fs_session_init+0x1dd/0x1680 [ 999.237993] ? lock_release+0x680/0x680 [ 999.238462] ? kmem_cache_alloc_trace+0x151/0x320 [ 999.239014] ? v9fs_show_options+0x690/0x690 [ 999.239519] ? trace_hardirqs_on+0x5b/0x180 [ 999.240022] ? kasan_unpoison_shadow+0x33/0x50 [ 999.240539] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 999.241117] v9fs_mount+0x79/0x8f0 [ 999.241536] ? v9fs_write_inode+0x60/0x60 [ 999.242010] legacy_get_tree+0x105/0x220 [ 999.242484] vfs_get_tree+0x8e/0x300 [ 999.242910] path_mount+0x1490/0x21e0 [ 999.243348] ? strncpy_from_user+0x9e/0x470 [ 999.243839] ? finish_automount+0xa90/0xa90 [ 999.244331] ? getname_flags.part.0+0x1dd/0x4f0 [ 999.244858] ? _copy_from_user+0xfb/0x1b0 [ 999.245338] __x64_sys_mount+0x282/0x300 [ 999.245797] ? copy_mnt_ns+0xa00/0xa00 [ 999.246241] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 999.246834] ? syscall_enter_from_user_mode+0x1d/0x50 [ 999.247436] do_syscall_64+0x33/0x40 [ 999.247856] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 999.248441] RIP: 0033:0x7f9de321cb19 [ 999.248862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 999.250944] RSP: 002b:00007f9de0792188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 999.251802] RAX: ffffffffffffffda RBX: 00007f9de332ff60 RCX: 00007f9de321cb19 [ 999.252607] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 999.253420] RBP: 00007f9de07921d0 R08: 00000000200000c0 R09: 0000000000000000 [ 999.254227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 999.255031] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 14:53:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) sendfile(r0, r0, 0x0, 0x5) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x80) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') 14:53:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:53:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 20) 14:53:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x78f100, 0x141) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x46f, 0x0, 0x0, 0x100000}) unlink(&(0x7f0000000200)='./file0\x00') getsockname(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000100)=0x80) write(r1, &(0x7f0000000240)="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", 0x1000) 14:53:52 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:53:52 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) linkat(r1, &(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) bind$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000680)={'vlan1\x00'}) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/162, 0xa2) setxattr$trusted_overlay_nlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)={'U-', 0x8001}, 0x16, 0x1) 14:53:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 46) 14:53:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:53:52 executing program 7: timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000640)}}, &(0x7f00000004c0)=0x0) timer_gettime(r0, &(0x7f0000000000)) timer_getoverrun(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r1, 0x0) 14:53:52 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 95) [ 1015.786701] FAULT_INJECTION: forcing a failure. [ 1015.786701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.789287] CPU: 0 PID: 7254 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 1015.790768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1015.792553] Call Trace: [ 1015.793124] dump_stack+0x107/0x167 [ 1015.793918] should_fail.cold+0x5/0xa [ 1015.794747] _copy_from_user+0x2e/0x1b0 [ 1015.795603] io_copy_iov+0xbf/0x1c0 [ 1015.796383] ? io_cancel_task_cb+0x80/0x80 [ 1015.797292] ? kmalloc_order+0xfe/0x160 [ 1015.798168] io_sqe_buffers_register+0x31d/0x880 [ 1015.799193] ? io_sqd_handle_event+0x350/0x350 [ 1015.800195] __do_sys_io_uring_register+0x1648/0x2fa0 [ 1015.801308] ? io_recvmsg+0xd70/0xd70 [ 1015.802130] ? fput_many+0x2f/0x1a0 [ 1015.802905] ? ksys_write+0x1a9/0x260 [ 1015.803722] ? __ia32_sys_read+0xb0/0xb0 [ 1015.804593] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.805724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.806836] do_syscall_64+0x33/0x40 [ 1015.807636] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.808736] RIP: 0033:0x7f748a34ab19 [ 1015.809546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1015.813466] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1015.815105] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 1015.816633] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 1015.818159] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1015.819679] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 1015.821199] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 1015.821789] FAULT_INJECTION: forcing a failure. [ 1015.821789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.825174] CPU: 1 PID: 7260 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 1015.826591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1015.828278] Call Trace: [ 1015.828828] dump_stack+0x107/0x167 [ 1015.829586] should_fail.cold+0x5/0xa [ 1015.829622] FAULT_INJECTION: forcing a failure. [ 1015.829622] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.830372] _copy_to_user+0x2e/0x180 [ 1015.830403] simple_read_from_buffer+0xcc/0x160 [ 1015.834466] proc_fail_nth_read+0x198/0x230 [ 1015.835355] ? proc_sessionid_read+0x230/0x230 [ 1015.836285] ? security_file_permission+0xb1/0xe0 [ 1015.837276] ? proc_sessionid_read+0x230/0x230 [ 1015.838229] vfs_read+0x228/0x620 [ 1015.838938] ksys_read+0x12d/0x260 [ 1015.839656] ? vfs_write+0xb10/0xb10 [ 1015.840415] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.841474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.842527] do_syscall_64+0x33/0x40 [ 1015.843277] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.844304] RIP: 0033:0x7f9de31cf69c [ 1015.845053] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1015.848780] RSP: 002b:00007f9de0792170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1015.850334] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f9de31cf69c [ 1015.851773] RDX: 000000000000000f RSI: 00007f9de07921e0 RDI: 0000000000000005 [ 1015.853211] RBP: 00007f9de07921d0 R08: 0000000000000000 R09: 0000000000000000 [ 1015.854657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1015.856092] R13: 00007fff7309ff0f R14: 00007f9de0792300 R15: 0000000000022000 [ 1015.857582] CPU: 0 PID: 7258 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1015.859064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1015.860845] Call Trace: [ 1015.861416] dump_stack+0x107/0x167 [ 1015.862212] should_fail.cold+0x5/0xa [ 1015.863041] should_failslab+0x5/0x20 [ 1015.863870] __kmalloc_track_caller+0x79/0x370 [ 1015.864859] ? v9fs_session_init+0xe9/0x1680 [ 1015.865821] ? kernel_text_address+0xf2/0x120 14:53:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) clone3(&(0x7f0000000300)={0x100120000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x22}, &(0x7f0000000140)=""/3, 0x3, &(0x7f0000000240)=""/129, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5, {r0}}, 0x58) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000001c0)={0x8, 0x0, 0x2, 0xfff, 0xc4e}) unlink(&(0x7f0000000200)='./file0\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/drivers\x00', 0x0, 0x0) [ 1015.866789] kstrdup+0x36/0x70 [ 1015.867597] v9fs_session_init+0xe9/0x1680 [ 1015.868510] ? lock_release+0x680/0x680 [ 1015.869360] ? find_held_lock+0x2c/0x110 [ 1015.870256] ? kmem_cache_alloc_trace+0x151/0x320 [ 1015.871294] ? v9fs_show_options+0x690/0x690 [ 1015.872251] ? trace_hardirqs_on+0x5b/0x180 [ 1015.873182] ? kasan_unpoison_shadow+0x33/0x50 [ 1015.874171] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1015.875268] v9fs_mount+0x79/0x8f0 [ 1015.876034] ? v9fs_write_inode+0x60/0x60 [ 1015.876924] legacy_get_tree+0x105/0x220 [ 1015.877809] vfs_get_tree+0x8e/0x300 [ 1015.878611] path_mount+0x1490/0x21e0 [ 1015.879437] ? strncpy_from_user+0x9e/0x470 [ 1015.880366] ? finish_automount+0xa90/0xa90 [ 1015.881294] ? getname_flags.part.0+0x1dd/0x4f0 [ 1015.882301] ? _copy_from_user+0xfb/0x1b0 [ 1015.883201] __x64_sys_mount+0x282/0x300 [ 1015.884076] ? copy_mnt_ns+0xa00/0xa00 [ 1015.884920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1015.886061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1015.887169] do_syscall_64+0x33/0x40 [ 1015.887967] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1015.889063] RIP: 0033:0x7f11174d2b19 [ 1015.889871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1015.893807] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1015.895446] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 1015.896971] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 1015.898506] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 1015.900036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1015.901572] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 14:53:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3f000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:53:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x400) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x41) ftruncate(r0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fallocate(r0, 0x1, 0x3ff, 0x401) lseek(r2, 0x4, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/54, 0x36}, {&(0x7f00000003c0)=""/11, 0xb}, {&(0x7f0000000400)=""/125, 0x7d}], 0x3) execveat(r2, &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000002c0)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='^@\'\x00', &(0x7f0000000140)='[\x00', &(0x7f0000000180)='({-(,\xd3[]+\x00', &(0x7f00000001c0)='(\\^%\'^\x90$%OS:{\x00', &(0x7f0000000200)='m(\x00', &(0x7f0000000240)='&\x00', &(0x7f0000000280)='-,:@++$\x00'], &(0x7f0000000340)=[&(0x7f0000000300)='-\x00'], 0x400) socket(0x2a, 0x3, 0x8) 14:53:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:53:52 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) linkat(r1, &(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) bind$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000680)={'vlan1\x00'}) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/162, 0xa2) setxattr$trusted_overlay_nlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)={'U-', 0x8001}, 0x16, 0x1) 14:53:52 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 96) 14:53:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1016.068402] FAULT_INJECTION: forcing a failure. [ 1016.068402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.070959] CPU: 0 PID: 7279 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 1016.072417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1016.074188] Call Trace: 14:53:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1016.074754] dump_stack+0x107/0x167 [ 1016.075700] should_fail.cold+0x5/0xa [ 1016.076521] _copy_from_user+0x2e/0x1b0 [ 1016.077362] io_copy_iov+0xbf/0x1c0 [ 1016.078145] ? io_cancel_task_cb+0x80/0x80 [ 1016.079042] ? kmalloc_order+0xfe/0x160 [ 1016.079896] io_sqe_buffers_register+0x31d/0x880 [ 1016.080912] ? io_sqd_handle_event+0x350/0x350 [ 1016.081913] __do_sys_io_uring_register+0x1648/0x2fa0 [ 1016.083015] ? io_recvmsg+0xd70/0xd70 [ 1016.083825] ? fput_many+0x2f/0x1a0 [ 1016.084591] ? ksys_write+0x1a9/0x260 [ 1016.085387] ? __ia32_sys_read+0xb0/0xb0 [ 1016.086257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1016.087366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1016.088457] do_syscall_64+0x33/0x40 [ 1016.089246] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1016.090338] RIP: 0033:0x7f748a34ab19 [ 1016.091127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1016.095027] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1016.096635] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 1016.098161] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 1016.099669] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1016.101174] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 1016.102684] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:53:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) 14:53:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x16) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0xfffffffc}) r1 = gettid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xe1, 0xd6, 0x8, 0x80, 0x0, 0x3, 0x1000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000040), 0xf}, 0x481, 0xfffffffffffffffc, 0x7ff, 0x9, 0x2000000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, r1, 0x6, r0, 0x8) ftruncate(r0, 0x0) [ 1016.201177] FAULT_INJECTION: forcing a failure. [ 1016.201177] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.203037] CPU: 1 PID: 7289 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1016.204055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1016.205265] Call Trace: [ 1016.205678] dump_stack+0x107/0x167 [ 1016.206211] should_fail.cold+0x5/0xa [ 1016.206779] should_failslab+0x5/0x20 [ 1016.207348] __kmalloc_track_caller+0x79/0x370 [ 1016.208036] ? v9fs_session_init+0xe9/0x1680 [ 1016.208684] ? kernel_text_address+0xf2/0x120 [ 1016.209334] kstrdup+0x36/0x70 [ 1016.209814] v9fs_session_init+0xe9/0x1680 [ 1016.210439] ? lock_release+0x680/0x680 [ 1016.211025] ? find_held_lock+0x2c/0x110 [ 1016.211618] ? kmem_cache_alloc_trace+0x151/0x320 [ 1016.212311] ? v9fs_show_options+0x690/0x690 [ 1016.212963] ? trace_hardirqs_on+0x5b/0x180 [ 1016.213604] ? kasan_unpoison_shadow+0x33/0x50 [ 1016.214271] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1016.215019] v9fs_mount+0x79/0x8f0 [ 1016.215576] ? v9fs_write_inode+0x60/0x60 [ 1016.216212] legacy_get_tree+0x105/0x220 [ 1016.216835] vfs_get_tree+0x8e/0x300 [ 1016.217413] path_mount+0x1490/0x21e0 [ 1016.218010] ? strncpy_from_user+0x9e/0x470 [ 1016.218663] ? finish_automount+0xa90/0xa90 [ 1016.219320] ? getname_flags.part.0+0x1dd/0x4f0 [ 1016.220023] ? _copy_from_user+0xfb/0x1b0 [ 1016.220655] __x64_sys_mount+0x282/0x300 [ 1016.221273] ? copy_mnt_ns+0xa00/0xa00 [ 1016.221898] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1016.222696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1016.223477] do_syscall_64+0x33/0x40 [ 1016.224046] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1016.224821] RIP: 0033:0x7f11174d2b19 [ 1016.225382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1016.228162] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1016.229317] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 1016.230405] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 1016.231475] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 1016.232543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1016.233616] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 14:54:07 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 14:54:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0xacd, 0x3fffffe, 0x8001, 0x0, 0x8}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x30002, 0x100) unlink(&(0x7f0000000200)='./file0\x00') 14:54:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:07 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) linkat(r1, &(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) bind$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000680)={'vlan1\x00'}) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/162, 0xa2) setxattr$trusted_overlay_nlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)={'U-', 0x8001}, 0x16, 0x1) 14:54:07 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 97) 14:54:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 22) 14:54:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x9000) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) getresgid(&(0x7f0000000540), &(0x7f0000000500), &(0x7f0000000580)=0x0) getgroups(0x1, &(0x7f0000000440)=[r3]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYBLOB=',/file0\x00']) 14:54:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1030.973578] FAULT_INJECTION: forcing a failure. [ 1030.973578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.975267] CPU: 1 PID: 7302 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 1030.976231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1030.977385] Call Trace: [ 1030.977767] dump_stack+0x107/0x167 [ 1030.978285] should_fail.cold+0x5/0xa [ 1030.978829] _copy_from_user+0x2e/0x1b0 [ 1030.979391] io_copy_iov+0xbf/0x1c0 [ 1030.979901] ? io_cancel_task_cb+0x80/0x80 [ 1030.980496] ? kmalloc_order+0xfe/0x160 [ 1030.981059] io_sqe_buffers_register+0x31d/0x880 [ 1030.981737] ? io_sqd_handle_event+0x350/0x350 [ 1030.982393] __do_sys_io_uring_register+0x1648/0x2fa0 [ 1030.983116] ? io_recvmsg+0xd70/0xd70 [ 1030.983649] ? fput_many+0x2f/0x1a0 [ 1030.984158] ? ksys_write+0x1a9/0x260 [ 1030.984687] ? __ia32_sys_read+0xb0/0xb0 [ 1030.985252] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1030.985994] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1030.986710] do_syscall_64+0x33/0x40 [ 1030.987228] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1030.987942] RIP: 0033:0x7f748a34ab19 [ 1030.988463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1030.991016] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1030.992069] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 1030.993056] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 1030.994055] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1030.995037] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 1030.996026] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 1031.003454] FAULT_INJECTION: forcing a failure. [ 1031.003454] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.006668] CPU: 0 PID: 7298 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1031.008431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1031.010618] Call Trace: [ 1031.011300] dump_stack+0x107/0x167 [ 1031.012239] should_fail.cold+0x5/0xa [ 1031.013215] ? p9_client_create+0xaf/0x1230 [ 1031.014330] should_failslab+0x5/0x20 [ 1031.015316] kmem_cache_alloc_trace+0x55/0x320 [ 1031.016490] ? find_held_lock+0x2c/0x110 [ 1031.017539] p9_client_create+0xaf/0x1230 [ 1031.018615] ? lock_downgrade+0x6d0/0x6d0 [ 1031.019582] ? p9_client_flush+0x430/0x430 [ 1031.020539] ? trace_hardirqs_on+0x5b/0x180 [ 1031.021522] ? lockdep_init_map_type+0x2c7/0x780 [ 1031.022628] ? __raw_spin_lock_init+0x36/0x110 [ 1031.023671] v9fs_session_init+0x1dd/0x1680 [ 1031.024652] ? lock_release+0x680/0x680 [ 1031.025562] ? kmem_cache_alloc_trace+0x151/0x320 [ 1031.026658] ? v9fs_show_options+0x690/0x690 [ 1031.027660] ? trace_hardirqs_on+0x5b/0x180 [ 1031.028634] ? kasan_unpoison_shadow+0x33/0x50 [ 1031.029665] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1031.030813] v9fs_mount+0x79/0x8f0 [ 1031.031613] ? v9fs_write_inode+0x60/0x60 [ 1031.032543] legacy_get_tree+0x105/0x220 [ 1031.033459] vfs_get_tree+0x8e/0x300 [ 1031.034302] path_mount+0x1490/0x21e0 14:54:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1031.035647] ? strncpy_from_user+0x9e/0x470 [ 1031.036781] ? finish_automount+0xa90/0xa90 [ 1031.037769] ? getname_flags.part.0+0x1dd/0x4f0 [ 1031.038810] ? _copy_from_user+0xfb/0x1b0 [ 1031.039750] __x64_sys_mount+0x282/0x300 [ 1031.040656] ? copy_mnt_ns+0xa00/0xa00 14:54:07 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 98) 14:54:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1031.041533] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1031.042765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1031.043927] do_syscall_64+0x33/0x40 [ 1031.044760] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1031.045915] RIP: 0033:0x7f11174d2b19 [ 1031.046747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1031.050866] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1031.052562] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 1031.054163] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 1031.055750] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 1031.057336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1031.058929] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 14:54:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) unlink(&(0x7f0000000200)='./file0\x00') 14:54:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1031.138798] FAULT_INJECTION: forcing a failure. [ 1031.138798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.141387] CPU: 0 PID: 7323 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 1031.142884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1031.144685] Call Trace: [ 1031.145265] dump_stack+0x107/0x167 [ 1031.146066] should_fail.cold+0x5/0xa [ 1031.146901] _copy_from_user+0x2e/0x1b0 [ 1031.147769] io_copy_iov+0xbf/0x1c0 [ 1031.148558] ? io_cancel_task_cb+0x80/0x80 [ 1031.149476] ? kmalloc_order+0xfe/0x160 [ 1031.150358] io_sqe_buffers_register+0x31d/0x880 [ 1031.151400] ? io_sqd_handle_event+0x350/0x350 [ 1031.152417] __do_sys_io_uring_register+0x1648/0x2fa0 [ 1031.153551] ? io_recvmsg+0xd70/0xd70 [ 1031.154390] ? fput_many+0x2f/0x1a0 [ 1031.155180] ? ksys_write+0x1a9/0x260 [ 1031.156009] ? __ia32_sys_read+0xb0/0xb0 [ 1031.156893] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1031.158036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1031.159154] do_syscall_64+0x33/0x40 [ 1031.159957] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1031.161061] RIP: 0033:0x7f748a34ab19 [ 1031.161869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1031.165814] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1031.167448] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 1031.168974] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 1031.170489] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1031.171980] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 14:54:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1031.173527] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:54:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xfeffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:07 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) linkat(r1, &(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) bind$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000680)={'vlan1\x00'}) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/162, 0xa2) 14:54:22 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) linkat(r1, &(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) bind$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000680)={'vlan1\x00'}) 14:54:22 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 14:54:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 23) 14:54:22 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) copy_file_range(r1, &(0x7f0000000080)=0x3d1, r0, &(0x7f00000000c0)=0x800, 0x5, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) lseek(r2, 0x4, 0x0) mknodat$loop(r2, &(0x7f0000000100)='./file0\x00', 0x6000, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 14:54:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffff0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:22 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 99) 14:54:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) lseek(0xffffffffffffffff, 0x4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) statx(r0, &(0x7f0000000940)='./file0\x00', 0x100, 0x200, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x0) r5 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000c00), 0x1312) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getresgid(&(0x7f0000000540), &(0x7f0000000500), &(0x7f0000000580)=0x0) getgroups(0x1, &(0x7f0000000440)=[r7]) r8 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000c00), 0x1312) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="ba7439c62afd56979f82edd4c9986823fea84d9949879ee2", 0x18}, {&(0x7f0000000180)="52445fd81b040bd69e69d016f4d7782e9cd0fa1ee624e2a32f64ea0f6e9ee9a45630bcb4cca60d17406fc7ef47a29073f72d417048549ecae56a7155cc2fecab3b81a11ff3d34620caa2294c5f383f10813a25fa83b25d0b", 0x58}, {&(0x7f0000000240)="d33f6406a66d2f2eda0e0738622b8415756d2a0ac7b0d8e28e78519d97af8cee1a80be63172e3fe64058151e490e288ca75975762224bc84cfb85329157e22776005f14db61c32db6f5d1f16488f3579ecf0bcd39fbc0a93a7c9500241d9309754351cc04e342e41f8f563ea2309c7a9e78d3395390ee63e57a4ca06376d24ba93e097d6331ba9c29ded76c317023293eb6f4af48b5e808621c550089752cc92e193151b74bc3150043f32737609d0f5995566c4394297273b50b7dfb1b7a74dda8d480ba5963a7d1a8cdcea4f39cb2f23", 0xd1}, {&(0x7f0000000340)="926421fe65db7570f458dae70a96bf37aa364faf2ced437bcc841237671bc6b4cc573b1937d4d2af58774870ebe6b251fad22722b9e80e556294112baf55a7638153947a", 0x44}, {&(0x7f00000003c0)="6d58913c458a95bc18de8abaedace3da65cba8a364a925888994fa7cdbb12a2100156ac3b649698ae672f5f4822d5c1ee9671ea128420564cd567f54cbec09e97b85fe86d74ea6086983083adc28f38daf1911cf248e9e0beeba77b855a4a4dfd88b7fdef9085f29821ee3c34cb606ea6627c77a1db19606cfac6419517f5e51fd4eaf8a1feff974f115b898b19a085a04cdda95036f8db47bd01a7ec85e1ee665a612cc8a55c9272e58a159758eb085b9028ec4929c9e4e9336d62f63ffc7fddb3d6541c615355956482b14d5171f50af361e56307eaa18ac0b74cfb8d32a959115160bb11a74951e0711b613343b", 0xef}, {&(0x7f00000004c0)="c1485e64c25fe0edcacd4608ddcab285c77e219a4e3e4bb9b10f494738ab06adc8582b8d2c252f100bcc2a350182a54b361af931d91134c4159b9bcf857041cbb7930f1581a89a67ad1bef05dfb9", 0x4e}, {&(0x7f0000000540)="f07468a70b0b3b85ae2fd9f3424ca70914fc4478b0cf1a5bebc8557a90255ea600e9a54d02231cfa5ef9ad", 0x2b}, {&(0x7f0000000580)="e6b40c85537dd64ca6da6892050a30ffe4493eda23a2e3bdebde4088ae9f75998c8429760faccc14", 0x28}, {&(0x7f00000005c0)="407aea0b9cddfe71e9398c4e02afff5b77bdc2080a6f6ebbb417885e603c3fe0b11958b7bd2727485873347481aedf99cc51758b14de70f92d35602ae5b5c9b1369b6728e70103b138c494c6", 0x4c}, {&(0x7f0000000640)="c4d3f7069d0b9be50ba4068038cf619e39f264ec1b9160f50f22ecadce04772748e7d3e5c819eb50f6a27c9e92d0afdab07424bda9a05f87b063c14c63", 0x3d}], 0xa, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @rights={{0x2c, 0x1, 0x1, [r4, r5, r6, r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r7}}}, @rights={{0x18, 0x1, 0x1, [r0, r8]}}], 0xa8, 0x4044000}, 0x20004040) unlink(&(0x7f0000000200)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$unix(r9, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) [ 1045.907224] FAULT_INJECTION: forcing a failure. [ 1045.907224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1045.909323] CPU: 0 PID: 7347 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 1045.910482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1045.911869] Call Trace: [ 1045.912322] dump_stack+0x107/0x167 [ 1045.912941] should_fail.cold+0x5/0xa [ 1045.913591] _copy_from_user+0x2e/0x1b0 [ 1045.914271] io_copy_iov+0xbf/0x1c0 [ 1045.914891] ? io_cancel_task_cb+0x80/0x80 [ 1045.915613] ? kmalloc_order+0xfe/0x160 [ 1045.916301] io_sqe_buffers_register+0x31d/0x880 [ 1045.917109] ? io_sqd_handle_event+0x350/0x350 [ 1045.917911] __do_sys_io_uring_register+0x1648/0x2fa0 [ 1045.918790] ? io_recvmsg+0xd70/0xd70 [ 1045.918987] FAULT_INJECTION: forcing a failure. [ 1045.918987] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.919440] ? fput_many+0x2f/0x1a0 [ 1045.919455] ? ksys_write+0x1a9/0x260 [ 1045.919471] ? __ia32_sys_read+0xb0/0xb0 [ 1045.919497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1045.924659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1045.925542] do_syscall_64+0x33/0x40 [ 1045.926177] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1045.927036] RIP: 0033:0x7f748a34ab19 [ 1045.927677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1045.930797] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1045.932101] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 1045.933320] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 1045.934548] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1045.935749] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000002 [ 1045.936955] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 [ 1045.938206] CPU: 1 PID: 7356 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1045.939714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1045.941470] Call Trace: [ 1045.942065] dump_stack+0x107/0x167 [ 1045.942855] should_fail.cold+0x5/0xa [ 1045.943695] ? create_object.isra.0+0x3a/0xa30 [ 1045.944672] should_failslab+0x5/0x20 [ 1045.945479] kmem_cache_alloc+0x5b/0x310 [ 1045.946393] ? kernel_text_address+0xf2/0x120 [ 1045.947378] create_object.isra.0+0x3a/0xa30 [ 1045.948321] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1045.949417] kmem_cache_alloc_trace+0x151/0x320 [ 1045.950429] ? find_held_lock+0x2c/0x110 [ 1045.951404] p9_client_create+0xaf/0x1230 [ 1045.952484] ? lock_downgrade+0x6d0/0x6d0 [ 1045.953575] ? p9_client_flush+0x430/0x430 [ 1045.954689] ? trace_hardirqs_on+0x5b/0x180 [ 1045.955823] ? lockdep_init_map_type+0x2c7/0x780 [ 1045.957050] ? __raw_spin_lock_init+0x36/0x110 [ 1045.958141] v9fs_session_init+0x1dd/0x1680 [ 1045.959092] ? lock_release+0x680/0x680 [ 1045.959980] ? kmem_cache_alloc_trace+0x151/0x320 [ 1045.961127] ? v9fs_show_options+0x690/0x690 [ 1045.962131] ? trace_hardirqs_on+0x5b/0x180 [ 1045.963050] ? kasan_unpoison_shadow+0x33/0x50 [ 1045.964028] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1045.965148] v9fs_mount+0x79/0x8f0 [ 1045.965936] ? v9fs_write_inode+0x60/0x60 [ 1045.966828] legacy_get_tree+0x105/0x220 [ 1045.967703] vfs_get_tree+0x8e/0x300 [ 1045.968483] path_mount+0x1490/0x21e0 [ 1045.969301] ? strncpy_from_user+0x9e/0x470 [ 1045.970247] ? finish_automount+0xa90/0xa90 [ 1045.971180] ? getname_flags.part.0+0x1dd/0x4f0 [ 1045.972174] ? _copy_from_user+0xfb/0x1b0 [ 1045.973082] __x64_sys_mount+0x282/0x300 [ 1045.973974] ? copy_mnt_ns+0xa00/0xa00 [ 1045.974848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1045.975971] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1045.977143] do_syscall_64+0x33/0x40 [ 1045.978044] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1045.979138] RIP: 0033:0x7f11174d2b19 [ 1045.979938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1045.983871] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1045.985498] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 1045.987045] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 1045.988558] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 1045.990095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1045.991619] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 14:54:22 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffffff7f, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:22 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) (fail_nth: 100) [ 1046.085113] FAULT_INJECTION: forcing a failure. [ 1046.085113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1046.087153] CPU: 0 PID: 7368 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 1046.088284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1046.089654] Call Trace: [ 1046.090102] dump_stack+0x107/0x167 [ 1046.090700] should_fail.cold+0x5/0xa [ 1046.091329] _copy_from_user+0x2e/0x1b0 [ 1046.091995] io_copy_iov+0xbf/0x1c0 [ 1046.092609] ? io_cancel_task_cb+0x80/0x80 [ 1046.093323] ? kmalloc_order+0xfe/0x160 [ 1046.093983] io_sqe_buffers_register+0x31d/0x880 [ 1046.094786] ? io_sqd_handle_event+0x350/0x350 [ 1046.095560] __do_sys_io_uring_register+0x1648/0x2fa0 [ 1046.096430] ? io_recvmsg+0xd70/0xd70 [ 1046.097053] ? fput_many+0x2f/0x1a0 [ 1046.097650] ? ksys_write+0x1a9/0x260 [ 1046.098304] ? __ia32_sys_read+0xb0/0xb0 [ 1046.098979] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1046.099855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1046.100722] do_syscall_64+0x33/0x40 [ 1046.101331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 14:54:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8c7e1, 0x20) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) lseek(r2, 0xf9, 0x3) r3 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x4000, 0x1) openat(r3, &(0x7f00000003c0)='./file0\x00', 0x10040, 0x20) unlink(&(0x7f0000000200)='./file0\x00') r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) pipe2(&(0x7f0000000380), 0x84800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/193, 0xc1}, {&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000100)=""/19, 0x13}, {&(0x7f0000000180)=""/53, 0x35}], 0x4) [ 1046.102183] RIP: 0033:0x7f748a34ab19 [ 1046.102979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1046.106015] RSP: 002b:00007f74878c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1046.107275] RAX: ffffffffffffffda RBX: 00007f748a45df60 RCX: 00007f748a34ab19 [ 1046.108465] RDX: 0000000020000c00 RSI: 0000000000000000 RDI: 0000000000000003 [ 1046.109646] RBP: 00007f74878c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1046.110811] R10: 0000000000001312 R11: 0000000000000246 R12: 0000000000000003 [ 1046.111969] R13: 00007fff636a0a9f R14: 00007f74878c0300 R15: 0000000000022000 14:54:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:22 executing program 7: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x100}) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000009c0)=[{0x0, 0x0, 0x6a493989}], 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000005c0)={'syz_tun\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000300)={0x0, 0x2c, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r2, 0x703, 0x0, 0x0, {{}, {@val={0x8}}}}, 0x55}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) ftruncate(0xffffffffffffffff, 0x0) [ 1046.160002] loop7: detected capacity change from 0 to 49443328 [ 1046.263316] loop7: detected capacity change from 0 to 49443328 14:54:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 24) 14:54:39 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) linkat(r1, &(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) bind$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 14:54:39 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 14:54:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x8000071, 0x3, 0x0, 0x1}) ftruncate(r0, 0x0) 14:54:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:39 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) 14:54:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x383040, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x8006, 0x3, 0x8, 0x400000}) unlink(&(0x7f0000000200)='./file0\x00') 14:54:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1063.123743] FAULT_INJECTION: forcing a failure. [ 1063.123743] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.126197] CPU: 1 PID: 7401 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 1063.127634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1063.129378] Call Trace: [ 1063.129936] dump_stack+0x107/0x167 [ 1063.130714] should_fail.cold+0x5/0xa [ 1063.131532] should_failslab+0x5/0x20 [ 1063.132334] __kmalloc_track_caller+0x79/0x370 [ 1063.133298] ? p9_client_create+0x41d/0x1230 [ 1063.134220] kstrdup+0x36/0x70 [ 1063.134896] p9_client_create+0x41d/0x1230 [ 1063.135803] ? lock_downgrade+0x6d0/0x6d0 [ 1063.136698] ? p9_client_flush+0x430/0x430 [ 1063.137570] ? trace_hardirqs_on+0x5b/0x180 [ 1063.138481] ? lockdep_init_map_type+0x2c7/0x780 [ 1063.139476] ? __raw_spin_lock_init+0x36/0x110 [ 1063.140438] v9fs_session_init+0x1dd/0x1680 [ 1063.141336] ? lock_release+0x680/0x680 [ 1063.142179] ? kmem_cache_alloc_trace+0x151/0x320 [ 1063.143191] ? v9fs_show_options+0x690/0x690 [ 1063.144125] ? trace_hardirqs_on+0x5b/0x180 [ 1063.145029] ? kasan_unpoison_shadow+0x33/0x50 [ 1063.145980] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1063.147056] v9fs_mount+0x79/0x8f0 [ 1063.147804] ? v9fs_write_inode+0x60/0x60 [ 1063.148670] legacy_get_tree+0x105/0x220 [ 1063.149526] vfs_get_tree+0x8e/0x300 [ 1063.150329] path_mount+0x1490/0x21e0 [ 1063.151130] ? strncpy_from_user+0x9e/0x470 [ 1063.152043] ? finish_automount+0xa90/0xa90 [ 1063.152952] ? getname_flags.part.0+0x1dd/0x4f0 [ 1063.153939] ? _copy_from_user+0xfb/0x1b0 [ 1063.154821] __x64_sys_mount+0x282/0x300 [ 1063.155674] ? copy_mnt_ns+0xa00/0xa00 [ 1063.156490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1063.157609] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1063.158701] do_syscall_64+0x33/0x40 [ 1063.159499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1063.160574] RIP: 0033:0x7f11174d2b19 [ 1063.161342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1063.165194] RSP: 002b:00007f1114a48188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1063.166792] RAX: ffffffffffffffda RBX: 00007f11175e5f60 RCX: 00007f11174d2b19 [ 1063.168302] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 1063.169782] RBP: 00007f1114a481d0 R08: 00000000200000c0 R09: 0000000000000000 [ 1063.171290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1063.172787] R13: 00007ffc33f4eebf R14: 00007f1114a48300 R15: 0000000000022000 14:54:39 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) linkat(r1, &(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) 14:54:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xfffffffffffffff7, 0x410101) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x0, 0x5, 0x0, 0xffffffffffff0000, 0x2, 0x3, 0x38e, 0x17b, 0x38, 0x30c, 0x0, 0x1f, 0x20, 0x1, 0x3, 0x9, 0x3}, [{0x7, 0x9, 0x4, 0xfffffeff, 0x0, 0x7, 0x10001, 0x400}], "f762c5381fb319b44348659d28b509c88d1e0e89718e746728ee46eaef3ee45c9a7fa1d23472e217f6e5a18774010b5542bd15df333d5778668517fd5def0f0771c0b0ec773c824c6ffadb42a05e104e5e20f2e113ed2ef97b7ebdb6b23552ed9affabb0518f969224003967287be6daa066", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9ca) ftruncate(r0, 0x0) 14:54:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 25) 14:54:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0xfffffffe}) unlink(&(0x7f0000000200)='./file0\x00') 14:54:39 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, &(0x7f0000000c00), 0x1312) 14:54:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xfffffffe, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:39 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) linkat(r1, &(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 14:54:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xe4}}, './file0\x00'}) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) sendmsg$nl_generic(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x310, 0x1f, 0x200, 0x70bd2c, 0x25dfdbfb, {0x10}, [@generic="c6d960a367777bd87de356bdf23bae934594ca0764c48ffa6180848e291a940f7605baf07898b918556fb854a65cceb204fcd0c891b295e0a40d0bbb3999f3e88a3baa6e306719f90d8da1df7d2f3182282e81fe595bc3b1c6252b9b3e94ce6138edbe66ae2cc1e9806dadbef2b7b8aadbe1e2c8cb78f091c98771af262d8ad7c5c6a5c0dbe83c187d131d3624cc9a399bf6c8d49a7eee1f00fc69228700c1b8be6a46015a24fb0b774de2", @typed={0xe9, 0x5, 0x0, 0x0, @binary="bc2891770b26a39e2127ba3a5bb5ce0be13c47af3185d3133da24f1894363de739c829cc8891dad96ba99cd3690b7673fd3c4e82bfc728a3605871a5fb2736d93e0c67e91ded0e99e8ecdbb80431af8d354dbc3728af0646b43de684bee0b55088dd54c9b2155e37259dd93dfec78ac71a149a38d1728031372b0e827d97a64289e3e41f7c95a3b8a243e12d621054671516ef22b11f3b7b5d8c4600b0ed7df82c4be51a4503462fe0173d886f1a0cb02903a7770a396f100197fd0dc5cf1fa2fd6e9ba73a70746f5d1134cf62cb23a1e2591e04d42667f1ff40ac7f604252f4373877f97a"}, @nested={0x14, 0x4e, 0x0, 0x1, [@typed={0x8, 0x51, 0x0, 0x0, @uid}, @typed={0x8, 0x8c, 0x0, 0x0, @uid=r2}]}, @typed={0x4, 0x45}, @generic="6dd88253db8a3c102b1ffa46b02948529ea48958327407d2e0307cf95ec34dcd80f3f5ac700abd2150216e1dab64a817e530b65f613579679e39ec1f0452e3969ae0e96becbbe15da387e0be935e0398c916a8f3108962ebcb4138ca70422166fec30bc274fb108e70f92a4cfd26b5a92407ebca3b97ca63a69b03a97fb9047e551449c8596d96dea828e15d6466eac974", @generic="af2527de806fb7d98050312f100d3b990ec7144ff2fbc286d2d18a6648d2fc11ce2cf5d55ec58e25ea3bb01aa88d6a5db9a5784d7e05d33c0856626a3e5731bc368316d386df6808e248075d61f1eabf0ace0079e267f09c7b6b5ee99ea7389f88ba789654bec95a21c48e147d883049eb6dfbfc3573c5132fa66b77eabe16c7a97fcd90877912033edf9e430ca4e186613c574320a9635151d57333797bb561b15c0566c2ffe6322839bd0f5f07fb50497b37fa06829fe509e29a"]}, 0x310}, 0x1, 0x0, 0x0, 0x4000000}, 0x8091) fallocate(r0, 0x40, 0x4, 0x100) open(&(0x7f0000000080)='./file0\x00', 0x244002, 0x16) ftruncate(0xffffffffffffffff, 0x0) 14:54:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r0, 0x0, &(0x7f00000017c0)="e0ad6a14bd4c2e4d2614374b682ea819a8941dadcd47d3b37886d48a73b8abb4637beedb324f196373b287649225cb48c2e5d8084761ba362d59fe894974b50c1ab062ecd11f7b764d7126f52c66cb98b33e7b1071094fe7bb93ad3c5e22a28ddda5aaca5933bf21442df3cfe6d338738576986406872e37e07a2f1f2e00e005fe473d18d36546078aa87d6604aa02", 0x8f, 0x3, 0x1}, 0x5) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) socket(0x17, 0x806, 0xff) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001740)={&(0x7f0000000280)={0x1464, 0x3c, 0x400, 0x70bd28, 0x25dfdbfe, {0x16}, [@nested={0x4d, 0x50, 0x0, 0x1, [@generic="942d09fae6136ca5ed6e855e3de31986f3f3d93dfd6fa0b91fadc72e4dd50f95d4abbe8e509e009b7ca6832f5e", @typed={0x14, 0x22, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x5a, 0x0, 0x0, @uid=0xee01}]}, @nested={0x15c, 0x6a, 0x0, 0x1, [@generic="b7def5d2d6f89580ce87be970bf898657e23ad4339db0a4beccef74f430c8602b82a4825f3d3884f7762b26863460a30fc257608bc8dc0bc297e911b91fd0e4846334d6d210b8cae3540fd51678c4837aee79982d5ef543e502affb2c923eaed2d8443b10ec886bb712cbb049129e0101133980c977f5858aeef552c52484d6f6707f0b186a97f7f8a40c8026a0be5c6f4ec904d73c50227f799257596f5083d98e3bba7bb0029297701a1569ab6e8000f0fff6ec3f587ff5a8490e87f855f94fda01834de5a940593a60a07af47c6f36dcabbb3a7615ff6da465b20", @typed={0x8, 0x3c, 0x0, 0x0, @pid=r2}, @generic="3fb2c6b593dfe81d8f1fb5637d49d67711e218d0ff00d033c9c07407c302e309760d0b499aa6790e169714b896f43f58fdf2ff6c09d3c5dcd729f6fcc84e9c283e48739692ad00fb2f6d18526f8b1521727b537a7c3ae7274e1bd2cdeaaa82d29ec53c1425025c7e7b72b689d828e45f5ff1b1ed"]}, @nested={0x12a3, 0x6f, 0x0, 0x1, [@generic="aa9f54d0fb5303167866ebf86bba9d20b5a2bb4f4a7e40880ec7dc5f07c21696cf5cd9f7739cd66f9104fd8c81bf548b2eaf6a47fb9ef2da1ff3d8c5aaec135d3bcdf71d0c41831c7f643d493beb93966c19011aea4d0a8555cae4acbaeac630b0a858d5ab6d84ebe20559c87dd12ee1e99886d8a7a55c085e8cbaa0029d0ea2172a33effe02bec2e5fff01350597c174b210e2da4e117e43c1935", @generic="521698db08750b1ee8caa7ec1ad37ef8e1b32787f9d2c4fc1f034471179cd246f4c66ea876598024b368352e2126c9da92343c1926decc57fdcfdc08e49b67b1dfef", @generic="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", @generic="8adf66b0d9e7f389089dd81f289cb2af0ed198697fc115ac296df96492e7d191055b4f3f8644213da1d0aed1a499cfb88731ac336ba16aa8d90db59a115b4598906dd635f1800770ec5ac084cd5357b3e3e093db63036e577d6c9d5b9290c0f5b2bad12e49b0ea52c472fd3d5f7af31ddac05fe3e13705f6989158bc8bc792c29d04da9131d88c262d53f6c2882144d7861bf0630b75d964ba943168618031be773edf5ff2e886f8853a9621b7c107a2c2c65aacc6418bb12e5791ca11283915945cfad605db7b612545de731600d3acaa8ad12b", @typed={0x14, 0x82, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x53, 0x0, 0x0, @fd=r3}, @generic="82b304f21f880c150df03c1c40162d13dc89a8ed4a8ac0fb6fb3edd711e1d9338c4aae6cacefdd285c692afbde7cf1aa47a208ba185992e377b798dab9b940163eba59e8ce80ca89dcb85595bccd57ac84d66c0b15cd02ecd44021a66081c34c682fe024997317e26559ea5fcf414a25e36066540ae385e620c06835fb973846c741d1f246bf049cab456d4c1fbba714ccf251363bb8687634f5a729a2dc20963c8b75f8030b7a89ee096b0bec6d650e26322ef27815fad9a3696c3c325a7f5689a6b5a75838f5e9410c"]}]}, 0x1464}, 0x1, 0x0, 0x0, 0x4002001}, 0x800) unlink(&(0x7f0000001700)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='\x00', &(0x7f0000000180)='./file0/file0\x00', 0xffffffffffffff9c) r5 = openat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x440000, 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="000000000048bb2a352f66796c65302f666530000000"]) 14:54:57 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3, &(0x7f0000000c00), 0x1312) 14:54:57 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:57 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) linkat(r1, &(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x1000) 14:54:57 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 1080.996744] FAULT_INJECTION: forcing a failure. [ 1080.996744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.999377] CPU: 0 PID: 7455 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 1081.000847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1081.002661] Call Trace: [ 1081.003242] dump_stack+0x107/0x167 [ 1081.004020] should_fail.cold+0x5/0xa [ 1081.004858] _copy_from_user+0x2e/0x1b0 [ 1081.005726] core_sys_select+0x286/0xa50 [ 1081.006642] ? do_compat_select+0x1c0/0x1c0 [ 1081.007588] ? perf_trace_lock+0xac/0x490 [ 1081.008493] ? __lockdep_reset_lock+0x180/0x180 [ 1081.009501] ? perf_trace_lock+0xac/0x490 [ 1081.010427] ? find_held_lock+0x2c/0x110 [ 1081.011307] ? ksys_write+0x21a/0x260 [ 1081.012111] ? set_user_sigmask+0x211/0x2a0 [ 1081.013030] ? __set_current_blocked+0x110/0x110 [ 1081.014053] do_pselect.constprop.0+0x17f/0x1d0 [ 1081.015074] ? kern_select+0x1c0/0x1c0 [ 1081.015917] ? wait_for_completion_io+0x270/0x270 [ 1081.016961] ? rcu_read_lock_any_held+0x75/0xa0 [ 1081.017960] ? vfs_write+0x354/0xb10 [ 1081.018791] __x64_sys_pselect6+0x17f/0x240 [ 1081.019721] ? __ia32_sys_select+0x150/0x150 [ 1081.020666] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1081.021796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1081.022926] do_syscall_64+0x33/0x40 [ 1081.023745] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1081.024839] RIP: 0033:0x7f3205832b19 [ 1081.025638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1081.029598] RSP: 002b:00007f3202da8188 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1081.031259] RAX: ffffffffffffffda RBX: 00007f3205945f60 RCX: 00007f3205832b19 [ 1081.032778] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000040 [ 1081.034326] RBP: 00007f3202da81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1081.035850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.037385] R13: 00007fffeb054d4f R14: 00007f3202da8300 R15: 0000000000022000 14:54:57 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x1000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:57 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4, &(0x7f0000000c00), 0x1312) 14:54:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:54:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x72}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000200000000000000a1c47924411004ed8e2a57e5315c3ccd14ba5a", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) fcntl$getown(r0, 0x9) ftruncate(r0, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x50, 0xad3e, 0x5}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0xa1) [ 1098.890414] FAULT_INJECTION: forcing a failure. [ 1098.890414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.892462] CPU: 1 PID: 7487 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 1098.893600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1098.894990] Call Trace: [ 1098.895437] dump_stack+0x107/0x167 [ 1098.896051] should_fail.cold+0x5/0xa [ 1098.896691] core_sys_select+0x807/0xa50 [ 1098.897384] ? do_compat_select+0x1c0/0x1c0 [ 1098.898118] ? __lockdep_reset_lock+0x180/0x180 [ 1098.898900] ? perf_trace_lock+0xac/0x490 [ 1098.899598] ? find_held_lock+0x2c/0x110 [ 1098.900276] ? ksys_write+0x21a/0x260 [ 1098.900908] ? set_user_sigmask+0x211/0x2a0 [ 1098.901627] ? __set_current_blocked+0x110/0x110 [ 1098.902424] do_pselect.constprop.0+0x17f/0x1d0 [ 1098.903204] ? kern_select+0x1c0/0x1c0 [ 1098.903853] ? wait_for_completion_io+0x270/0x270 [ 1098.904657] ? rcu_read_lock_any_held+0x75/0xa0 [ 1098.905431] ? vfs_write+0x354/0xb10 [ 1098.906056] __x64_sys_pselect6+0x17f/0x240 [ 1098.906782] ? __ia32_sys_select+0x150/0x150 [ 1098.907521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1098.908395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1098.909261] do_syscall_64+0x33/0x40 [ 1098.909884] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1098.910745] RIP: 0033:0x7f3205832b19 14:55:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x3}, {0x8}, 0x63, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="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", 0x1f2, 0x0, &(0x7f0000000300)={0x2, 0x76, {0x0, 0xc, 0x69, "c8f6ddb72923db0256d44e520baadb167ea8f7ce36f4fdba41f67d48b37fe0cb26ea31b672ca90687105c89a79282badc04a07048b6ea3eea041a505e27059ab63cbb549b0918486a20d9399f2a421fbbca891c7441c68f62ad3874ae6622827a4d1d9a966af837a93"}, 0x17, "27eaa9b8b383098262e554d99458cba080707e0b620bad"}, 0x99}) 14:55:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:15 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) 14:55:15 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5, &(0x7f0000000c00), 0x1312) 14:55:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0xfffffffe}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000000c0)) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x1, 0x8e, 0xd2, 0x7ff, 0x3, 0x3, 0x0, 0xf9, 0x40, 0x2b0, 0x4, 0xce, 0x38, 0x1, 0x7fff, 0x7ff, 0x3}, [{0x70000000, 0x7fff, 0xfffffffffffffff9, 0x5551, 0x3, 0x9, 0x4d, 0x9}], "43ff952a28750a47278e5a24f0b6be5aa5370199021e667da8bc001174bfe4a1a98dab65f221ed1c569bcf9d40626a73eac6d11b9a0d3b89a790254b3d0a1c2d9a3eccc9e50d7afa6212bdc2d9fda1fea1ce8befa7b7c3a2e6f22aaf2ab7120633e8e38150aa1e88834db699808f55eb", ['\x00']}, 0x1e8) unlink(&(0x7f0000000080)='./file0\x00') 14:55:15 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 14:55:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1098.911658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1098.914827] RSP: 002b:00007f3202da8188 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1098.916080] RAX: ffffffffffffffda RBX: 00007f3205945f60 RCX: 00007f3205832b19 [ 1098.917261] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000040 [ 1098.918441] RBP: 00007f3202da81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.919630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.920810] R13: 00007fffeb054d4f R14: 00007f3202da8300 R15: 0000000000022000 14:55:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:30 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 14:55:30 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6, &(0x7f0000000c00), 0x1312) 14:55:30 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 1113.624300] FAULT_INJECTION: forcing a failure. [ 1113.624300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1113.626788] CPU: 0 PID: 7516 Comm: syz-executor.3 Not tainted 5.10.247 #1 [ 1113.628217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1113.629942] Call Trace: [ 1113.630502] dump_stack+0x107/0x167 [ 1113.631275] should_fail.cold+0x5/0xa [ 1113.632076] _copy_to_user+0x2e/0x180 [ 1113.632878] simple_read_from_buffer+0xcc/0x160 [ 1113.633858] proc_fail_nth_read+0x198/0x230 [ 1113.634776] ? proc_sessionid_read+0x230/0x230 [ 1113.635730] ? security_file_permission+0xb1/0xe0 [ 1113.636751] ? proc_sessionid_read+0x230/0x230 [ 1113.637708] vfs_read+0x228/0x620 [ 1113.638441] ksys_read+0x12d/0x260 [ 1113.639204] ? vfs_write+0xb10/0xb10 [ 1113.639992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1113.641100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1113.642187] do_syscall_64+0x33/0x40 [ 1113.642983] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1113.644073] RIP: 0033:0x7f32057e569c [ 1113.644851] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1113.648736] RSP: 002b:00007f3202da8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1113.650343] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f32057e569c [ 1113.651857] RDX: 000000000000000f RSI: 00007f3202da81e0 RDI: 0000000000000008 [ 1113.653349] RBP: 00007f3202da81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1113.654853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.656365] R13: 00007fffeb054d4f R14: 00007f3202da8300 R15: 0000000000022000 14:55:30 executing program 7: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x23260, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 14:55:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:30 executing program 2: r0 = io_uring_setup(0x396d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) fcntl$setown(r0, 0x8, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x72}) r3 = syz_io_uring_setup(0x3445, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = dup3(r0, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r6, &(0x7f0000000080)={0x0, 0xc, 0x19}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x20) unlink(&(0x7f0000000200)='./file0\x00') 14:55:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:30 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7, &(0x7f0000000c00), 0x1312) 14:55:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 14:55:30 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') 14:55:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="ad80a3a11649db8b299d29b85373fd37572364e50238", 0x16, 0x0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') 14:55:30 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 14:55:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:30 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f0000000c00), 0x1312) 14:55:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3f00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x300000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) recvmsg$unix(r0, &(0x7f0000002700)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000002540)=[{&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000140)=""/113, 0x71}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000240)=""/226, 0xe2}, {&(0x7f0000000340)=""/4096, 0x8f}, {&(0x7f0000001340)=""/177, 0xb1}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/105, 0xfffffd20}, {&(0x7f0000002480)=""/172, 0xac}], 0x9, &(0x7f0000002600)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00001f00aa05000100800002001000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf8}, 0x12000) faccessat2(r2, &(0x7f0000002780)='./file0\x00', 0x0, 0x100) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000002740)=0x8) 14:55:44 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x3}, 0x0, 0x0, 0x0, 0x0) 14:55:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x700000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f00000000c0)) 14:55:44 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9, &(0x7f0000000c00), 0x1312) 14:55:44 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) 14:55:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x800000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x94f6a2, 0xf4) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x2100, 0x2) 14:55:44 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa, &(0x7f0000000c00), 0x1312) 14:55:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x80000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:44 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x8}, 0x0, 0x0, 0x0, 0x0) 14:55:44 executing program 7: r0 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4000, @fd_index=0x2, 0x5, 0x8, 0x20, 0x17, 0x0, {0x2}}, 0x10001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r4, 0x0) 14:55:44 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) 14:55:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10b7e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'raw\x00', 0x9b, "0265769aebfcafa71f3c179b232806fd3338775015fcb003776df9eb7fd8e4e597fa0f629336e2640786a3be1a51a795132becddd0836fd7d7f4bba68b3fa457d70a737187dbdfc98aae02c4b9b293f0c2556a4c2df6c7e4c2277a9a70c914b0dc44251c3b69f8bede45602a470f59864f15fc8cec136978a8e9415a60a044fa4099cf13e37b66c51947b4de6a3184b6ce81a9b74a64032af1d7e1"}, &(0x7f0000000140)=0xbf) unlink(&(0x7f0000000200)='./file0\x00') 14:55:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x900000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:59 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x10}, 0x0, 0x0, 0x0, 0x0) 14:55:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x16c) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 14:55:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10b2e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') 14:55:59 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb, &(0x7f0000000c00), 0x1312) 14:55:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:59 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) 14:55:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:55:59 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) 14:56:15 executing program 5: socket(0x24, 0x80000, 0x3) 14:56:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/45, 0x2d}], 0x2, 0xa, 0xcb) ftruncate(r0, 0x0) 14:56:15 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc, &(0x7f0000000c00), 0x1312) 14:56:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xa00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:15 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x10f6e2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r1, 0x34f3f000) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r2 = syz_open_dev$vcsn(&(0x7f0000000800), 0x2a68, 0x800) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) r3 = signalfd4(r1, &(0x7f0000000140)={[0x1df8]}, 0x8, 0x80000) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) syz_open_procfs(r4, &(0x7f00000001c0)='task\x00') ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000180)) bind$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 14:56:15 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x300}, 0x0, 0x0, 0x0, 0x0) 14:56:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xb00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c80100002b0008002cbd7000fddbdf25070000001c00848008000600", @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32, @ANYBLOB="a4005a801b7e1bb556b6710879f5de466d0b2326c4f9965805ce3b839bcb54df84d9ed4128dba2cc66102827b64ca9f808008800ac14140e806570f30cbd2ce59dd258d74951cbc5d3000a36f634c91ef902c05464a5a4bf6f03707f47415eb998c3294465e85bb763b654447dee36a72dbf5c37428f3b505f25fde49061f2da3c763ed845b2b252cbbb7b9161b144f7a3aed1583616cc91bf548a6e08001a00c19825ef5c3cc1fe1acc233be3fe406d1a1d5e367f6c6a909799163e3e7a3b1969c37243425793eaaeed2ff0d3e008020419c8c82d3af332059b50a2b23f3db0206273c82da6fec5a1122c", @ANYRES32=r1, @ANYBLOB], 0x1c8}, 0x1, 0x0, 0x0, 0x884}, 0x4040080) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') 14:56:15 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd, &(0x7f0000000c00), 0x1312) 14:56:15 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x3000000}, 0x0, 0x0, 0x0, 0x0) 14:56:15 executing program 5: socket(0x0, 0x80000, 0x3) 14:56:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:16 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe, &(0x7f0000000c00), 0x1312) 14:56:16 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x8000000}, 0x0, 0x0, 0x0, 0x0) 14:56:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:16 executing program 5: socket(0x0, 0x80000, 0x3) 14:56:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = getgid() stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r3, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r4, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x14496, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@afid={'afid', 0x3d, 0xd}}], [{@fowner_lt={'fowner<', r2}}, {@uid_gt={'uid>', r3}}, {@obj_type={'obj_type', 0x3d, '\':'}}, {@subj_type={'subj_type', 0x3d, '@[-,$'}}, {@obj_user={'obj_user', 0x3d, '$})!{'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@uid_eq={'uid', 0x3d, r4}}]}}) unlink(&(0x7f0000000200)='./file0\x00') 14:56:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:29 executing program 5: socket(0x0, 0x80000, 0x3) 14:56:29 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 14:56:29 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf, &(0x7f0000000c00), 0x1312) 14:56:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x3) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x2000, 0xc1) unlink(&(0x7f0000000200)='./file0\x00') r2 = socket$netlink(0x10, 0x3, 0x10) fcntl$dupfd(r0, 0x0, r2) 14:56:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) r2 = syz_io_uring_complete(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)={0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r3, 0x3, r4, 0x0, 0x80000}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x400800, 0x0) r6 = fcntl$getown(r1, 0x9) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udplite6\x00') perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xd2, 0x0, 0x4, 0x7f, 0x0, 0xfffffffffffffffa, 0x2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x31, 0x2}, 0x2002, 0x5, 0x1, 0x4, 0x2, 0x2, 0x5, 0x0, 0x20, 0x0, 0xffffffffffffffff}, r6, 0xd, r7, 0xa) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r3, 0x1, r5, 0x1991}) ftruncate(r0, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x1, 0x7f, 0xc8, 0x7f, 0x0, 0xffffffff, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000380), 0x5}, 0x10, 0xffffffffffffffe1, 0x80000000, 0x5, 0x4467, 0x5, 0xffff, 0x0, 0x4, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r0, 0x11) 14:56:29 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0) 14:56:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:29 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10, &(0x7f0000000c00), 0x1312) 14:56:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:29 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x84) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000080)={0x72, 0x0, 0x0, 0x40000}) name_to_handle_at(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="140000ea0100000008000000ff030500010000000900000006000000"], &(0x7f0000000140), 0x400) openat(r1, &(0x7f0000000000)='./file0\x00', 0x404000, 0x144) unlink(&(0x7f0000000200)='./file0\x00') r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) faccessat(r1, &(0x7f0000000240)='./file0\x00', 0x8) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000180)) 14:56:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) r1 = io_uring_setup(0x70b7, &(0x7f0000000180)={0x0, 0x71e, 0x0, 0x2, 0x3dd}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001580), 0x0) copy_file_range(r1, &(0x7f0000000080)=0x7, r0, &(0x7f00000000c0)=0xd57, 0x4, 0x0) 14:56:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:30 executing program 5: socket(0x24, 0x0, 0x3) 14:56:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:30 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11, &(0x7f0000000c00), 0x1312) 14:56:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xa000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:45 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x300000000000000}, 0x0, 0x0, 0x0, 0x0) 14:56:45 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12, &(0x7f0000000c00), 0x1312) 14:56:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3f00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x100, 0x70bd2d, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) 14:56:45 executing program 5: socket(0x24, 0x0, 0x0) 14:56:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x2d4, 0x22, 0x434, 0x70bd2d, 0x25dfdbfc, {0x1e}, [@generic="6720c90f56fe7b655464fbfdf5a27aaf1d7fce9a8819a9a75823f5423794c9a0f492aa", @generic="f56f46e711243ffc42d7e1963c7f917dcdc80fb55eea522ccf83236cb72044bf23e11ae7dd503e3759", @typed={0x8, 0x84, 0x0, 0x0, @fd}, @generic="6c6a2e9fdbefce8212c11f92ac09a20e0c0dcd63a21817d1e6e6cecb3502376bc11821712cf9e7f03c55450d1a4c394f1b05f2f04b69d59500d3f75e466616f680130850f2973a3a7bba5b17200176d1978ec1082c643c604af93b9d28b3ecc86e962cb5d346c290bc0790da5251f9952ee62d64211af25210ab406eac30f55d14c1b0346a1cec763261f90c522f91c873aca9ae2dbf84bce816012f13abab26ce94bbd1ab0c61df7880fc91914602596c0ac7cb954c6ea8babb29cd28cd085cc7521c40fd218e55990a3f3c7ba216be5fc99c62d43f7592e7269a994fe6136c9650", @typed={0x17, 0x46, 0x0, 0x0, @binary="b94acc91ce82b78841fbdf699b30904a6fcfaa"}, @nested={0xd2, 0x3, 0x0, 0x1, [@typed={0x4, 0x34}, @typed={0x8, 0x33, 0x0, 0x0, @uid}, @typed={0xc, 0x90, 0x0, 0x0, @u64=0x4}, @generic="59afc27da588ec1b95cfd1ce5e301afd3ef6818eaab056abeb6856026d87087880fbf42ee32d695ec465844b785d1b513fd5952037d69cff2869bc6705c491efdb52f704f61b41d06db01de5f1b9424ff4b2b996d5483c33a7a4377a1ad30b9857cf698dd5598aa66737fa60e345d7da7b57bf0b4b7a0ed1e8e4dba77d196bc5986120a9870cb39c3041ba857ffaef4f7170a3c7975d9494fbb25e92430aa0b07e84", @typed={0x8, 0x96, 0x0, 0x0, @u32=0xc29}, @typed={0xc, 0x49, 0x0, 0x0, @u64=0x1}]}, @generic="e659e72b67dd111ce5bd23aa2b0c17ef4ffe9c4b152ea5098a7e879d26e805fc1fbb28", @generic="e1892a037d95b442159f155eb4e218f615465f6c2e97b36108754387606945def0953c64f8cf8f8ddf5493b998268d1a678cf260fbbc824d5bd3b0e8072d1ef0d662d99422ed1136bee2a678e1810725120c3677c68185a4bfdaac6b5bd9131d6dbbf9b119da1b2ffe98ec1cb7c5b57c7e756b3b6776af9d17c8"]}, 0x2d4}, 0x1, 0x0, 0x0, 0x50055}, 0x8000) unlink(&(0x7f0000000200)='./file0\x00') r2 = syz_io_uring_complete(0x0) unlink(&(0x7f0000000180)='./file0\x00') bind$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000080)="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") r3 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x100000000, 0x2000) setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='system.advise\x00', &(0x7f0000000300)='\x00', 0x1, 0x2) fcntl$notify(r3, 0x402, 0x10) 14:56:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xb000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/acpi_cpufreq', 0x101401, 0x22) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x21) 14:56:45 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13, &(0x7f0000000c00), 0x1312) 14:56:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:59 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, &(0x7f0000000c00), 0x1312) 14:56:59 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0) 14:56:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:56:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x660502, 0x80) openat(r0, &(0x7f0000000040)='./file0\x00', 0x1, 0x40) ftruncate(r0, 0x0) 14:57:00 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xa4, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa4}}, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x10, r0, 0x72173000) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000080)={0x8, 'wlan1\x00', {'virt_wifi0\x00'}, 0x7ff}) unlink(&(0x7f0000000200)='./file0\x00') 14:57:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:00 executing program 5: ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000006c0)={@id={0x2, 0x0, @c}}) socket(0x24, 0x80000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='^-\'\x00', &(0x7f0000000440)='\x00'], 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) linkat(r1, &(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x1000) 14:57:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) fallocate(r0, 0x8, 0x5, 0x7) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x3ff) 14:57:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42400, 0x79) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f00000000c0)=0x8, 0x4) unlink(&(0x7f0000000200)='./file0\x00') openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x101000, 0x2) 14:57:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:00 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500, &(0x7f0000000c00), 0x1312) 14:57:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:00 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) 14:57:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3f00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xe4}}, './file0\x00'}) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) sendmsg$nl_generic(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x310, 0x1f, 0x200, 0x70bd2c, 0x25dfdbfb, {0x10}, [@generic="c6d960a367777bd87de356bdf23bae934594ca0764c48ffa6180848e291a940f7605baf07898b918556fb854a65cceb204fcd0c891b295e0a40d0bbb3999f3e88a3baa6e306719f90d8da1df7d2f3182282e81fe595bc3b1c6252b9b3e94ce6138edbe66ae2cc1e9806dadbef2b7b8aadbe1e2c8cb78f091c98771af262d8ad7c5c6a5c0dbe83c187d131d3624cc9a399bf6c8d49a7eee1f00fc69228700c1b8be6a46015a24fb0b774de2", @typed={0xe9, 0x5, 0x0, 0x0, @binary="bc2891770b26a39e2127ba3a5bb5ce0be13c47af3185d3133da24f1894363de739c829cc8891dad96ba99cd3690b7673fd3c4e82bfc728a3605871a5fb2736d93e0c67e91ded0e99e8ecdbb80431af8d354dbc3728af0646b43de684bee0b55088dd54c9b2155e37259dd93dfec78ac71a149a38d1728031372b0e827d97a64289e3e41f7c95a3b8a243e12d621054671516ef22b11f3b7b5d8c4600b0ed7df82c4be51a4503462fe0173d886f1a0cb02903a7770a396f100197fd0dc5cf1fa2fd6e9ba73a70746f5d1134cf62cb23a1e2591e04d42667f1ff40ac7f604252f4373877f97a"}, @nested={0x14, 0x4e, 0x0, 0x1, [@typed={0x8, 0x51, 0x0, 0x0, @uid}, @typed={0x8, 0x8c, 0x0, 0x0, @uid=r2}]}, @typed={0x4, 0x45}, @generic="6dd88253db8a3c102b1ffa46b02948529ea48958327407d2e0307cf95ec34dcd80f3f5ac700abd2150216e1dab64a817e530b65f613579679e39ec1f0452e3969ae0e96becbbe15da387e0be935e0398c916a8f3108962ebcb4138ca70422166fec30bc274fb108e70f92a4cfd26b5a92407ebca3b97ca63a69b03a97fb9047e551449c8596d96dea828e15d6466eac974", @generic="af2527de806fb7d98050312f100d3b990ec7144ff2fbc286d2d18a6648d2fc11ce2cf5d55ec58e25ea3bb01aa88d6a5db9a5784d7e05d33c0856626a3e5731bc368316d386df6808e248075d61f1eabf0ace0079e267f09c7b6b5ee99ea7389f88ba789654bec95a21c48e147d883049eb6dfbfc3573c5132fa66b77eabe16c7a97fcd90877912033edf9e430ca4e186613c574320a9635151d57333797bb561b15c0566c2ffe6322839bd0f5f07fb50497b37fa06829fe509e29a"]}, 0x310}, 0x1, 0x0, 0x0, 0x4000000}, 0x8091) fallocate(r0, 0x40, 0x4, 0x100) open(&(0x7f0000000080)='./file0\x00', 0x244002, 0x16) ftruncate(0xffffffffffffffff, 0x0) 14:57:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xffffffff, 0x0, &(0x7f0000000080)="503dc23b1f5f32f7a16498cfa0a3d00a9cbace230720d39b108c00706b2094d2a81187d8757606388cb0570c1c8cf241ddfe1790261d908d88f9522c007a8f2910721ce267c57546259feed8156c85637f5fe6e1b7a6123c7965486c175f2709c51ee593ec7b45fc3a20d85cffdf9ad2495f262e215d2fa9437a8279f13651a51bce8e89cec9865ef15adfbe17ddaadf41155cde508c30418e3f4820d466346efc8785f0ae", 0x3, 0x0, 0x1, {0x1}}, 0xfff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) openat(r1, &(0x7f0000000180)='./file0\x00', 0x400800, 0x10) 14:57:00 executing program 7: prctl$PR_SET_DUMPABLE(0x4, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) prctl$PR_SET_DUMPABLE(0x4, 0x2) ftruncate(r0, 0x0) 14:57:00 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) 14:57:14 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600, &(0x7f0000000c00), 0x1312) 14:57:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) r1 = timerfd_create(0x8, 0x800) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) 14:57:14 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) 14:57:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10f6e2, 0x50) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') 14:57:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xe4}}, './file0\x00'}) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) sendmsg$nl_generic(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x310, 0x1f, 0x200, 0x70bd2c, 0x25dfdbfb, {0x10}, [@generic="c6d960a367777bd87de356bdf23bae934594ca0764c48ffa6180848e291a940f7605baf07898b918556fb854a65cceb204fcd0c891b295e0a40d0bbb3999f3e88a3baa6e306719f90d8da1df7d2f3182282e81fe595bc3b1c6252b9b3e94ce6138edbe66ae2cc1e9806dadbef2b7b8aadbe1e2c8cb78f091c98771af262d8ad7c5c6a5c0dbe83c187d131d3624cc9a399bf6c8d49a7eee1f00fc69228700c1b8be6a46015a24fb0b774de2", @typed={0xe9, 0x5, 0x0, 0x0, @binary="bc2891770b26a39e2127ba3a5bb5ce0be13c47af3185d3133da24f1894363de739c829cc8891dad96ba99cd3690b7673fd3c4e82bfc728a3605871a5fb2736d93e0c67e91ded0e99e8ecdbb80431af8d354dbc3728af0646b43de684bee0b55088dd54c9b2155e37259dd93dfec78ac71a149a38d1728031372b0e827d97a64289e3e41f7c95a3b8a243e12d621054671516ef22b11f3b7b5d8c4600b0ed7df82c4be51a4503462fe0173d886f1a0cb02903a7770a396f100197fd0dc5cf1fa2fd6e9ba73a70746f5d1134cf62cb23a1e2591e04d42667f1ff40ac7f604252f4373877f97a"}, @nested={0x14, 0x4e, 0x0, 0x1, [@typed={0x8, 0x51, 0x0, 0x0, @uid}, @typed={0x8, 0x8c, 0x0, 0x0, @uid=r2}]}, @typed={0x4, 0x45}, @generic="6dd88253db8a3c102b1ffa46b02948529ea48958327407d2e0307cf95ec34dcd80f3f5ac700abd2150216e1dab64a817e530b65f613579679e39ec1f0452e3969ae0e96becbbe15da387e0be935e0398c916a8f3108962ebcb4138ca70422166fec30bc274fb108e70f92a4cfd26b5a92407ebca3b97ca63a69b03a97fb9047e551449c8596d96dea828e15d6466eac974", @generic="af2527de806fb7d98050312f100d3b990ec7144ff2fbc286d2d18a6648d2fc11ce2cf5d55ec58e25ea3bb01aa88d6a5db9a5784d7e05d33c0856626a3e5731bc368316d386df6808e248075d61f1eabf0ace0079e267f09c7b6b5ee99ea7389f88ba789654bec95a21c48e147d883049eb6dfbfc3573c5132fa66b77eabe16c7a97fcd90877912033edf9e430ca4e186613c574320a9635151d57333797bb561b15c0566c2ffe6322839bd0f5f07fb50497b37fa06829fe509e29a"]}, 0x310}, 0x1, 0x0, 0x0, 0x4000000}, 0x8091) fallocate(r0, 0x40, 0x4, 0x100) open(&(0x7f0000000080)='./file0\x00', 0x244002, 0x16) ftruncate(0xffffffffffffffff, 0x0) 14:57:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xfeffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:14 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) 14:57:29 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700, &(0x7f0000000c00), 0x1312) 14:57:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffff000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:29 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) 14:57:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3f000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x290a}) ftruncate(r0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 14:57:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xe4}}, './file0\x00'}) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) sendmsg$nl_generic(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x310, 0x1f, 0x200, 0x70bd2c, 0x25dfdbfb, {0x10}, [@generic="c6d960a367777bd87de356bdf23bae934594ca0764c48ffa6180848e291a940f7605baf07898b918556fb854a65cceb204fcd0c891b295e0a40d0bbb3999f3e88a3baa6e306719f90d8da1df7d2f3182282e81fe595bc3b1c6252b9b3e94ce6138edbe66ae2cc1e9806dadbef2b7b8aadbe1e2c8cb78f091c98771af262d8ad7c5c6a5c0dbe83c187d131d3624cc9a399bf6c8d49a7eee1f00fc69228700c1b8be6a46015a24fb0b774de2", @typed={0xe9, 0x5, 0x0, 0x0, @binary="bc2891770b26a39e2127ba3a5bb5ce0be13c47af3185d3133da24f1894363de739c829cc8891dad96ba99cd3690b7673fd3c4e82bfc728a3605871a5fb2736d93e0c67e91ded0e99e8ecdbb80431af8d354dbc3728af0646b43de684bee0b55088dd54c9b2155e37259dd93dfec78ac71a149a38d1728031372b0e827d97a64289e3e41f7c95a3b8a243e12d621054671516ef22b11f3b7b5d8c4600b0ed7df82c4be51a4503462fe0173d886f1a0cb02903a7770a396f100197fd0dc5cf1fa2fd6e9ba73a70746f5d1134cf62cb23a1e2591e04d42667f1ff40ac7f604252f4373877f97a"}, @nested={0x14, 0x4e, 0x0, 0x1, [@typed={0x8, 0x51, 0x0, 0x0, @uid}, @typed={0x8, 0x8c, 0x0, 0x0, @uid=r2}]}, @typed={0x4, 0x45}, @generic="6dd88253db8a3c102b1ffa46b02948529ea48958327407d2e0307cf95ec34dcd80f3f5ac700abd2150216e1dab64a817e530b65f613579679e39ec1f0452e3969ae0e96becbbe15da387e0be935e0398c916a8f3108962ebcb4138ca70422166fec30bc274fb108e70f92a4cfd26b5a92407ebca3b97ca63a69b03a97fb9047e551449c8596d96dea828e15d6466eac974", @generic="af2527de806fb7d98050312f100d3b990ec7144ff2fbc286d2d18a6648d2fc11ce2cf5d55ec58e25ea3bb01aa88d6a5db9a5784d7e05d33c0856626a3e5731bc368316d386df6808e248075d61f1eabf0ace0079e267f09c7b6b5ee99ea7389f88ba789654bec95a21c48e147d883049eb6dfbfc3573c5132fa66b77eabe16c7a97fcd90877912033edf9e430ca4e186613c574320a9635151d57333797bb561b15c0566c2ffe6322839bd0f5f07fb50497b37fa06829fe509e29a"]}, 0x310}, 0x1, 0x0, 0x0, 0x4000000}, 0x8091) fallocate(r0, 0x40, 0x4, 0x100) open(&(0x7f0000000080)='./file0\x00', 0x244002, 0x16) ftruncate(0xffffffffffffffff, 0x0) 14:57:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x80000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') 14:57:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xe4}}, './file0\x00'}) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) sendmsg$nl_generic(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x310, 0x1f, 0x200, 0x70bd2c, 0x25dfdbfb, {0x10}, [@generic="c6d960a367777bd87de356bdf23bae934594ca0764c48ffa6180848e291a940f7605baf07898b918556fb854a65cceb204fcd0c891b295e0a40d0bbb3999f3e88a3baa6e306719f90d8da1df7d2f3182282e81fe595bc3b1c6252b9b3e94ce6138edbe66ae2cc1e9806dadbef2b7b8aadbe1e2c8cb78f091c98771af262d8ad7c5c6a5c0dbe83c187d131d3624cc9a399bf6c8d49a7eee1f00fc69228700c1b8be6a46015a24fb0b774de2", @typed={0xe9, 0x5, 0x0, 0x0, @binary="bc2891770b26a39e2127ba3a5bb5ce0be13c47af3185d3133da24f1894363de739c829cc8891dad96ba99cd3690b7673fd3c4e82bfc728a3605871a5fb2736d93e0c67e91ded0e99e8ecdbb80431af8d354dbc3728af0646b43de684bee0b55088dd54c9b2155e37259dd93dfec78ac71a149a38d1728031372b0e827d97a64289e3e41f7c95a3b8a243e12d621054671516ef22b11f3b7b5d8c4600b0ed7df82c4be51a4503462fe0173d886f1a0cb02903a7770a396f100197fd0dc5cf1fa2fd6e9ba73a70746f5d1134cf62cb23a1e2591e04d42667f1ff40ac7f604252f4373877f97a"}, @nested={0x14, 0x4e, 0x0, 0x1, [@typed={0x8, 0x51, 0x0, 0x0, @uid}, @typed={0x8, 0x8c, 0x0, 0x0, @uid=r2}]}, @typed={0x4, 0x45}, @generic="6dd88253db8a3c102b1ffa46b02948529ea48958327407d2e0307cf95ec34dcd80f3f5ac700abd2150216e1dab64a817e530b65f613579679e39ec1f0452e3969ae0e96becbbe15da387e0be935e0398c916a8f3108962ebcb4138ca70422166fec30bc274fb108e70f92a4cfd26b5a92407ebca3b97ca63a69b03a97fb9047e551449c8596d96dea828e15d6466eac974", @generic="af2527de806fb7d98050312f100d3b990ec7144ff2fbc286d2d18a6648d2fc11ce2cf5d55ec58e25ea3bb01aa88d6a5db9a5784d7e05d33c0856626a3e5731bc368316d386df6808e248075d61f1eabf0ace0079e267f09c7b6b5ee99ea7389f88ba789654bec95a21c48e147d883049eb6dfbfc3573c5132fa66b77eabe16c7a97fcd90877912033edf9e430ca4e186613c574320a9635151d57333797bb561b15c0566c2ffe6322839bd0f5f07fb50497b37fa06829fe509e29a"]}, 0x310}, 0x1, 0x0, 0x0, 0x4000000}, 0x8091) fallocate(r0, 0x40, 0x4, 0x100) open(&(0x7f0000000080)='./file0\x00', 0x244002, 0x16) 14:57:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x8000000, 0x0, 0x8001, 0x9}) unlink(&(0x7f0000000200)='./file0\x00') 14:57:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffffff7f00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x2, 0x2, 0x0, 0x2, 0x3, 0x3e, 0x3, 0x22b, 0x40, 0x1e1, 0x0, 0xffff, 0x38, 0x2, 0x4, 0xce, 0x7fff}, [{0x7, 0x3, 0x800, 0x50, 0xfffffffffffffff9, 0x1000, 0xff, 0x2}], "ece930ca662a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x67e) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ftruncate(r0, 0x0) 14:57:29 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x3000000}, 0x0, 0x0, 0x0, 0x0) 14:57:29 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x900, &(0x7f0000000c00), 0x1312) 14:57:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:29 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x84) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) lseek(r2, 0xf5, 0x4) 14:57:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:42 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) 14:57:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000080)={@dev, @local}, &(0x7f00000000c0)=0x8) lseek(r1, 0x4, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000240)="dd001fddf97970d79f0317d2fba1afb321a492f9a4defde99e34b1b89833b38e7d8c5ffb87b4b9bc66846db97b8a68f9f7f7c4dbe2a3ae97bef25d053938077af7a05ca36fd0750314e8f3056f36a8a80433820a4139b0d407d0ee3eae638601d75cb14e22b36591a0126ce7788de7d92ddc65b4cc57209570cc6a5c27b2c8fbbe200f43c465bfc1eb4675565e5fbe7e1954b448864b0df3a6047682ffe0ce0e0a8c42e7b6de2e544e5bc249aafd2fb9e0c32aa3cc7ced25309ca2de844c22109584d0ed") ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) fcntl$addseals(r3, 0x409, 0x0) 14:57:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xe4}}, './file0\x00'}) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) sendmsg$nl_generic(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x310, 0x1f, 0x200, 0x70bd2c, 0x25dfdbfb, {0x10}, [@generic="c6d960a367777bd87de356bdf23bae934594ca0764c48ffa6180848e291a940f7605baf07898b918556fb854a65cceb204fcd0c891b295e0a40d0bbb3999f3e88a3baa6e306719f90d8da1df7d2f3182282e81fe595bc3b1c6252b9b3e94ce6138edbe66ae2cc1e9806dadbef2b7b8aadbe1e2c8cb78f091c98771af262d8ad7c5c6a5c0dbe83c187d131d3624cc9a399bf6c8d49a7eee1f00fc69228700c1b8be6a46015a24fb0b774de2", @typed={0xe9, 0x5, 0x0, 0x0, @binary="bc2891770b26a39e2127ba3a5bb5ce0be13c47af3185d3133da24f1894363de739c829cc8891dad96ba99cd3690b7673fd3c4e82bfc728a3605871a5fb2736d93e0c67e91ded0e99e8ecdbb80431af8d354dbc3728af0646b43de684bee0b55088dd54c9b2155e37259dd93dfec78ac71a149a38d1728031372b0e827d97a64289e3e41f7c95a3b8a243e12d621054671516ef22b11f3b7b5d8c4600b0ed7df82c4be51a4503462fe0173d886f1a0cb02903a7770a396f100197fd0dc5cf1fa2fd6e9ba73a70746f5d1134cf62cb23a1e2591e04d42667f1ff40ac7f604252f4373877f97a"}, @nested={0x14, 0x4e, 0x0, 0x1, [@typed={0x8, 0x51, 0x0, 0x0, @uid}, @typed={0x8, 0x8c, 0x0, 0x0, @uid=r2}]}, @typed={0x4, 0x45}, @generic="6dd88253db8a3c102b1ffa46b02948529ea48958327407d2e0307cf95ec34dcd80f3f5ac700abd2150216e1dab64a817e530b65f613579679e39ec1f0452e3969ae0e96becbbe15da387e0be935e0398c916a8f3108962ebcb4138ca70422166fec30bc274fb108e70f92a4cfd26b5a92407ebca3b97ca63a69b03a97fb9047e551449c8596d96dea828e15d6466eac974", @generic="af2527de806fb7d98050312f100d3b990ec7144ff2fbc286d2d18a6648d2fc11ce2cf5d55ec58e25ea3bb01aa88d6a5db9a5784d7e05d33c0856626a3e5731bc368316d386df6808e248075d61f1eabf0ace0079e267f09c7b6b5ee99ea7389f88ba789654bec95a21c48e147d883049eb6dfbfc3573c5132fa66b77eabe16c7a97fcd90877912033edf9e430ca4e186613c574320a9635151d57333797bb561b15c0566c2ffe6322839bd0f5f07fb50497b37fa06829fe509e29a"]}, 0x310}, 0x1, 0x0, 0x0, 0x4000000}, 0x8091) fallocate(r0, 0x40, 0x4, 0x100) 14:57:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:42 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa00, &(0x7f0000000c00), 0x1312) 14:57:42 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xaa5abe42f8ccbe88, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "11227a752a039fc0bf89be707384d92d28a2d542a46555c8fb178e33b62c3cef", "dbe188fffe59f79ebd0bf345895fdf901295c27e6957e541b74a69b7beae9b1f", "bf6429669f1a0ee9da5865138c97ea1baf686830020a0d02f6e2ec68ef5a74ff", "ee3f3fd80ff6b8833720da3b2570030f98477fae8c36f4d2ee96ad77125769cf", "171f3ea0ce28208385396d7d45f1f69caff575d654e6bce911ce936cd7b5bb5f", "4d19ee88c05089bd25ce9f23", 0x9, 0x6, 0x300000, 0x3, 0x6}}) r3 = io_uring_setup(0x1b96d, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x192}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f00000000c0)=0x6) 14:57:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xe4}}, './file0\x00'}) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r1, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) fallocate(r0, 0x40, 0x4, 0x100) 14:57:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xfeffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:42 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 14:57:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:42 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb00, &(0x7f0000000c00), 0x1312) 14:57:42 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) lseek(r0, 0x7, 0x1) ftruncate(r0, 0x0) 14:57:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xe4}}, './file0\x00'}) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)) fallocate(r0, 0x40, 0x4, 0x100) 14:57:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffff0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000080)={0x72, 0x0, 0x2}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0x1, 0xba, 0xfa, 0x0, 0x7fff, 0x80, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x65b3, 0x4}, 0x1000a, 0x7, 0x100, 0x2, 0x0, 0x10000, 0x1000, 0x0, 0xcf9, 0x0, 0x5}, 0x0, 0x9, r0, 0x0) syncfs(r0) unlink(&(0x7f0000000200)='./file0\x00') 14:57:59 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0) 14:57:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x2) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240), 0x2, 0x2) mount(&(0x7f0000000280)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='anon_inodefs\x00', 0x802008, &(0x7f0000000340)='y\x00') r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020272520232c20283a525c2a4d5b20402e2d28202d20000aa6cd16996be1225e38fbd6d673061dc0764280001109546e1173d3bf1f269c922f9e1eac584a668c80eed49cb9765b832918a9e7451dc0bb73f8eee6a634f8fecd223b55f48b03b8c3a8c4ce6c7cda8086fc704c2ddd0410e15976601f75a710c8229264c08dd68474a0b9c6d6860cf6c9f2eb48f33df3ba2d305e029ce40000147b1e9749174e1a6593c2e70ecf"], 0xb1) 14:57:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffffff7f, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x7, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:59 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc00, &(0x7f0000000c00), 0x1312) 14:57:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f4e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 14:57:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xe4}}, './file0\x00'}) fallocate(r0, 0x40, 0x4, 0x100) 14:57:59 executing program 7: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x1, 0x2, 0x3}}, 0x14) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0xfffffff9, 0x0, 0x5}) ftruncate(r0, 0x0) 14:57:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x4, 0x100) 14:57:59 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd00, &(0x7f0000000c00), 0x1312) 14:57:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:57:59 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x300000000000000}, 0x0, 0x0, 0x0, 0x0) 14:57:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = open$dir(&(0x7f0000000080)='.\x00', 0x4c4082, 0x44) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x260a41, 0x54) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) unlink(&(0x7f0000000200)='./file0\x00') 14:57:59 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe00, &(0x7f0000000c00), 0x1312) 14:57:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x9, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xa000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xa, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:12 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf00, &(0x7f0000000c00), 0x1312) 14:58:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:12 executing program 7: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x401) ftruncate(r1, 0x0) 14:58:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) fallocate(r0, 0x40, 0x4, 0x100) 14:58:12 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0) 14:58:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000080)='clear_refs\x00') 14:58:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xb000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xfffffffe, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f00000000c0)='./file0\x00') 14:58:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xb, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:26 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1100, &(0x7f0000000c00), 0x1312) 14:58:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0xae) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) openat(r1, &(0x7f0000000180)='./file0\x00', 0x100, 0x44) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000000c0)={0x172, 0x0, 0xfffffffb}) ioctl$TIOCSCTTY(r0, 0x540e, 0x5) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r3, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) fsetxattr$security_capability(r2, &(0x7f0000000000), &(0x7f0000000100)=@v3={0x3000000, [{0xf1, 0xfffffffc}, {0x3ff, 0x101}], r3}, 0x18, 0x0) ftruncate(r0, 0x0) 14:58:26 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) 14:58:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) fallocate(r0, 0x40, 0x4, 0x100) 14:58:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x1000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:26 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1200, &(0x7f0000000c00), 0x1312) 14:58:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x10, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:26 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) 14:58:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) fallocate(r0, 0x40, 0x4, 0x100) 14:58:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:26 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1300, &(0x7f0000000c00), 0x1312) 14:58:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x121002, 0x48) ftruncate(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x31}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3ff}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x51}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3, 0x7f}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5bce}]}, 0x40}, 0x1, 0x0, 0x0, 0x5a3761c07d124f00}, 0xc011) 14:58:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x300, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:26 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000, &(0x7f0000000c00), 0x1312) 14:58:26 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) 14:58:40 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) 14:58:40 executing program 5: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(0xffffffffffffffff, 0x40, 0x4, 0x100) 14:58:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x700, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:40 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x80, 0x800) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x12000, 0x40) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$unix(r3, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0xad) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r4, 0x1000004) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x80, r5, 0x4, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x805) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x18f3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x939}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8844) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0x6, &(0x7f0000000340)=[{0x4, 0x83, 0x0, 0x8}, {0x5, 0x6, 0x5, 0xffffff5f}, {0x0, 0xd1, 0xfa, 0x7fff}, {0x8000, 0x6, 0x81, 0x7}, {0x1, 0x1, 0x7f, 0xfd10}, {0x3, 0x1a, 0x3, 0x9}]}, 0x10) 14:58:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3f000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:40 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r1, 0x0) 14:58:40 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1000000, &(0x7f0000000c00), 0x1312) 14:58:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:40 executing program 5: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(0xffffffffffffffff, 0x40, 0x4, 0x100) 14:58:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x300000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x900, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:40 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) 14:58:52 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x3000000}, 0x0, 0x0, 0x0, 0x0) 14:58:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xa00, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:52 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2000000, &(0x7f0000000c00), 0x1312) 14:58:52 executing program 5: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(0xffffffffffffffff, 0x40, 0x4, 0x100) 14:58:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x4e55, {0x0, 0x0, 0xac35, 0x6, 0xffffffffffffff1c}}) 14:58:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x700000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:52 executing program 7: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54010000", @ANYRES16=r0, @ANYBLOB="040226bd7000fddbdf251700000008000300", @ANYRES32=r1, @ANYBLOB="a4002580050002000000000005000200ff000000640001800500020002000000100003800c0004000202aaaaaaaaaaaa0500020001000000080004000600000038000380080002000100000008000200000000000600010001000000080002000100000006000100ffff00000c000400000000000000000005000200080000002400030003d91d4a19f0040e82b0850b96eabea1241f5b828e6a6a4004ebfb5b8cc1bf9918002580140001800500020001000000080001000100000008000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060000000000000000000c000600030000000300000008000300", @ANYRES32=0x0, @ANYBLOB="44002580140004001e921f05e73b3a2d4a82cc9b8ad687e7240003007af89a423cf0acd7e72453a5145de696be84d8a0cc305185785b168e44c81bf4050002006000000008000300", @ANYRES32=0x0, @ANYBLOB="cf928cb17889b3876a82a50d1f8bad0c6610d4f507fee99fff4093f215b5cc2ad30ccc18bc5ba0127091d6a3df01d4572aff058e253fc8591d15e011c2a01c5fbe1457906a309a19177276db653853143a0e307e8cc52213d45111db7f011624d39785f0c1bb608bdc78aa2208cee56211098e111a2622200890eaea7729ea6a0a41e5a7e09d53eb6ffb8f1d9f39df10df96f6e84dac36444863a1b682f445c45163ca51bbbbd675deeb45b04c6b913b367293a233e51bc87187c8517ee0ae3b184a8179fd4346f93bdaddb0fa"], 0x154}, 0x1, 0x0, 0x0, 0x4048000}, 0x815) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) open_tree(r3, &(0x7f0000000080)='./file0\x00', 0x1000) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r3, 0x0) 14:58:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x800000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:52 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) 14:58:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xb00, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:52 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x4, 0x100) 14:58:52 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x80) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) unlink(&(0x7f0000000200)='./file0\x00') 14:58:52 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3000000, &(0x7f0000000c00), 0x1312) 14:58:53 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x4, 0x100) 14:58:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x900000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:53 executing program 2: r0 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x9, 0x6, 0xe7, 0x3, 0x0, 0x0, 0x20120, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0xad, 0x10000}, 0x88, 0x5, 0x7, 0xc, 0x0, 0x4, 0x7fff, 0x0, 0x93, 0x0, 0x80000001}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) unlink(&(0x7f0000000200)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000180)={0x0, 0x3, 0xfffffffffffffff9, 0x9, 0xffffffffffffffff}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x10, r0, 0xd3b6a000) bind$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) lseek(r2, 0x4, 0x0) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000010000f0586f686ea7b32f78028226ac00180000c1", @ANYRES32=r3, @ANYBLOB="0900000000000080bcfc00726c653000"]) bind$unix(r1, &(0x7f0000000240)=@file={0x1, './file0/file0\x00'}, 0x6e) r4 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x10, r1, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x6, 0x0, 0x0, 0x3, 0x1, 0x1}, 0x6) r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x5, 0x20040) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) sendfile(r5, r6, &(0x7f0000000100), 0x12d) 14:58:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xfeffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:58:53 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000000, &(0x7f0000000c00), 0x1312) 14:59:05 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5000000, &(0x7f0000000c00), 0x1312) 14:59:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1020, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000000c0)='!{\'&:\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\'-/]@\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00'], &(0x7f0000000380)=[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='!)-%$*]\x00', &(0x7f0000000300)='&)@b!\x00', &(0x7f0000000340)='\x00'], 0x800) unlink(&(0x7f0000000200)='./file0\x00') 14:59:05 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x4, 0x100) 14:59:05 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 14:59:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffff0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xa00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:05 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f00000000c0)=0x7a) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x72}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000140)={{r3}, "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"}) r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r6, 0x5, 0x8}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000880)={r6, "ce6e765f732580663ee20319cf5555dd"}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001140)={0x11, 0x3, {0x4, @struct={0x35, 0xffffffff}, 0x0, 0x3, 0x1d, 0x80, 0x0, 0x5, 0x91, @struct={0x73, 0xfff}, 0x6, 0x401, [0x7, 0x9, 0x101, 0x8, 0x101, 0x10001]}, {0x101, @struct={0x0, 0x20}, 0x0, 0xfffffffffffffffe, 0xffffffffffff8aa0, 0x7fff, 0x9, 0x100, 0x8, @struct={0xfffffffd, 0x2}, 0x4, 0x7, [0xf2fc, 0x10001, 0x8, 0x7, 0x100000000, 0x7]}, {0x8, @struct={0x51, 0x5}, 0x0, 0x100000000, 0x8, 0x9, 0x1, 0x1f, 0x60, @struct={0x1f3f, 0xd1b}, 0x8000, 0x100, [0x1ff, 0x7f, 0x1, 0x6, 0xfffffffffffff895, 0x1]}, {0x5, 0x401, 0x7fffffff}}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001540)={0x2, 0x5, {0x9, @usage=0xe60, r6, 0x8000, 0x0, 0xfcc, 0x6, 0xf0, 0x4, @usage=0x7, 0xffff, 0x40, [0xfe, 0x1, 0xffffffffffffff00, 0x8, 0x6, 0x1]}, {0x4, @struct={0x9, 0x7}, r7, 0x7, 0x6, 0x3, 0x9, 0x80000000, 0x8b8, @struct={0xffffffff}, 0x8, 0x8, [0x6b, 0xffffffff, 0x800, 0x5, 0x1, 0x3f]}, {0xfffffffffffffc01, @struct={0x8}, 0x0, 0x9, 0x7, 0x10, 0x14a, 0x3, 0x4b, @usage=0x2, 0xfffffff8, 0x9, [0x2, 0x8000, 0x5, 0x7, 0xa8, 0x5]}, {0x0, 0x1, 0xfffffffffffff40e}}) ftruncate(r2, 0x0) 14:59:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x4, 0x100) 14:59:05 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6000000, &(0x7f0000000c00), 0x1312) 14:59:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) r2 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000c00), 0x1312) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x2, 0x0, 0x0, 0x1, 0x4, 0x0, {0x0, 0x0, r6}}, 0x3f) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="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", 0x1000) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffffffffffb3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x80) unlink(&(0x7f0000000200)='./file0\x00') 14:59:05 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0) 14:59:18 executing program 7: setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 14:59:18 executing program 2: sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x10a) r1 = syz_io_uring_setup(0x4fab, &(0x7f00000000c0)={0x0, 0xddb5, 0x20, 0x0, 0x307, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x825, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x2, @bearer=@l2={'ib', 0x3a, 'netpci0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x10000) lseek(r2, 0x4, 0x0) openat(r2, &(0x7f0000000240)='./file0\x00', 0x80000, 0x2) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000001c0)) unlink(&(0x7f0000000200)='./file0\x00') 14:59:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2010, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:18 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0, 0x0, 0x0) 14:59:18 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x7000000, &(0x7f0000000c00), 0x1312) 14:59:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xb00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x4, 0x100) 14:59:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffffff7f, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x4, 0x100) 14:59:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3f00, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) read(r0, &(0x7f00000007c0)=""/151, 0x97) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0x8, 0x540}}, './file0\x00'}) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000700)=""/139) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) sendmsg$nl_generic(r0, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80800080}, 0xc, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x4fc}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) ftruncate(r0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) io_uring_enter(r2, 0x2c32, 0xd497, 0x1, &(0x7f00000000c0)={[0x6]}, 0x8) 14:59:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = io_uring_setup(0xb96c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x15a}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x10000, 0x9, 0x1000, 0x2, 0x80}) unlink(&(0x7f0000000200)='./file0\x00') 14:59:18 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8000000, &(0x7f0000000c00), 0x1312) 14:59:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:18 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0) 14:59:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x4, 0x100) 14:59:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40e4e2, 0xa1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 14:59:19 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x3f6, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0xe6e3, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) openat(r1, &(0x7f0000000080)='./file1\x00', 0x14c80, 0x10d) unlink(&(0x7f0000000200)='./file0\x00') r2 = creat(&(0x7f0000000000)='\x00', 0x50) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x102010, r2, 0x3bc61000) 14:59:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xedc0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:39 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x14f622, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x101100, 0x5) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) llistxattr(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000240)=""/4096, 0x1000) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x82800, 0x40) unlink(&(0x7f0000000200)='./file0\x00') 14:59:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:39 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x9000000, &(0x7f0000000c00), 0x1312) 14:59:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x4, 0x100) 14:59:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:39 executing program 7: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x80, @loopback, 0xfff}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000100)={0x2, 'veth0\x00', {0x2}, 0x8}) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) r3 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r4 = io_uring_setup(0x396d, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x5, 0xfc, 0x1f, 0x3, 0x3, 0x3e, 0x8, 0x279, 0x40, 0x287, 0x8, 0xf801, 0x38, 0x2, 0x1, 0xff, 0xffb8}, [{0x6, 0x40, 0x9, 0x100000000, 0x100000001, 0x8, 0x6, 0x8}], "7413eb65b90aad3e7469a458876c96367cb1e3925319c2c57c936ed679d11d3a5bc8905f0e238bb7"}, 0xa0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100009e18000000", @ANYRES32=r4, @ANYBLOB="f73c0000000000002e2f66696c653000"]) ftruncate(r1, 0x0) 14:59:39 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) 14:59:39 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) 14:59:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3f00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xfffffffe, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x80000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\'\'.)^:@'}, {0x20, '\x00'}, {0x20, '*'}, {0x20, '\x00'}], 0xa, "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"}, 0x116) r2 = syz_open_dev$hiddev(&(0x7f0000000240), 0xfffffffffffffffb, 0x200102) r3 = epoll_create(0x404d7d81) poll(&(0x7f0000000280)=[{r0, 0x8622}, {r2, 0x9082}, {r3, 0x408}], 0x3, 0x800) 14:59:51 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) 14:59:51 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa000000, &(0x7f0000000c00), 0x1312) 14:59:51 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) 14:59:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x4, 0x100) 14:59:51 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb000000, &(0x7f0000000c00), 0x1312) 14:59:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xe4}}, './file0\x00'}) fallocate(r0, 0x40, 0x4, 0x100) 14:59:51 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) 14:59:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) fallocate(r0, 0x40, 0x4, 0x100) 14:59:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:52 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc000000, &(0x7f0000000c00), 0x1312) 14:59:52 executing program 2: socket(0x24, 0x0, 0x0) (fail_nth: 1) 14:59:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:59:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) fallocate(r0, 0x40, 0x4, 0x100) [ 1375.545257] FAULT_INJECTION: forcing a failure. [ 1375.545257] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.546619] CPU: 0 PID: 8478 Comm: syz-executor.2 Not tainted 5.10.247 #1 [ 1375.547380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1375.548328] Call Trace: [ 1375.548641] dump_stack+0x107/0x167 [ 1375.549073] should_fail.cold+0x5/0xa [ 1375.549520] ? sock_alloc_inode+0x18/0x1c0 [ 1375.550015] should_failslab+0x5/0x20 [ 1375.550451] kmem_cache_alloc+0x5b/0x310 [ 1375.550923] ? selinux_ipv6_output+0x180/0x180 [ 1375.551446] ? sock_free_inode+0x20/0x20 [ 1375.551912] sock_alloc_inode+0x18/0x1c0 [ 1375.552372] ? sock_free_inode+0x20/0x20 [ 1375.552839] alloc_inode+0x63/0x240 [ 1375.553251] new_inode_pseudo+0x14/0xe0 [ 1375.553709] sock_alloc+0x3c/0x270 [ 1375.554117] __sock_create+0xbd/0x7f0 [ 1375.554551] ? wait_for_completion_io+0x270/0x270 [ 1375.555108] __sys_socket+0xef/0x200 [ 1375.555533] ? fput_many+0x2f/0x1a0 [ 1375.555950] ? move_addr_to_kernel+0x70/0x70 [ 1375.556454] ? ksys_write+0x1a9/0x260 [ 1375.556886] ? __ia32_sys_read+0xb0/0xb0 [ 1375.557352] __x64_sys_socket+0x6f/0xb0 [ 1375.557809] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1375.558396] do_syscall_64+0x33/0x40 [ 1375.558822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1375.559443] RIP: 0033:0x7fcc92ffab19 [ 1375.559871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1375.561989] RSP: 002b:00007fcc90570188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1375.562848] RAX: ffffffffffffffda RBX: 00007fcc9310df60 RCX: 00007fcc92ffab19 [ 1375.563662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 1375.564473] RBP: 00007fcc905701d0 R08: 0000000000000000 R09: 0000000000000000 [ 1375.565287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1375.566099] R13: 00007fff81f633bf R14: 00007fcc90570300 R15: 0000000000022000 [ 1375.567062] socket: no more sockets 15:00:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x90000, 0x80) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf2501000008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x593480, 0x100) 15:00:05 executing program 2: socket(0x24, 0x0, 0x0) (fail_nth: 2) 15:00:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xfeffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x1000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:05 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) 15:00:05 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd000000, &(0x7f0000000c00), 0x1312) 15:00:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) fallocate(r0, 0x40, 0x4, 0x100) 15:00:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x40, 0x4, 0x100) [ 1389.362931] FAULT_INJECTION: forcing a failure. [ 1389.362931] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.365904] CPU: 0 PID: 8506 Comm: syz-executor.2 Not tainted 5.10.247 #1 [ 1389.367695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1389.369809] Call Trace: [ 1389.370502] dump_stack+0x107/0x167 [ 1389.371443] should_fail.cold+0x5/0xa [ 1389.372425] ? create_object.isra.0+0x3a/0xa30 [ 1389.373603] should_failslab+0x5/0x20 [ 1389.374553] kmem_cache_alloc+0x5b/0x310 [ 1389.375493] create_object.isra.0+0x3a/0xa30 [ 1389.376487] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1389.377655] kmem_cache_alloc+0x159/0x310 15:00:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1389.378596] ? selinux_ipv6_output+0x180/0x180 [ 1389.379714] ? sock_free_inode+0x20/0x20 [ 1389.380633] sock_alloc_inode+0x18/0x1c0 [ 1389.381550] ? sock_free_inode+0x20/0x20 [ 1389.382480] alloc_inode+0x63/0x240 [ 1389.383299] new_inode_pseudo+0x14/0xe0 [ 1389.384211] sock_alloc+0x3c/0x270 [ 1389.385016] __sock_create+0xbd/0x7f0 [ 1389.385890] ? wait_for_completion_io+0x270/0x270 [ 1389.386997] __sys_socket+0xef/0x200 [ 1389.387840] ? fput_many+0x2f/0x1a0 [ 1389.388674] ? move_addr_to_kernel+0x70/0x70 [ 1389.389669] ? ksys_write+0x1a9/0x260 [ 1389.390560] ? __ia32_sys_read+0xb0/0xb0 [ 1389.391500] __x64_sys_socket+0x6f/0xb0 [ 1389.392409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1389.393590] do_syscall_64+0x33/0x40 [ 1389.394443] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1389.395591] RIP: 0033:0x7fcc92ffab19 [ 1389.396444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1389.400614] RSP: 002b:00007fcc90570188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1389.402356] RAX: ffffffffffffffda RBX: 00007fcc9310df60 RCX: 00007fcc92ffab19 15:00:05 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0, 0x0, 0x0) [ 1389.403965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 1389.405621] RBP: 00007fcc905701d0 R08: 0000000000000000 R09: 0000000000000000 [ 1389.407218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.408805] R13: 00007fff81f633bf R14: 00007fcc90570300 R15: 0000000000022000 15:00:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x7000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:20 executing program 2: socket(0x24, 0x0, 0x0) (fail_nth: 3) 15:00:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x40, 0x4, 0x100) 15:00:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1404.207430] FAULT_INJECTION: forcing a failure. [ 1404.207430] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.208831] CPU: 0 PID: 8533 Comm: syz-executor.2 Not tainted 5.10.247 #1 [ 1404.209604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1404.210559] Call Trace: [ 1404.210864] dump_stack+0x107/0x167 [ 1404.211278] should_fail.cold+0x5/0xa [ 1404.211705] ? security_inode_alloc+0x34/0x160 [ 1404.212223] should_failslab+0x5/0x20 [ 1404.212659] kmem_cache_alloc+0x5b/0x310 [ 1404.213118] security_inode_alloc+0x34/0x160 [ 1404.213616] inode_init_always+0xa4e/0xd10 [ 1404.214113] alloc_inode+0x84/0x240 15:00:20 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x11, r0, 0x8000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0/file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r8, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x2, 0x0, r7, &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x100, 0x6000, 0x1, {0x0, r2}}, 0x1400000) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x6, &(0x7f0000000080)={0x0, 0x989680}, 0x1, 0x0, 0x0, {0x0, r2}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) [ 1404.214521] new_inode_pseudo+0x14/0xe0 [ 1404.215103] sock_alloc+0x3c/0x270 [ 1404.215511] __sock_create+0xbd/0x7f0 [ 1404.215945] ? wait_for_completion_io+0x270/0x270 [ 1404.216501] __sys_socket+0xef/0x200 [ 1404.216932] ? fput_many+0x2f/0x1a0 [ 1404.217346] ? move_addr_to_kernel+0x70/0x70 [ 1404.217845] ? ksys_write+0x1a9/0x260 [ 1404.218289] ? __ia32_sys_read+0xb0/0xb0 [ 1404.218762] __x64_sys_socket+0x6f/0xb0 [ 1404.219221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1404.219820] do_syscall_64+0x33/0x40 [ 1404.220251] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1404.220844] RIP: 0033:0x7fcc92ffab19 [ 1404.221276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1404.223407] RSP: 002b:00007fcc90570188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1404.224284] RAX: ffffffffffffffda RBX: 00007fcc9310df60 RCX: 00007fcc92ffab19 [ 1404.225097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 1404.225928] RBP: 00007fcc905701d0 R08: 0000000000000000 R09: 0000000000000000 [ 1404.226752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1404.227570] R13: 00007fff81f633bf R14: 00007fcc90570300 R15: 0000000000022000 [ 1404.228505] socket: no more sockets 15:00:20 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) 15:00:20 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe000000, &(0x7f0000000c00), 0x1312) 15:00:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffff000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x9000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:20 executing program 2: socket(0x24, 0x0, 0x0) (fail_nth: 4) [ 1404.303161] FAULT_INJECTION: forcing a failure. [ 1404.303161] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.305053] CPU: 1 PID: 8557 Comm: syz-executor.2 Not tainted 5.10.247 #1 [ 1404.306164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1404.307510] Call Trace: [ 1404.307942] dump_stack+0x107/0x167 [ 1404.308537] should_fail.cold+0x5/0xa [ 1404.309170] ? create_object.isra.0+0x3a/0xa30 [ 1404.309896] should_failslab+0x5/0x20 [ 1404.310526] kmem_cache_alloc+0x5b/0x310 [ 1404.311190] create_object.isra.0+0x3a/0xa30 [ 1404.311899] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1404.312720] kmem_cache_alloc+0x159/0x310 [ 1404.313391] security_inode_alloc+0x34/0x160 [ 1404.314131] inode_init_always+0xa4e/0xd10 [ 1404.314823] alloc_inode+0x84/0x240 [ 1404.315418] new_inode_pseudo+0x14/0xe0 [ 1404.316065] sock_alloc+0x3c/0x270 [ 1404.316642] __sock_create+0xbd/0x7f0 [ 1404.317267] ? wait_for_completion_io+0x270/0x270 [ 1404.318057] __sys_socket+0xef/0x200 [ 1404.318652] ? fput_many+0x2f/0x1a0 [ 1404.319244] ? move_addr_to_kernel+0x70/0x70 [ 1404.319947] ? ksys_write+0x1a9/0x260 [ 1404.320568] ? __ia32_sys_read+0xb0/0xb0 [ 1404.321227] __x64_sys_socket+0x6f/0xb0 [ 1404.321877] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1404.322751] do_syscall_64+0x33/0x40 [ 1404.323342] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1404.324142] RIP: 0033:0x7fcc92ffab19 [ 1404.324741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1404.327674] RSP: 002b:00007fcc90570188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1404.328875] RAX: ffffffffffffffda RBX: 00007fcc9310df60 RCX: 00007fcc92ffab19 [ 1404.329991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 1404.331126] RBP: 00007fcc905701d0 R08: 0000000000000000 R09: 0000000000000000 [ 1404.332259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1404.333395] R13: 00007fff81f633bf R14: 00007fcc90570300 R15: 0000000000022000 15:00:20 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf000000, &(0x7f0000000c00), 0x1312) 15:00:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x300000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xa000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:20 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 15:00:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffffff7f00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x40, 0x4, 0x100) 15:00:20 executing program 7: r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x80000000, 0xff, 0x7f, 0x5587420f, 0x800}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) fallocate(r2, 0x2f, 0x8001, 0xbc3) ftruncate(r1, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100060201000000180012003f59a514eac11f077db53cf3383bca0fdf91810aaa90d4327c383e322f659ad55d9ef02eb94f597280507ce2213bc53f561ea4d205652ed6a4b5059f9745b37ff37a67b9bfc71e9fd74ff559206a7946ae98891361353ad3274bcee04c2a79c14062a812012a19bee1ba38551c0b42099cfda75ee8d933695861e8d4730a10755c37372ec6597125c650147bfd4fcd72dc9f36405d54835c1591eafdb841c1f5778dc43f290826b959240f8865b926bb93fd5787e1ef851b8aabfd414cedf5d1c849bcbc82710c9c15f69d9b31114788c9669368eb7e3beac49a3caea6687bd94669b2e6", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r5, 0x4, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40400c4) [ 1418.912197] FAULT_INJECTION: forcing a failure. [ 1418.912197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1418.913785] CPU: 0 PID: 8586 Comm: syz-executor.2 Not tainted 5.10.247 #1 [ 1418.914707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1418.915787] Call Trace: [ 1418.916143] dump_stack+0x107/0x167 15:00:35 executing program 2: socket(0x24, 0x0, 0x0) (fail_nth: 5) 15:00:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x700000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0xefff, 0x6) [ 1418.916632] should_fail.cold+0x5/0xa [ 1418.917290] _copy_to_user+0x2e/0x180 [ 1418.917806] simple_read_from_buffer+0xcc/0x160 [ 1418.918440] proc_fail_nth_read+0x198/0x230 [ 1418.919016] ? proc_sessionid_read+0x230/0x230 [ 1418.919629] ? security_file_permission+0xb1/0xe0 [ 1418.920276] ? proc_sessionid_read+0x230/0x230 [ 1418.920886] vfs_read+0x228/0x620 [ 1418.921351] ksys_read+0x12d/0x260 [ 1418.921825] ? vfs_write+0xb10/0xb10 [ 1418.922339] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1418.923037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1418.923724] do_syscall_64+0x33/0x40 [ 1418.924220] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1418.924897] RIP: 0033:0x7fcc92fad69c [ 1418.925378] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1418.927832] RSP: 002b:00007fcc90570170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1418.928849] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fcc92fad69c [ 1418.929782] RDX: 000000000000000f RSI: 00007fcc905701e0 RDI: 0000000000000003 [ 1418.930732] RBP: 00007fcc905701d0 R08: 0000000000000000 R09: 0000000000000000 [ 1418.931648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1418.932592] R13: 00007fff81f633bf R14: 00007fcc90570300 R15: 0000000000022000 15:00:35 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0) 15:00:35 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x10000000, &(0x7f0000000c00), 0x1312) 15:00:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xb000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(0xffffffffffffffff, 0x40, 0x4, 0x100) 15:00:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(0xffffffffffffffff, 0x40, 0x4, 0x100) 15:00:35 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0, 0x0, 0x0) 15:00:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x10000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x800000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:35 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x11000000, &(0x7f0000000c00), 0x1312) 15:00:35 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000000000)=""/74, 0x4a, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x0, 0x2}) ftruncate(r1, 0x0) 15:00:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:35 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0) 15:00:35 executing program 2: socket(0x24, 0x0, 0x0) 15:00:35 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x12000000, &(0x7f0000000c00), 0x1312) 15:00:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(0xffffffffffffffff, 0x40, 0x4, 0x100) 15:00:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x900000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:35 executing program 2: socket(0x2, 0x0, 0x0) 15:00:35 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) 15:00:49 executing program 2: socket(0x5, 0x0, 0x0) 15:00:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x20000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:49 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x13000000, &(0x7f0000000c00), 0x1312) 15:00:49 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) 15:00:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x0, 0x4, 0x100) 15:00:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000080)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f00000000c0)={@id={0x2, 0x0, @d}}) 15:00:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x7, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:00:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xa00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:02 executing program 2: socket(0xa, 0x0, 0x0) 15:01:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x0, 0x4, 0x100) 15:01:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x14d2e0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netlink\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x1f, 0x3}) 15:01:02 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) 15:01:02 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x40000000, &(0x7f0000000c00), 0x1312) 15:01:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x20100000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xb00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:02 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x100000000000000, &(0x7f0000000c00), 0x1312) 15:01:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x0, 0x4, 0x100) 15:01:02 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) 15:01:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x9, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8) r2 = io_uring_setup(0x396b, &(0x7f0000000240)={0x0, 0x3c13, 0x0, 0x0, 0xfffffffe, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000001c0)={0xccf, 0x100000000}) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000180)=0x7) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000200)) ftruncate(r0, 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='security.selinux\x00', &(0x7f0000000100)='\x00', 0x1, 0x1) 15:01:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3f000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:02 executing program 2: socket(0xf, 0x0, 0x0) 15:01:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) 15:01:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8cffffff, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:02 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) 15:01:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:02 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x200000000000000, &(0x7f0000000c00), 0x1312) 15:01:15 executing program 2: socket(0x10, 0x0, 0x0) 15:01:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:15 executing program 7: syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x9, 0x3, &(0x7f0000000280)=[{&(0x7f0000000100)="19d5b63e5cd3022541605b5eced5ccac019ec7567828238cdfa7e72a50d066d7a08a9120fcd3891c030d01bf0ee45a6d3366cb2de81425f6784bad18f4721cc1fff217347498eaf562934154335ce01e0d30b074624fdea4bb7a74a256235b3d6ce741daa1fa2b67ab307f8316497162f46afdf684f999c8bffdb448bb2eff782546d6d463f81d38c6c4a0027cf6e31a354197aa60ff09478d92b28a773a641e", 0xa0, 0x40}, {&(0x7f00000001c0)="a241bc753d24afa8320906ae609fd9c692964018c65a8e64c9fe6531b7711c68d4e5121416c8cae63eea24f436bb8faca60afda41185c88c2f20058c3e698bd112e0f09e", 0x44}, {&(0x7f0000000240)="f6d8fcc14bde", 0x6, 0x80}], 0x10404, &(0x7f0000000300)={[{'\x00'}, {'\x00'}, {'\x00'}, {'\x00'}, {'-/-[^%'}, {'\x00'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x406240, 0xa3) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r1, 0x0) 15:01:15 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0, 0x0, 0x0) 15:01:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xa, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x0) 15:01:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xc0ed0000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:15 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300000000000000, &(0x7f0000000c00), 0x1312) 15:01:15 executing program 2: socket(0x11, 0x0, 0x0) 15:01:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x0) 15:01:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x3f00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:15 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) 15:01:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xf6ffffff, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xb, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:29 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x400000000000000, &(0x7f0000000c00), 0x1312) 15:01:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x10, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:29 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 15:01:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x0) 15:01:29 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffe01, 0x8000}}, './file0\x00'}) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0xc6e2, 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x103040, 0xe) 15:01:29 executing program 2: socket(0x2c, 0x0, 0x0) 15:01:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xfeffffff, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:29 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) 15:01:29 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x500000000000000, &(0x7f0000000c00), 0x1312) 15:01:29 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xe0c, 0x0, 0x5, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0x81}, 0x8, 0x1, 0x1, 0x1, 0x11, 'syz1\x00', "169af4f8536c78602d4e6bc680c8dcb0dbb497323a5677b258efce3786510a4a", "4c8f6a5ef14ce5a63190c4be5b479d3bafdf8173230eace80200880164902814", [{0x101, 0x4, {0x2, 0x800}}, {0x5, 0x0, {0x2, 0x2}}, {0x3, 0x3, {0x3, 0xa3a9}}, {0x2ba, 0x7, {0x2, 0xd9}}, {0x3, 0x1, {0x2, 0x8}}, {0x7, 0x3, {0x0, 0x80000001}}, {0x1, 0x7f, {0x3}}, {0x1, 0x6, {0x2, 0xf9}}, {0xbc4, 0x0, {0x0, 0x5}}, {0x5, 0xdd16, {0x3, 0xfffffffd}}, {0x3, 0x81, {0x2, 0x6153}}, {0x1ff, 0x1f, {0x2, 0x1}}, {0x80, 0x5, {0x2, 0x800}}, {0x100, 0x0, {0x2, 0x2}}, {0x9, 0x2b, {0x0, 0x9}}, {0x7, 0x6, {0x2, 0x45a8ce6c}}, {0x2, 0x1000, {0x1, 0x7}}, {0x1ff, 0x9, {0x3, 0x9}}, {0x40, 0x9, {0x0, 0x22}}, {0x2, 0xc27c, {0x3, 0x4}}, {0x7344, 0x0, {0x1, 0x9}}, {0x7, 0x3, {0x3, 0x1}}, {0x400, 0x3f, {0x3, 0x5}}, {0x8, 0x20, {0x0, 0x80}}, {0x6, 0x7, {0x1, 0x9}}, {0x7, 0x401, {0x1, 0x4}}, {0x75e, 0x5, {0x2, 0x7c}}, {0x80, 0x4, {0x1, 0x1}}, {0x0, 0x6, {0x3, 0xa7}}, {0xfff, 0x4, {0x2}}, {0xff, 0xff, {0x0, 0x4}}, {0x7, 0x6, {0x3, 0xfffffffb}}, {0x1000, 0x7fff, {0x0, 0x7}}, {0xeb1f, 0x1c, {0x3, 0x17}}, {0x5, 0x1f, {0x2, 0x9}}, {0x6, 0x400, {0x2}}, {0xdc, 0x400, {0x2, 0x8000000}}, {0x7, 0x7, {0x0, 0x5}}, {0x100, 0x4, {0x0, 0x1}}, {0x5, 0x9, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x1, 0x8, 0x0, 0x6, 0x17, 'syz0\x00', "3b2fcc8355c1d7f71873bb70143d42c8a852e7e106eb63102bff421d44f9ca6d", "cde0d470e4bd89919c82b880293b609c1449f3f7b63ce497b541561b6e3e5b9a", [{0x4, 0x100, {0x2, 0x4}}, {0x9, 0x401, {0x0, 0x8}}, {0x2e78, 0x4800, {0x0, 0x6d1}}, {0x0, 0x9, {0x2, 0x8cf9}}, {0x7, 0x0, {0x0, 0x9e}}, {0x1, 0xffff, {0x1, 0x8}}, {0x3ff, 0x7fff, {0x2, 0x2}}, {0x7, 0x1, {0x3}}, {0x6, 0x800, {0x2, 0x1}}, {0x6, 0x1, {0x2, 0x3ff}}, {0x0, 0x7, {0x2, 0xa969}}, {0xfff, 0x0, {0x2, 0x1}}, {0x1, 0x4, {0x1, 0x8}}, {0x81, 0x1, {0x2, 0x101}}, {0x9601, 0x2, {0x1, 0x9}}, {0x7, 0x65, {0x2, 0x10001}}, {0x81, 0xfff7, {0x3, 0x2}}, {0x200, 0x8, {0x0, 0x1}}, {0x800, 0x3ff, {0x0, 0xff}}, {0x401, 0x982, {0x3, 0x2988}}, {0x7, 0x3ff, {0x3, 0x3}}, {0x800, 0x4, {0x1, 0x1}}, {0x0, 0x5, {0x0, 0xb9a}}, {0x80, 0x3, {0x1, 0x7}}, {0x1ff, 0x4, {0x0, 0x7fffffff}}, {0x9, 0x0, {0x1, 0x80000001}}, {0x3, 0x2}, {0xf8, 0xfff, {0x1, 0xfffffff9}}, {0x2, 0x8, {0x0, 0x101}}, {0x48, 0x3ff, {0x1, 0x3}}, {0xa25, 0x3, {0x0, 0x8}}, {0x3, 0x40, {0x0, 0x7}}, {0x40, 0x1, {0x3, 0x56}}, {0x80, 0x7, {0x1, 0x789}}, {0x3, 0x0, {0x2, 0x8}}, {0xf000, 0x9, {0x0, 0x1ff}}, {0xb7a, 0xff, {0x1, 0x2}}, {0x1ff, 0x1, {0x3, 0x8000}}, {0x0, 0x7, {0x1, 0x2}}, {0xcb, 0x5, {0x2, 0x134}}]}}}, {{0x254, 0x1, {{0x1, 0x18bb}, 0x9, 0x1, 0xfff, 0x0, 0x28, 'syz1\x00', "26505616cf6b855e732eccb9cdb178ad9e3ab35c07014f3af9734dbf7c404424", "8f3b717feca25fa817e99831d7990b226811014b086b934bf61613c22bdd9926", [{0x401, 0x20, {0x0, 0x3ff}}, {0xfff7, 0x4, {0x1, 0x8}}, {0x6e9, 0x5, {0x2, 0x3}}, {0x8, 0xffff, {0x3, 0x7}}, {0x7fff, 0x9, {0x1, 0xae1f}}, {0x4, 0x4, {0x0, 0x40}}, {0x2, 0xbae9, {0x1, 0x401}}, {0xdfab, 0x5, {0x1, 0x9}}, {0x101, 0x5, {0x2, 0x28}}, {0x2, 0x1, {0x2, 0xffffffff}}, {0x7, 0x7b4a, {0x3, 0x7}}, {0x20, 0xfffb, {0x2, 0x100}}, {0x0, 0x8, {0x2, 0x7}}, {0x7, 0x3, {0x2, 0x101}}, {0x1, 0x8, {0x3, 0x7}}, {0xffff, 0xffff, {0x3, 0x6}}, {0x1, 0xfc00, {0x3, 0x9}}, {0x2, 0x0, {0x1}}, {0xfff, 0x7, {0x1}}, {0x9, 0x3, {0x1, 0x7}}, {0x1, 0x1, {0x0, 0x3}}, {0x0, 0xb1fc, {0x3, 0x401}}, {0x4, 0x8, {0x2, 0x8}}, {0x6, 0x0, {0x2}}, {0x7, 0x1, {0x2, 0x38000000}}, {0x1, 0x2, {0x3, 0x7}}, {0x8, 0x0, {0x0, 0x750}}, {0x663a, 0xff, {0x0, 0x1}}, {0x7, 0x8, {0x2, 0x3ff}}, {0x24d1, 0xd3, {0x0, 0x9}}, {0x1, 0x3ff, {0x1, 0x800}}, {0x500, 0x7, {0x3, 0x7}}, {0x15b, 0x274, {0x3, 0x5}}, {0x2, 0xa0, {0x0, 0x401}}, {0x2, 0x10, {0x2, 0x8}}, {0xf001, 0xff80, {0x3, 0x2}}, {0x20, 0x7, {0x0, 0x23}}, {0xffff, 0x0, {0x1, 0x1}}, {0x6d, 0x1ff, {0x1, 0x800}}, {0x100, 0x0, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x20, 0x57, 0x8001, 0x72a, 0x6, 'syz0\x00', "1bf36082f35c26c4a10c1f7c9b132088ba9e3f839f94c9a44f14281078093bb6", "7f4da14a12131a898833adbfe5dd4c4809e6878b765c508f06005d73450185e9", [{0xe514, 0x200, {0x0, 0x6}}, {0x0, 0xa90, {0x1, 0x54}}, {0x4f, 0xc06, {0x3, 0x5}}, {0x7f, 0x4000, {0x3, 0xb7}}, {0x2, 0x3ff, {0x1, 0xc000}}, {0x401, 0x7fff, {0x2, 0x5}}, {0xff9e, 0x8, {0x2, 0x5}}, {0x14b4, 0x1ff, {0x1, 0x4}}, {0x7, 0x2, {0x0, 0x80000001}}, {0xc0, 0x3b, {0x2, 0x2}}, {0x1, 0xffff, {0x2, 0x3}}, {0x20, 0xfda5, {0x2, 0x5}}, {0x7fff, 0x3, {0x3}}, {0x4, 0x1c29, {0x2, 0x1}}, {0x2, 0x3, {0x2, 0x1}}, {0x4, 0x200, {0x1, 0x8}}, {0x7, 0x8000, {0x3, 0x8}}, {0x4, 0x0, {0x3, 0x2}}, {0x8, 0x7, {0x3, 0x6}}, {0xf5, 0x6, {0x1, 0x1}}, {0x7ff, 0x2, {0x3, 0x3}}, {0x800, 0x3b, {0x3}}, {0xb71, 0x7ff, {0x0, 0x7}}, {0x0, 0xffff, {0x1, 0x3f}}, {0xf7, 0x8, {0x0, 0x40000}}, {0x8, 0x7f, {0x0, 0x9}}, {0x6, 0x0, {0x3, 0x3}}, {0x3, 0x6, {0x2, 0x1}}, {0x2, 0x7, {0x1, 0x1}}, {0x8, 0x6, {0x1, 0x8}}, {0xfff8, 0xf637, {0x0, 0xfffffff8}}, {0x5, 0x1ff, {0x1, 0x4}}, {0x2, 0xfe34, {0x0, 0x1d88fa36}}, {0xa4a, 0x6, {0x3, 0x905}}, {0x60, 0x7fff, {0x2, 0x1}}, {0x7f, 0xfffa, {0x2}}, {0x6, 0x8000, {0x2, 0x6}}, {0x0, 0x8, {0x2, 0x8000}}, {0x1f, 0xa21c, {0x3, 0x2}}, {0x0, 0x1, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x9, 0x7, 0x6, 0x4, 0x26, 'syz0\x00', "9a6749c780d467dcbeb3256ab2477932cfb438d2a02dcc6d32533aa8cfb8622e", "408b020fd53cd27105648ebe80e05e4843dda18dad047d3f1d23dcc4ccba69d5", [{0x1, 0x80, {0x1, 0x2}}, {0x3, 0x1f, {0x1, 0x8}}, {0x7ff, 0x1, {0x1, 0x1}}, {0x101, 0x17d0, {0x2, 0xfffffff8}}, {0x4, 0x5, {0x2, 0x10001}}, {0x3ff, 0x5, {0x1, 0x101}}, {0x6, 0x9, {0x2, 0x6}}, {0x9, 0x9, {0x0, 0xffffffff}}, {0x0, 0x200, {0x0, 0x400}}, {0x24a, 0x7, {0x2, 0x5}}, {0x5, 0x8, {0x1, 0x4}}, {0x1, 0x3, {0x1, 0x9}}, {0x6, 0x0, {0x3, 0x9}}, {0xff, 0x5, {0x0, 0x9}}, {0xef7, 0xf456, {0x1, 0x7}}, {0x8, 0x6, {0x0, 0xcdf}}, {0x5, 0x5, {0x1, 0x6e6}}, {0x7fff, 0x80, {0x0, 0x1}}, {0x5, 0xebf3, {0x2, 0xed1}}, {0x9, 0xfff, {0x1}}, {0xb8, 0x1f, {0x63e613778352ff2c, 0xfffffffb}}, {0x8, 0x200, {0x1, 0x5}}, {0xffff, 0x3f, {0x3, 0x1ff}}, {0x6, 0xffff, {0x3}}, {0x9, 0x6, {0x3, 0x8}}, {0x1, 0x25, {0x0, 0x4}}, {0x8001, 0x8001, {0x2, 0x101}}, {0x8000, 0x5ae, {0x0, 0x5}}, {0x9, 0x1, {0x3, 0xf7}}, {0x5, 0x9, {0x1, 0x6}}, {0x8, 0x4, {0x2, 0x2}}, {0x7, 0x0, {0x0, 0x4}}, {0x2b71, 0x8, {0x0, 0x44c}}, {0x6, 0x4, {0x2, 0x80}}, {0x7, 0x7ff, {0x2, 0x7ff}}, {0x8, 0x2, {0x0, 0x9}}, {0x3, 0x400, {0x3, 0x401}}, {0xe179, 0x7ff, {0x1, 0x7}}, {0x4, 0x400, {0x3, 0xb092}}, {0x7ff, 0x6, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0xdb2}, 0x80, 0x6, 0x80, 0x3186, 0x1f, 'syz0\x00', "a58f309c6c63b65493f0176ced8dd5471d6ceb6f581d600ce7a3bd779f37c497", "d3fad3bb9085e565bfdc5b1df5e819d6a9ed0767bfcc7be13beaf774dfec94ab", [{0x1, 0x6, {0x1, 0x285987c}}, {0x7, 0x93, {0x2, 0x2}}, {0x80, 0x5, {0x3, 0x62a1}}, {0x8, 0x4, {0x1, 0x4}}, {0x6, 0x9, {0x0, 0x7}}, {0x3ff, 0x5}, {0x8, 0x100, {0x2, 0xfffeffff}}, {0xfff, 0x100, {0x3, 0x4}}, {0x3f, 0x4, {0x3, 0x8000}}, {0x1, 0x7, {0x0, 0x1f}}, {0x9, 0x40, {0x3, 0x5}}, {0x100, 0x1, {0x1, 0x8000}}, {0x6, 0x100, {0x2, 0x80000001}}, {0x3, 0x800, {0x1, 0x7}}, {0x2, 0xfffd, {0x1, 0x1c9}}, {0x9, 0x8, {0x2, 0x81}}, {0x1977, 0x7, {0x3, 0x91a}}, {0xe, 0x9, {0x0, 0x7}}, {0x1, 0x3eaf, {0x1, 0x2}}, {0x40, 0x81}, {0x35e0, 0x3f, {0x2, 0x101}}, {0x3ff, 0xffff, {0x3, 0x1}}, {0x40, 0x0, {0x3, 0xfffffffe}}, {0x200, 0xfff, {0x3, 0x31}}, {0xf30e, 0x9, {0x0, 0xffffffff}}, {0x328, 0x7fff, {0x3, 0x9}}, {0x23, 0x9, {0x1, 0x7fff}}, {0x20, 0x8000, {0x4, 0x7}}, {0x8000, 0x0, {0x3, 0x6}}, {0x101, 0xfb3, {0x3, 0x8001}}, {0x1, 0x4, {0x3, 0x8001}}, {0x1, 0x20, {0x0, 0xd567}}, {0x3, 0x79f7, {0x2, 0x2}}, {0x7, 0x4f, {0x1, 0x1}}, {0x81, 0x81, {0x0, 0x10e4c867}}, {0x5, 0x3, {0x3, 0x6}}, {0x81, 0xd0, {0x0, 0x200}}, {0x8, 0x6e60, {0x3, 0x8001}}, {0x7, 0x0, {0x0, 0x3db1ba7d}}, {0x5, 0x1, {0x3, 0x80b}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = openat(r0, &(0x7f0000000040)='.\x00', 0x10f6e2, 0xc2) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000fc0)='./file0\x00', 0x2000204) ftruncate(r1, 0x0) 15:01:29 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0) 15:01:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffff0000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x300, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) (fail_nth: 1) 15:01:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x700, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xfeffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:43 executing program 2: socket(0x24, 0x2, 0x0) 15:01:43 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x600000000000000, &(0x7f0000000c00), 0x1312) 15:01:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffffff7f, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:43 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0, 0x0, 0x0) 15:01:43 executing program 7: [ 1486.528550] FAULT_INJECTION: forcing a failure. [ 1486.528550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.531646] CPU: 0 PID: 8847 Comm: syz-executor.5 Not tainted 5.10.247 #1 [ 1486.533377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1486.535496] Call Trace: [ 1486.536168] dump_stack+0x107/0x167 [ 1486.537100] should_fail.cold+0x5/0xa [ 1486.538074] _copy_to_user+0x2e/0x180 [ 1486.539281] simple_read_from_buffer+0xcc/0x160 [ 1486.540473] proc_fail_nth_read+0x198/0x230 [ 1486.541578] ? proc_sessionid_read+0x230/0x230 [ 1486.542733] ? security_file_permission+0xb1/0xe0 [ 1486.543889] ? proc_sessionid_read+0x230/0x230 [ 1486.544852] vfs_read+0x228/0x620 [ 1486.545588] ksys_read+0x12d/0x260 [ 1486.546340] ? vfs_write+0xb10/0xb10 [ 1486.547148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1486.548257] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1486.549352] do_syscall_64+0x33/0x40 [ 1486.550135] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1486.551223] RIP: 0033:0x7fca6a2b769c [ 1486.552005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1486.555891] RSP: 002b:00007fca6787a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1486.557497] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fca6a2b769c [ 1486.559009] RDX: 000000000000000f RSI: 00007fca6787a1e0 RDI: 0000000000000004 [ 1486.560507] RBP: 00007fca6787a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.562008] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1486.563524] R13: 00007ffe0f9606ef R14: 00007fca6787a300 R15: 0000000000022000 sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006140)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x1f, @private1, 0xfffffff9}, 0x1c, &(0x7f00000020c0)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="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", 0x1000}], 0x2, &(0x7f0000002100)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @dontfrag={{0x14, 0x29, 0x3e, 0x20}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002140)="f81dd7315657d407fa64b22e44711e191b261d79e25605bbc0c8e467bbad72c4d3c8345fcf6981b0d54ee3f64bb337c251e40f1be4b0aab84c03bd7ea7c9f9cdcab346cdb1e3803f9c", 0x49}, {&(0x7f00000021c0)="bea32c641cffcf47854bbe7b1c05171053f6ca3b667f52b47284d8b781a0b3b9bf4d9e2b7dc69675c54bea38894c1e5eb0470dc7227603275c665b862e43fad2d906a19662f6075dd351f112cd3bf95e2d4d28b824616b6ea3fed7b187920cf19e7af5bbe254c0d9f78371d7e0d97c2265131e5dcb6611ece88530187890bd7a34fe429265332d83189902bb", 0x8c}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000003280)}, {&(0x7f00000032c0)="f1fa1067167ec6fce61af8c36934357a6f0d58317bd660d3a6a8bceb7d7a787ff0a6e1a80e1dbf46a8e4d447db4e2f25f9576411d86cd20f0abb4e1d851f1617852e341d0ff78b7773ff13ce6c3d267043236e5577b932e1fcaf269539e8286cde0de0a477a8bedc1a5ee75ac3b5604b006cd9a0f5b3893e432b91bf68b9e6ef79e04162ee3306b9893c746db09ab8e1362812c2e4d6f306e08eb9a66262defe4d45e1d028fea937480438d870ed82861af17b5c401fa2c782c163ac77644b1eeeff9a964028", 0xc6}, {&(0x7f00000033c0)="d425f10a24fa9063dd17", 0xa}, {&(0x7f0000003400)="71a98c1d7ac9b8961968f791981ba0962c4912971bfa17fea5e3d44194f251b7e5b23387c4c1076ce00c530e4370d60fa195d1b8173b9741a6f46815b54c8bf2da99b91cebdde0c496d6785c087224d0077b772c411dac50219ca1adbc827b29c56f89fccd42bd418ef4c4c242431e5f6e9363e99f39f99c68fba3721995d0e765840377321c95ca205f8161eab6ad0eaa5a1ca965304321f6e1fbad03d3ed8a6171b123c3b846868b434ac6478c068c07b82698074afc2d143904025bf2881c2efd44f45592e1ed0ad7d390", 0xcc}], 0x7, &(0x7f0000003580)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x16, 0x0, '\x00', [@pad1, @pad1]}}}, @hopopts={{0x48, 0x29, 0x36, {0x3b, 0x5, '\x00', [@hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x80}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @empty}]}}}, @hopopts_2292={{0x88, 0x29, 0x36, {0xc, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x7fffffff}, @ra={0x5, 0x2, 0x800}, @ra={0x5, 0x2, 0x47f}, @generic={0x8, 0x4a, "7abecf29d2311b760b7a1d0c0797883f7ccc081f7d55ade7044d2276d32b76ca4fe3625a118106668f636eaa2fbcee9e0f9d88f1ee2d64d165cf86b0d0c5aafb7114072eca454d34aa8f"}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim]}}}, @hopopts={{0xf0, 0x29, 0x36, {0x3b, 0x1b, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x81, 0x9, [0x1000, 0x1, 0x3, 0x7fff, 0x4, 0x1]}}, @calipso={0x7, 0x58, {0x3, 0x14, 0x3, 0x9, [0x5, 0x8f, 0x6, 0xf05, 0x1, 0x3, 0x67bb46a8, 0x5, 0x543e, 0x5]}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x4, [0x2, 0x6, 0x401, 0xff, 0x2]}}, @hao={0xc9, 0x10, @empty}]}}}, @dstopts={{0x40, 0x29, 0x37, {0x2e, 0x4, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x6e, 0x8a, [0x1, 0x2, 0x3]}}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xdd4}}], 0x238}}, {{&(0x7f00000037c0)={0xa, 0x4e21, 0x9, @remote, 0x7}, 0x1c, &(0x7f0000003b80)=[{&(0x7f0000003800)="faebcec61749eb654028ba279e49c45d4bda8d646545e7c459e2117b24b0c67e632c7932410ec2d329902fa7919c9e2c24ee9dcb6fab006423ee319d688bd91b60e8a1beec754cb83693895a7d44f64033cc584395445fd13cb61c5b0523c828df956a7047dcf2f67f676dfffb14aeaf29d30de80b81cef0534e9997192e74588cf067e0b0e5f894e509a79e9da87f1fe6db1b79daba064946bc7c7c2590230043b38ed24226a33278b84e50fb13dcb2152bdf55b2dce451b0030f572f385baf60456a4df65a3b18c84636d5329f48950e0804abf5d666b9bbd9623466cdd495df856ccf2105", 0xe6}, {&(0x7f0000003900)="c7c1434549e0ea2d48d3d4a1c6b277c54f3a5b4ef820de235a34a3038f3afd54c6954b0640c13441ea37a063bc3d36dffef7e3f9d0653a68c6f79a6bfccd264026ea31f87a5eae83b14eef066c858c220df28ab912a205bb885c47fb2c999e74c076228b96f0aa80306e518fb11f48294b9bb724c2912beac3f0093707e65b308354095f7c1a1494bfc735c244f7e1905440f16290f8f6588c2d039ce5b2e287379a389453cac623d280d4ba444b85a2c85aa977318b2adc87c2a45531cdf7f617c5d203", 0xc4}, {&(0x7f0000003a00)="77ef38288219469c0b14cac3c5b2a046c45ac5478ed248cd6545a50bb0f3fa2bb7bf94658fdd3099654b3a", 0x2b}, {&(0x7f0000003a40)="642ccf8c35bbde5191c2c486db2fa0", 0xf}, {&(0x7f0000003a80)="e167014ce64cf23507ee2acdd5fb31f8917df754c6695a8789d88a1d251d6b5b719cc02f3a01b689a002b2a997893e7b909a28c954d1892f2a9105cb45a3726f34fa5b0622cfd475088374b4b3224770e2a7ec700071d9232129fb2a09bd9ecd66db4fa70848da55ae2ce91c8d437deb954ef7869b7b176070e4723901e820dd057827554e1ecc403e42ff79b925fb7e400df2084485172072c0fcd18e00bd1ce4f5589dae9c49d5d1b8d403c46d6f2baec4916c4907fc82182b22d7ee6e72bff735ca57e9b50209ae1372cbf6ccb80ec0e2607f05740fc5047813c5d77461c919d243d1c95dc39b1cfedcbe3a244b871b1f9f444b887115a30cead8", 0xfc}], 0x5}}, {{&(0x7f0000003c00)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000004e80)=[{&(0x7f0000003c40)="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", 0x1000}, {&(0x7f0000004c40)="843ee8fe5e8509a7c55d29c2c1861f4503efefa32d83ea2b74a2f43f85602faf596fcc594801017a6782b8cb2fbe06fef66b194ccccb744b19e0005587a59cc53af2d974cc50a2cdfe45682d7c7e247961f697db2eb6e6f8e35c53ef0d1257f1f072eab66372a11869802cabc4e0c15e4c108bc677834c5b4a772facf833f4411705fbe93f4f6ee9ce68d6ccefe18fea149c81ab122708a5b0e6b39b1e08e2877a31ab", 0xa3}, {&(0x7f0000004d00)="fedc6517864c7b13339e2f4929699d6a8b08f30e01b02414135eac0b7f", 0x1d}, {&(0x7f0000004d40)="ff3a9fcfa8678892ac872ce3f460dc8dc71135921c58bed5bc046d9ebff55e54d99c4a0b799410250a88e3c8ef5ff786252cef55131ab2e1380e2ffddfefc3126a4d9844c5c83b9431fc9f441e9948958e63320449ce9cf77ceee804246a0bd52aeb99998892a272e1a9c0e192c1da4cf87dc487c28d210a8996f8165e521924bb0a2a54b4fe34336b72e693e0361ebde64b0c41b8791c35e33d8291", 0x9c}, {&(0x7f0000004e00)="1399ec4e55f6b523d54f00b615661999fc8df28fef972c4d1c6b64cbdf9e164674ea1315c0956a0e2266a4f1f0791a765bebca004c9a83a02ec997ea9e67bf9dd982156aae99ff146922085a5a0930d8ed8d5cacd105884f581d16d5f9abe78ed9f083d28c7209fbae95245318cc1ad329460f047289888657", 0x79}], 0x5}}, {{&(0x7f0000004f00)={0xa, 0x4e21, 0x80000000, @private0, 0x80000001}, 0x1c, &(0x7f0000005040)=[{&(0x7f0000004f40)="d211825ecdcf0df828210307866bf043fe3996c681f18fe966dff6fe24abf6f39788f6634301313b21c4a0e59e3d4cf600b8a03b6f6e71d05025322ce656b815efc1f8f51c2c2216e880b633ff413d147b22bfe7219b0719ed4e8c2e5b2ad6efb0ce913ebc2865aca8350479ff3c7ae72c713409c4643e0e8f43947b165384a870826eae1a9b76f47448bac6eb541b61d0e42b6ae2babf04f4", 0x99}, {&(0x7f0000005000)="0faae8a196cb65456a1928e910697a1701c5a72a8e827a957684d16571", 0x1d}], 0x2, &(0x7f0000005080)=[@hoplimit={{0x14}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x5e, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @pad1, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x800}, @calipso={0x7, 0x18, {0x2, 0x4, 0xa8, 0x7ff, [0x5, 0x3]}}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8000}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x3a, 0xa, 0x0, 0x6, 0x0, [@private1, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x84, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x20}]}}}, @dstopts={{0x78, 0x29, 0x37, {0x67, 0xb, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x7, 0x7, [0x2, 0x3, 0x1f, 0x9, 0x7, 0x17, 0x80000000, 0xa54d, 0x100000000]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x1c8}}, {{&(0x7f0000005280)={0xa, 0x4e23, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000054c0)=[{&(0x7f00000052c0)="6ac3f3a8107020bb6874c17b626c1028e05eaa692f6c95e67405cae6d4758148c577079756ee4afb906c488da494e19da3697966550c1362125edfa733ae2c8cdc0d7a8441f3566d837f7de51b98ae3ad79518778c427f8e9577e97667ee7d068de309f9b9dcaa8e7834ccd5b1be1eb61b98afe2aa9030a14297cdd66aa900546e24be19000ede332b2eca2b20f8fb546ea194f5e7c174097f005e4d2e8ab0ad613defbf893a82336f0221d5057a4ea6a822937489754e7f54b13b", 0xbb}, {&(0x7f0000005380)="bdfe2a33abda0586ad5c51d7a2ddbd732b1b8c8d4bae50bfa0fdda44bd8da70dec0682f860751d2901bb336ad41d0e896636371657df95b7b338e5d76f75266bcd9dc6b6beab68fd0d6a2f41e2d3c6cc2f9cef748757e71f006450e38b14000bdd93968f7946e024e0dda13af01f01354665742f59c1575ae26011ad7cf27546", 0x80}, {&(0x7f0000005400)="e9d4", 0x2}, {&(0x7f0000005440)="1c7ddc2960a44f5d3dae067284ff55a764150b2a92e83f2e13f44b4437927c841f590b5fe0fa2cd115dec7b04fe52ef4d7acc7e371bcc55de86db82602f0", 0x3e}, {&(0x7f0000005480)="0ce0ba01e41859", 0x7}], 0x5, &(0x7f0000005540)=[@dstopts_2292={{0xa0, 0x29, 0x4, {0x33, 0x11, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @generic={0x5, 0x7a, "c8a45263a39e4b36f53b6dac28810648968b41ad05961ebaa0a2c9cc81608514a1b82e5dc6d3410ca6db5649e6fd24b5ed6d54eb79b092fd1f7607ebc88b1d94b90c9c69b81d95af6b43ebcb287274a3cf3095fd579d7f0c6d7b9bc248bb11e4c83516654fac9afc9c9c9f9c059f8a093700ad006ecfb35ffd28"}, @generic={0x19}, @ra={0x5, 0x2, 0xfffb}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x33, 0x3, '\x00', [@ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0xa3aa}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x8, {0x3, 0x0, 0xb, 0x3}}, @enc_lim={0x4, 0x1, 0x2}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x6, 0x8, 0x2, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x41}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80000001}}], 0x158}}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f00000056c0)="2e3b9ef6ab6f2ebc4833e7db8d14b3247342fb90317bc0244019bae1d16ccf78be59e46431432fa4d25971f594aaacb5a630c46da51624c4cca1801944dbb3f51bca768d5d8104562d161b6a166ac4391bf14c081731fedd5163040078728587bb2143e4db309b5a17b56a168b1f547c5a9acacfb0799090e55cfed811ad70d22843440ec4dea23747bca15bf8147a90fe4c17d83754a8b660d7d482879a19ef704be58cf39853af3a799863e4d12562dde041586d325422052e982642463b11d515081bf95202b470dbb2b014e1a6ff32e3ed83cc3b8e8be0ef0bce4ff548eab6138e09af909fffb6da01159402e55c7b53fd", 0xf3}], 0x1, &(0x7f0000005800)=[@hoplimit={{0x14, 0x29, 0x34, 0x7fff}}, @rthdrdstopts={{0xa0, 0x29, 0x37, {0x32, 0x10, '\x00', [@generic={0xa7, 0x2, "cd72"}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x1, 0xa, 0x5, 0x0, [0x800000000, 0x0, 0x8000, 0x4, 0x101]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0xcf, 0x0, [0x7ff, 0x1000, 0x4]}}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f00000058c0)="12285188a3a469efd15388757b3e5897c52fd3a381c7f46667fde5d0d6ae6b0fcce7da140cd02b5997afd3b174bef1a780bd7c", 0x33}, {&(0x7f0000005900)="4cda23d94b5d2e71029407948a3393a19ed86189c5a0c944fee16dc2027ae6e0e2766954cf059d68daa24464ca568e386e71f9c17b87163a8297f3eb9411bacc0e599baa2cf8a389d9b5ff5d982caf47c7a617e1b3424f5e148c1229d71d018461d0bce0fefde671b80f0a2baa7765e787751c692fc0f9054d64571dc9fa757c90963dfe1c7000148d71", 0x8a}, {&(0x7f00000059c0)="14a7d9f485ea23a56305f10e69ded828ed024397bf1e4311c648f98e2b0b07eccd510f7976d076113b0956b6849189ef5a7309dd5c9492dc906d47ce6872d443a2594b49d08409a3dae03a07efabd18136ecd4e79993a3adfa6a10e8054c6b5f971127dd182a339e65ea1a8a1e05e7b250a1695130afc5c5ee1b8b29b6e19caec9d28bbb4bb8753c505ea7e4871bc3b6ce176fd13932783f30b75463525e", 0x9e}, {&(0x7f0000005a80)="4a965a72074eb1cedeaf154a746da80e64521611a8417d1ce30f4efc28f137aceaf121b70ffb81017b2a23f3a470a97eb9a3e01b56525a4ba5343039eef00a18756fb6b5f2c10e972429b8f321e041b3935f3989298c44e2700ee6f4638900b67d42b81f221dee283e5009d55cae032d1d57699485a1fea6799af4f4c55a2b2663ac07b35437c90f09135d40bddbfbd93931bb6c43c4e64ae2795883f798ac753da147ca0f70341bd829ce10edac264d4d3962f38580f6857833c9391c0dfc934154f621883f81e7266189ab", 0xcc}, {&(0x7f0000005b80)="c1756268f9fde85edb8e2bb8e5d2c16310bed0419bd958577fa7d1d88ab78864c797e2eb84d5d873a5ec7ddaf7b06c4b5972815ea28dbbedba6e0feb2881316bdf933efcc16fec1e877d49bee2324f81b4df90acadc07bf2f2dbd5b7cfbaa5ba", 0x60}, {&(0x7f0000005c00)="cc44905b59b0727dbe2b882fa33d1f577b41a51bf2248fa3169dfbf06bf0f957e51f0ac2c7acfffecbfd57eb37cfeb02d0334ba4145b", 0x36}, {&(0x7f0000005c40)="d9dff89bbb838c9b53c94e1591b218050933f5dbb374e5fe817538e34e058d26071d9d772dabc47cc4945335b081c123686b685361c0c1a7d7d57385e04f30deafa1c09222f2cd3884c92ce0352f659ac7008cc0ce2742be4c172be3fc77869da71145fafed6d91314649906cae0b48c94b3f6edb1d1eed9396f0e24683244b04a6ec11bd7199c2dd52db6e8c4c6753a4a5ffa2abd13e1b36f8d79b254e0f46c85c831a2382e", 0xa6}, {&(0x7f0000005d00)="463ab557cb57153894e1c97d06715727f50e5209a10867c3c9e49f231e31c05b73856a0e7d058c986b696e8d37f28284bacdabb7575705daef3efdbaacf190adb9e44baa78f3f5746658bdb58753c9ed6ebb91a55b1549406afffa9b2202137974c8c1f86a6bf0cfcb17a585aca443ab4e4b5090bcd50ca979dd739457540154d4d084898235c714f728b5ec9c617a6f85a2eb59da39b44448ac1ce6c1fa4bd0631a55f5ef36244239a1770f64aaec5aa1b7551f85393bf77603b9de2591d644ee15d25d966b7a62023d6c5eabde8d684b2ea80fdd3df54a6fafd027e38c5b1dfe565907e18ac7a7e21b37587860663c45", 0xf1}, {&(0x7f0000005e00)="ee958527f7854878f675d439ef84fe2a87a92d8993c5c4e48d247ca231c822dbb854031f58f5a33edf6f6a541054e9e0355aed3a842df55ef35fcc9ab3ca0411e056904321cf30066f2277575d2d739834314eb5473b98703b0a941e69a79fbaba641c77a6d13750f4831539d98d430eee19f77b8fecb4da2cceb0d4f467bb9dcd213aab7486c2dbbc79e9d406a8fbc20e7b0194d81c1a93ecd296a66fc7f4132d98d3c2056219af43828184314d4eea58a5370c307f7c07e8922d9675787572", 0xc0}, {&(0x7f0000005ec0)="043ad45dfa9b00fdb6a9b74907378a42", 0x10}], 0xa, &(0x7f0000005fc0)=[@flowinfo={{0x14, 0x29, 0xb, 0x1275}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfff}}, @flowinfo={{0x14, 0x29, 0xb, 0x3ff}}, @dstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@ra={0x5, 0x2, 0x45d}]}}}, @tclass={{0x14, 0x29, 0x43, 0xb113}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x3c, 0xa, 0x2, 0x1, 0x0, [@mcast1, @local, @loopback, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x148}}], 0x8, 0x44) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 15:01:43 executing program 2: socket(0x24, 0x3, 0x0) 15:01:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x303ee3, 0x79) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x74, 0xac01}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_open_dev$hidraw(&(0x7f0000000080), 0x5, 0x220000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="ffffff7f000000002e2f66696c653000e60e82c577e71c005ce60cb2d16ac1b56507799d9728c3a7dab9648546ee0dcfa9d38a345bc74be67926df5c02730adf84a2d3130b87e7bd451cd2896c95790191f9b001363016e12b87537d3bec6f794a09830ee547704085905866e76d8a0088d6a730bc3b9ea7ed8d887732f97d6f615c7b5d225d7d600d41987487c483b9bb5c8189cf3a09"]) ftruncate(r0, 0x0) 15:01:43 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x700000000000000, &(0x7f0000000c00), 0x1312) 15:01:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffff000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:43 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0) 15:01:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x900, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffffff8c, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffffff7f00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:43 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) 15:01:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) 15:01:43 executing program 2: socket(0x24, 0x4, 0x0) 15:01:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x10000, 0x400203) r2 = pidfd_open(0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0x3, 0x0) ftruncate(r0, 0x0) 15:01:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x2, 0x100) 15:01:56 executing program 7: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x64, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe0}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8041}, 0x4814) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x6e, 0xfffffffe}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x6}, @void}}}, 0x1c}}, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) 15:01:56 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x800000000000000, &(0x7f0000000c00), 0x1312) 15:01:56 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) 15:01:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xfffffff6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xa00, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:56 executing program 2: socket(0x24, 0x5, 0x0) 15:01:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0xffffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:01:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xb00, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:12 executing program 2: socket(0x24, 0x6, 0x0) 15:02:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1076e2, 0x0) pwrite64(r0, &(0x7f0000000080)="a7143973d80361d3004c887fd8273da2f30f0ff11c6c5fa87f8c19dc34d67200ac7d004765d19daaa15b2f9d82114f9483e3a569aa129c1ae1572254db9eff8be28c8a3143d17c9e7541526b824f98c8c429edc99cb7429a3f9b51b9377245a339f1ed894b647b1144ed08e1597d922ef3e4b21b671e84ff43c9898dba7746d94dcc6f0eab1184893ada5cf6701c132550add98c69d4cfbc31edff73ef4425436cd61897d91a", 0xa6, 0x2e) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') fcntl$addseals(r2, 0x409, 0x4) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000200)=r4) lseek(0xffffffffffffffff, 0x4, 0x0) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r5, 0x0, 0x39, 0x8}, 0x1000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="00030001a3a00018000000", @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="2e07662070fc2700"]) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0xfffffffd}) ftruncate(r0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) signalfd(r6, &(0x7f0000000140)={[0x8001]}, 0x8) 15:02:12 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x900000000000000, &(0x7f0000000c00), 0x1312) 15:02:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1020, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:12 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) 15:02:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x12, 0x100) 15:02:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xfffffffe, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:13 executing program 2: socket(0x24, 0x7, 0x0) 15:02:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:13 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) 15:02:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x1200, 0x100) 15:02:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xedc000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:13 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa00000000000000, &(0x7f0000000c00), 0x1312) 15:02:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = io_uring_setup(0x2fdb, &(0x7f0000000300)={0x0, 0x9e76, 0x0, 0x2, 0xe5, 0x0, r0}) r2 = syz_mount_image$msdos(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x4, 0x3, &(0x7f0000001640)=[{&(0x7f00000004c0)="a597f8790fcfbeb7400c743c305f4abafbb06aede1bc8b653730e30a9b87fa5f2d630aaafd4dae309c99c74ef1044edf4cfd41f24d11663a0bf55fb5d7a877c0b41d0d164cfedab0c9a24493d106f6b68b8bc3321f800830f056b5a798a64d13a1ee7abe8b507d74a524cbe01b3d25b848d7d6f1c26408219e62ffb478fc802ff39bc5efccc059ba300004f7e2a59267560b6103a4102d3772735978fc1d878e5d6d6e98984618b23212d5aeda529d325faf0b30ce420d03d2456a3008386e510cfbd20ea9a52b7ce282d17c5bf31d27878da397243f12f47381d6cc075e88a951ed9a2eb52a38b15329d40436c1249ab5bb41f35536cba26e", 0xf9, 0x10001}, {&(0x7f00000005c0)="13af7fc267de0fb92d3cd8efe7e7c9d55b0f88fe1512746d6789784ef9b2c94a6ede7fa102619f44e038fac3580664f5f9aa8809203c7f70cb2db9b32a8dd79e5a108b8305c52d46555ee1c32ad603387c6a73d3746a0a2eece58b907643120318b447d71a3ff81171ea14eba96007f72ec6a37db453bc7cd785c4c8eb2aad", 0x7f, 0x2}, {&(0x7f0000000640)="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", 0x1000, 0x9}], 0x88084, &(0x7f00000016c0)=ANY=[@ANYBLOB="6e6f646f74732c6471846391747a3d5554432c6e66733d6e6f7374616c655f726f2c646f74732c736d61636b66737472616e736d7574653d002c736d61636b66736465663d2326290d26dc3a3a7d602f2c6673636f6e746578743d726f6f742c6d6561737572652c00"]) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000400)=[r2, r0, r3, r0, r0, r0, r0], 0x7) r4 = signalfd(r0, &(0x7f0000000080)={[0x10000]}, 0x8) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f00000000c0)={0x72, 0x0, 0x0, 0x0, 0x20000000}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x88000, 0x4d) r6 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000c00), 0x1312) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001740), 0x1}, 0x8001, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000240)=""/114, &(0x7f00000002c0)=0x72) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) io_uring_setup(0x28e1, &(0x7f0000001780)={0x0, 0xb91c, 0x1, 0x3, 0x1a7}) ftruncate(r6, 0x42) 15:02:13 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) 15:02:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x2000000, 0x100) 15:02:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:13 executing program 2: socket(0x24, 0xa, 0x0) 15:02:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x7, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1516.679989] loop7: detected capacity change from 0 to 131072 [ 1516.741786] loop7: detected capacity change from 0 to 131072 15:02:25 executing program 7: r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r0, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x400d4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r1, 0x0) 15:02:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2010, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:25 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb00000000000000, &(0x7f0000000c00), 0x1312) 15:02:25 executing program 2: socket(0x24, 0x2f0, 0x0) 15:02:25 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0, 0x0, 0x0) 15:02:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x12000000, 0x100) 15:02:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x9, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x200000000000000, 0x100) 15:02:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x100000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3f00, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:25 executing program 2: socket(0x24, 0x300, 0x0) 15:02:25 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) 15:02:25 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc00000000000000, &(0x7f0000000c00), 0x1312) 15:02:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xa, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x1200000000000000, 0x100) 15:02:40 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xd00000000000000, &(0x7f0000000c00), 0x1312) 15:02:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x200000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:40 executing program 2: socket(0x24, 0x480, 0x0) 15:02:40 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 15:02:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xedc0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:40 executing program 7: r0 = socket(0x25, 0x800, 0x1758) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="c95098fea3dee7a25b37f0231d17d7d860d31a795d80b5425d7fba73cd4ef24a5bfb7b9eae180ce8d209f3dab49ab02e926eed34b21ad11337625f1d592b957b5e89c84ce58149a8fcffffffffffffff359c2c7888d29ea31ec3406eb003ffdfd394ea253dd3d0228760c10f993d6e896579c9dcd8e2f8fe72f67f01fd5242b9c9a75e5fe9571316db9ff1dbd6daad9ca7e1361697", @ANYRES16=0x0, @ANYBLOB="02002abd7000ffdbdf250500000005002a000000000008002c0097ceffff05002a0000000000050030000100000008002b000500000008000b00660b000005002a0000000000050038000000000005002a00000000000800390000000000"], 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x2, 0x6, 0x5, 0x7fff, 0x0, 0x6, 0x6, 0x274, 0x40, 0xfb, 0x3, 0xff80, 0x38, 0x1, 0x1, 0x100, 0x3f2}, [{0x6474e551, 0x4, 0x5, 0x100, 0x2, 0x8, 0xfa, 0x1}, {0x7, 0x10, 0x80000000, 0x9, 0x8, 0x7, 0x0, 0xfffffffffffff000}], "bacbc8b1844e22900ad387b691b5dff7f0712bb0758957b0d454bc9aea19896e5a595a412549df2706507b23aa63bf5b1cd80ee199a322d6b0613f985ace4b5cb707cd967d66ee2fd98133a723bbecaeab0ee92e936104c2cb24b97a39787ee1258dd918eb178308102cb1d1ada96d9483ce6787b2e53bc55a426e45978bb1cfe5f2e5238e89f2e659a10f071c4a291a58c9bd42d56f6a43", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x848) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r1, 0x0) 15:02:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x3) 15:02:40 executing program 2: socket(0x24, 0x500, 0x0) 15:02:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x300000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:40 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xe00000000000000, &(0x7f0000000c00), 0x1312) 15:02:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xb, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:40 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0) 15:02:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x80000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x102) 15:02:41 executing program 7: syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) r1 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x3, @fd_index=0x3, 0x9, 0x0, 0x0, 0x18, 0x1, {0x1}}, 0x4) ftruncate(r0, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x529081, 0x24) 15:02:55 executing program 2: socket(0x24, 0x600, 0x0) 15:02:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x7, 0x9, 0x2, 0xfffffffffffffffa}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3f}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x40}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4054}, 0x4000041) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 15:02:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x112) 15:02:55 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0, 0x0, 0x0) 15:02:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x700000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:55 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf00000000000000, &(0x7f0000000c00), 0x1312) 15:02:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x10, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:55 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0) 15:02:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x72, 0x0, 0x0, 0x6ebd, 0x1}) ftruncate(r0, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000), 0x2) 15:02:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x300, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:02:55 executing program 2: socket(0x24, 0x700, 0x0) 15:02:55 executing program 2: socket(0x24, 0xa00, 0x0) 15:02:55 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1000000000000000, &(0x7f0000000c00), 0x1312) 15:02:55 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x10001, 0x44, 0x0, 0x2, "77004a6efdff000000000803000000000400"}) openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0x100200, 0x80) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'veth1_to_bridge\x00'}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)={'vlan0\x00'}) r2 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x72}) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd=r3, 0x0, 0x0, 0x1, 0x1, 0x0, {0x0, 0x0, r4}}, 0x1) fallocate(r3, 0x40, 0x0, 0x100) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r5, 0x4, 0x0) accept4$unix(r5, 0x0, &(0x7f0000000100), 0x80000) 15:02:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = accept$unix(r0, 0x0, &(0x7f0000000080)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0xfffffffe}) ftruncate(r0, 0x0) 15:02:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x900000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:09 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) 15:03:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x40010, r0, 0xf3b0b000) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000180)=[@request_death, @acquire={0x40046305, 0x1}], 0x75, 0x0, &(0x7f0000000240)="af290b952fa689b33cef751a6075e1e3bfd6a01de9d6940e58113705a86859f72967ec730e5df48f12e5c809782f07bdea1442f0aabdc1a4773ae58e9c2f6e780a65d92bcc5c9504ebb19e534d3a73cc267b2a7bcd172a563ea98ef591f04d7f0ee64c473625f278c2293f1c893bfda9194ac8603c"}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)=0x1, 0x4) 15:03:09 executing program 7: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffe}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 15:03:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x700, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:09 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1100000000000000, &(0x7f0000000c00), 0x1312) 15:03:09 executing program 2: socket(0x24, 0x8004, 0x0) 15:03:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xa00000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xb00000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1000000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:23 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1200000000000000, &(0x7f0000000c00), 0x1312) 15:03:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x900, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) r1 = io_uring_setup(0x289, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x0, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) umount2(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setflags(r1, 0x2, 0x1) 15:03:23 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) 15:03:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000140)={&(0x7f0000000080)=""/157, 0x9d, 0x1ff, 0x2}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 15:03:23 executing program 2: socket(0x24, 0xf002, 0x0) 15:03:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x7000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2000000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) fcntl$notify(r1, 0x402, 0x4) fallocate(r0, 0x40, 0x0, 0x100) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 15:03:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:23 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) 15:03:23 executing program 2: socket(0x24, 0x1000000, 0x0) 15:03:23 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x1300000000000000, &(0x7f0000000c00), 0x1312) 15:03:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xa00, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x10001, 0x4, 0x2}) ftruncate(r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r0, 0x3ea01000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x80000, 0xc0, 0x4}, 0x18) 15:03:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2010000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:40 executing program 2: socket(0x24, 0x2000000, 0x0) 15:03:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xb00, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) 15:03:40 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0x0, 0x0) 15:03:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x9000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:40 executing program 7: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 15:03:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3f00000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:40 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4000000000000000, &(0x7f0000000c00), 0x1312) 15:03:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x6}) ftruncate(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) 15:03:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8cffffff00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:40 executing program 2: socket(0x24, 0x3000000, 0x0) 15:03:40 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) 15:03:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xa000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x20, 0x3}) r1 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r5, 0x4, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r5, 0x0, &(0x7f00000000c0)="fb0f1b440614c15c1369f94c", 0xc, 0x24058000, 0x1}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) 15:03:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1020, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:40 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xffffffff00000000, &(0x7f0000000c00), 0x1312) 15:03:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x1000, 0x4}) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) r3 = io_uring_setup(0x496b, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0, 0x24c, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) fstatfs(r2, &(0x7f0000000400)=""/36) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x3, 0xf0}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000600)={r5, 0x3, r2, 0x7}) r6 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f0000000240)=ANY=[@ANYBLOB="0100c800bc3ccbc72f7663fc9c3d0cf70cd385997010d9379425ff0f23eba73d4649b917ba81c046b7a4c04f7a6c43a34dae6a7fcef07b1343282eaf34a2122652fd7588b9f0efdf7a6a50f622c731eff89d637a409e45d53ebed1eb33de1b0fdea4ff79e13bfca9da8d065175e59f885dc08ee14205a99fb5bbdabb01734f63915ea1dfb53594b159d148a1c47b0866fdfa68092df2cd1baa1f2c007e4f168ec4eb2d699a249bf4c967c18918ef59f6b12bcab92ac2733613ccc871f6f60442945bde703241dba72d02f98d1a4856c1daa9c6000000"]) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000080)) syz_io_uring_setup(0x3530, &(0x7f0000000440)={0x0, 0xe890, 0x0, 0x1, 0x254, 0x0, r6}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) ftruncate(r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/182, 0xb6}, {&(0x7f0000000340)=""/174, 0xae}], 0x2) 15:03:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xb000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xf6ffffff00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:40 executing program 2: socket(0x24, 0x4000000, 0x0) 15:03:40 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x2) 15:03:52 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0, 0x0, 0x0) 15:03:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="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"]) dup3(r0, r1, 0x80000) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4) ftruncate(r0, 0x0) 15:03:52 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x3) 15:03:52 executing program 2: socket(0x24, 0x5000000, 0x0) 15:03:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1010c0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x4072, 0x0, 0xfffffffb, 0x9, 0x2}) fallocate(r0, 0x40, 0x0, 0x100) 15:03:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xfeffffff00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x10000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2010, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:52 executing program 2: socket(0x24, 0x6000000, 0x0) 15:03:52 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x4) 15:03:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x20000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:03:52 executing program 2: socket(0x24, 0x7000000, 0x0) 15:03:53 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) 15:03:53 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x5, 0x101, 0x4, 0x7f}) ftruncate(r0, 0x0) 15:03:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3f00, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:09 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 15:04:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xedc0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffff000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:09 executing program 2: socket(0x24, 0xa000000, 0x0) 15:04:09 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x5) 15:04:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x5, 0x200400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="020000000098085e91090044fd6f3000e6f4ada02df3320c1446730d7f15807a23e2ed7afa19290e0e61a479891dbda54e6611a5099e9cc4982c77a2f79d2ea4d1384e3621630000008000000000d2321102bb6b3557e761"]) ftruncate(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x600e40, 0x0) utimensat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={{}, {0x77359400}}, 0x0) openat(r3, &(0x7f0000000400)='./file0\x00', 0x181100, 0x10e) r4 = inotify_init1(0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000380)={0x5, 0x1, 0x7}) r5 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000c00), 0x1312) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)=""/191, 0xbf}], 0x2) fsetxattr$security_capability(r5, &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0xe, 0x64c8}]}, 0xc, 0x0) 15:04:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x20100000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:09 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x154, r0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa250}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcbe8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4080}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x40000, 0x41) fallocate(r1, 0x40, 0x0, 0x100) r4 = accept(r3, &(0x7f00000000c0)=@ieee802154={0x24, @long}, &(0x7f0000000180)=0x80) recvfrom$unix(r4, &(0x7f00000001c0)=""/208, 0xd0, 0x10040, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 15:04:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) openat(r1, &(0x7f00000000c0)='./file1\x00', 0xc000, 0x8) fallocate(r0, 0x40, 0x0, 0x100) 15:04:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3f000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:23 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x6) 15:04:23 executing program 2: socket(0x24, 0x80040000, 0x0) 15:04:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffffff7f00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x80000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:23 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0x0, 0x0) 15:04:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x20010, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/173, 0xad}, {&(0x7f0000000140)=""/115, 0x73}, {&(0x7f00000001c0)=""/110, 0x6e}], 0x3}, 0x0, 0x20, 0x1, {0x3}}, 0x9) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 15:04:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1072e2, 0x42) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x9}) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) fallocate(r0, 0x4e, 0x1f, 0x100) 15:04:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000380)={{'\x00', 0x3}, {0x80}, 0x40, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="4aa85b906f526bcb74e4d3a8ba5c99704f4e6a7c896329080bff4ead623eb6c206e8e1ce2a16fb2418e5a7ef29877d016fa9d8b4039eb3a15e4e06c928a1019646440554b9534372fa282a16913c576fed2cac4504bfece5b1b8b775c164656ce8a4e2fc17da9b078f0b19c47cf8e7c0816b199586467fe0", 0x78, 0x0, &(0x7f0000000180)={0x2, 0x106, {0x0, 0xc, 0x57, "bbd9a1287c39fb17451b996998b83e090aa4f76cc59772181a06a6be37356ad8a736c02ab0ef85d9a5431d9931c23ca1cfd13b58910ab5d4f9d8ff8e53183ff2cbd32325c60a4d2e0bf4c1f6db9aab4356dac20cbee98e", 0xa2, "6675a8861e8f0af832684b7c2febf8b2a4b11532ca3b9f4298df95c5ae7b9517c498c9dea3dddd707baf1174a1be0d3b5f6df53bb24902e9221d00af59d85debe7c8206b4689c482423a0e920b30866bb7e3e14cd10328b164639df5ce71a4586c2431228154e2102742f314db8e7b2df65f31c11409f7c77c3bf1a681ac855087409b3795a6bcd192cf1a273f1de9fbf3135c30fede210abb4eb58706b5765fa0bb"}, 0xbb, "bb1a278c92bab950b6ea04c15a0c0802b2a0a28acddc5c93b190e379c4a7b942e48164a83eb5fd5fd4bc193d048fbc6bda272624243f246cd5de99a7f5aabbab0aa2265a5c20b54d2aefdb4c36049a3601b1db60904b0000000000000080d6da401a8536f9674d0daf220423397ca38f9351ed68d6e377777fd9b86bbb94d5a53596ba638e6ab5e374852f948ea3c2b82c505347e3602a8062fed16b75a2bf7a1095540e8fbe89b3bd4409edf137732ad175759cb35e6d8fcb92df"}, 0x1cd}) ftruncate(r0, 0x0) 15:04:23 executing program 2: socket(0x24, 0x8cffffff, 0x0) 15:04:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8cffffff, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:23 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x7) 15:04:23 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, 0x0, 0x0, 0x0, 0x0) 15:04:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1647.191269] 9pnet: Insufficient options for proto=fd [ 1647.208062] 9pnet: Insufficient options for proto=fd 15:04:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) sync_file_range(r1, 0xffffffff80000001, 0x9, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 15:04:23 executing program 2: socket(0x24, 0xf0020000, 0x0) 15:04:37 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0) 15:04:37 executing program 2: socket(0x24, 0xfeffffff, 0x0) 15:04:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xc0ed0000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:37 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x8) 15:04:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x0, 0x3, 0x80000000}) fallocate(r0, 0x40, 0x0, 0x100) 15:04:37 executing program 7: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) r4 = socket$netlink(0x10, 0x3, 0x1a) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x67}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20018090}, 0x2909654a832cf9ce) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x85) copy_file_range(r5, &(0x7f0000000200)=0x95, r2, &(0x7f00000002c0)=0x3f, 0x1, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x24881006}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="ca650000", @ANYRES32, @ANYBLOB="000828bd7000ffdbdf0180000000000000007063690011000200303030303a30303a31302e300000000008000300030000002a0001007063690011000200303030303a30303a31302e30000000000800030000000000080001007063690011000200303030303a30303a31302e300000000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000006a68c42c6a5da931c7cc69676b49fcea13df83649be0c9b036360b30efc3709173e066b92af9025e0e29ab4d"], 0xd0}, 0x1, 0x0, 0x0, 0x20008885}, 0x24000000) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r6, 0x0) [ 1661.332282] 9pnet: Insufficient options for proto=fd 15:04:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) [ 1661.344807] 9pnet: Insufficient options for proto=fd 15:04:37 executing program 2: socket(0x24, 0xffffff8c, 0x0) 15:04:37 executing program 5: ioprio_get$pid(0x1, 0x0) fork() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6d2662, 0x181) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x6) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0x1, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x1, 0x1}, 0x1) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) r2 = io_uring_setup(0x68f, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0xffffff, 0x1, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)={0x0, 0x2c, 0x9}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)={0x4}) 15:04:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xf6ffffff, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:37 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x9) 15:04:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r1}}) 15:04:38 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) [ 1661.489089] 9pnet: Insufficient options for proto=fd [ 1661.500068] 9pnet: Insufficient options for proto=fd 15:04:38 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0xa) 15:04:38 executing program 2: socket(0x24, 0xfffffffe, 0x0) 15:04:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}}) 15:04:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x7000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1661.583349] 9pnet: Insufficient options for proto=fd [ 1661.587135] 9pnet: Insufficient options for proto=fd 15:04:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xfeffffff, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:50 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0xb) 15:04:50 executing program 2: socket(0x24, 0x100000000000000, 0x0) 15:04:50 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x1]}, 0x8) write$vga_arbiter(r1, &(0x7f00000000c0)=@unlock_all, 0xb) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:04:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xb1}}, './file0\x00'}) 15:04:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}}) 15:04:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x1000000020000000) r1 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x80800) r3 = fsmount(r0, 0x1, 0x7c) ioctl$KDSETLED(r3, 0x4b32, 0xffffffffffff3a07) preadv2(r1, &(0x7f0000001480)=[{&(0x7f0000001180)=""/74, 0x3e}, {&(0x7f0000000140)=""/4096, 0xffffffffffffff4e}, {&(0x7f00000015c0)=""/116, 0x5d}, {&(0x7f0000001140)=""/38, 0x30}, {&(0x7f0000001200)=""/138, 0x8a}, {&(0x7f00000012c0)=""/113, 0xe3}, {&(0x7f0000001340)=""/187, 0xbb}, {&(0x7f0000001400)=""/113, 0x71}], 0x4e, 0x8001, 0x8, 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r6], 0x38}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000001640)={'ip6tnl0\x00', &(0x7f0000001540)={'syztnl0\x00', r2, 0x2f, 0x4, 0x2b, 0x6, 0x5c, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x80, 0x7, 0xfffffffc}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001700)={'ip6gre0\x00', &(0x7f0000001680)={'syztnl1\x00', r2, 0x0, 0x0, 0x7f, 0x5, 0x36, @local, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8000, 0x80, 0x0, 0xfffffff7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f00000017c0)={'sit0\x00', &(0x7f0000001740)={'syztnl1\x00', r2, 0x0, 0x3, 0x0, 0x8001, 0x5, @remote, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x7800, 0xf583, 0x71}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001e00)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001800)={0x58c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x240, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0x5, 0x8, 0x527e171f}, {0x3ff, 0x80, 0x20, 0xf0}, {0x101, 0xfe, 0x4}, {0x7, 0x2, 0x10, 0x8}, {0x8, 0x2, 0x1, 0xe8}, {0x2, 0x5, 0x23, 0x5b5e}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x124}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r2}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4050) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r10, 0x4, 0x0) openat(r10, &(0x7f0000000100)='./file1\x00', 0x300, 0x100) 15:04:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffff0000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1674.378198] 9pnet: Insufficient options for proto=fd [ 1674.395864] 9pnet: Insufficient options for proto=fd 15:04:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x9000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:04:50 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7667615f6172626974657200202f6465762f72746330000aed845a18637817559e37f53e556039b8501e0a50be46b43d9463a5a8e1f59b6271db34b994c3ac8d6f4f7d14c6618af19c23225444c0fa83e3158a82cc64d284a0a0b2c9d1e575bdd588336b18805b452cbe01644136b38300000000"], 0x4d) 15:05:07 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/acpi', 0x8100, 0x15) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x81000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)) futex(&(0x7f0000000040)=0x5, 0xd, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)=0x2, 0x22) 15:05:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffffff7f, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x20800, 0x2) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) fallocate(r2, 0x3, 0x0, 0xfe) 15:05:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xa000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:07 executing program 7: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)={0x72, 0x0, 0x0, 0x0, 0x3}) ftruncate(0xffffffffffffffff, 0x0) 15:05:07 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0xc) 15:05:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22}) 15:05:07 executing program 2: socket(0x24, 0x200000000000000, 0x0) [ 1690.916719] 9pnet: Insufficient options for proto=fd [ 1690.924754] 9pnet: Insufficient options for proto=fd 15:05:07 executing program 2: socket(0x24, 0x300000000000000, 0x0) 15:05:07 executing program 7: rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8ee63, 0x1) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100, 0x20) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setpipe(r1, 0x407, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ftruncate(r2, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x106) 15:05:07 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0xd) 15:05:07 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x71e68b4, 0x200}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x40000003}, 0x0, 0x0, 0x0, 0x0) 15:05:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x2, 0xfff, 0x8}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x4, 0x200, 0xbca0, 0x87}) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000100), 0x2, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setpipe(r2, 0x407, 0x3) copy_file_range(r0, &(0x7f00000000c0)=0xd60, r1, 0x0, 0x7, 0x0) fallocate(r0, 0x40, 0x0, 0x100) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x5) 15:05:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xb000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffffff8c, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:07 executing program 2: socket(0x24, 0x400000000000000, 0x0) 15:05:07 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0xe) 15:05:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000080)={0x1, 0x8000}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_uring_setup(0xa96, &(0x7f0000000240)={0x0, 0x27fb, 0x20, 0x3, 0x1e7}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 15:05:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2}}) 15:05:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x10000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) openat(r1, &(0x7f0000000240)='./file0/file0\x00', 0x102, 0x80) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x1000) sendto$unix(r2, &(0x7f0000000140)="2ed75a2c5bd49d93daa6bcfb9a12b5d879e4c83f7c237eb10f05fa2127b035a90be90f0e88b48acaad7bf5c130dcd8111c90c496c35223b46c11aa24fb9379707e004fd5f1fb512410e35d9922aa8b2b05e565", 0x53, 0x10, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 15:05:23 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0xf) 15:05:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xfffffff6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:23 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = accept$inet6(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x1c) recvfrom$inet6(r1, &(0x7f0000000480)=""/36, 0x24, 0x0, &(0x7f00000004c0)={0xa, 0x4e22, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc643}, 0x1c) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000100)=0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) sendmsg$inet6(r3, &(0x7f0000000280)={&(0x7f0000000140)={0xa, 0x4e22, 0x553, @loopback, 0x10001}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000300)="4e92e47124ba92aafdce959739c3b4afd3fc4a14bb6f74ba423fed2b2bcbc2d8bb6dfe7eb4b24b4c64b7d18546ab831edd6276abc4ac925d0013deb31600674cd09ff8949039745161811ff49bbabb05590a7966c09d5dcf7f720018eb11508a349d2d58bd8d2a3f6be079461dbaa30adf53ba34f78e61d4c8decbeef3cf95f52a45de89383fc065bf5a745748b5e54f5f884339118ee66441e8ca9032ac8915c051b6ee1da8b6f536b6d5cc2d6b4d33b249ab3fb649b553f81df1be3dc703dc97be36a3ae3754f580ad61111b6778e9f64e96d254258d", 0xd7}, {&(0x7f0000000200)="83a9d47334a6c0f5b5d35329fe", 0xd}], 0x2, &(0x7f0000000400)=[@hoplimit={{0x14, 0x29, 0x34, 0xb7}}, @hopopts={{0x20, 0x29, 0x36, {0x2f, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x88, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0xffff}]}}}], 0x58}, 0x4000000) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:05:23 executing program 2: socket(0x24, 0x500000000000000, 0x0) 15:05:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x6, 0x0, 0x80000}) fallocate(r0, 0x40, 0x0, 0x100) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000480)={0x2, 0x0, @start={r1, 0x0, "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", "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"}, [0x7fff, 0x6, 0x3, 0x9, 0x4, 0x7, 0x7, 0x7ff, 0x80000001, 0x5, 0x2ef, 0x380000000000000, 0x5, 0x3, 0x8001, 0x1, 0x81, 0x66ee5d5d, 0x171, 0x3, 0x61d7, 0x0, 0x4, 0x2, 0x7fff, 0x81, 0xfff, 0x1, 0x100000000, 0x400, 0x4b84, 0x81, 0xdbc9, 0x2e6c, 0x7, 0xffffffffffffffcb, 0xffffffffffffff54, 0x4, 0x200, 0x2, 0x1, 0x7, 0x7, 0x10000, 0x5, 0x5, 0x20, 0x3, 0x6, 0x4, 0x32, 0x1, 0x9, 0x3, 0x5, 0x7daa5c4e, 0x8, 0x8, 0x9, 0xfffffffffffffff9, 0x9, 0x9617, 0x6, 0x2]}) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) fallocate(r2, 0xaa, 0xfffffffffffffbff, 0x9) 15:05:23 executing program 2: socket(0x24, 0x600000000000000, 0x0) 15:05:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x3}}) 15:05:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x20000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xfffffffe, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:23 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x10) 15:05:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 15:05:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x402040) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000002180), 0x14800, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000021c0)={{{@in=@empty, @in6=@mcast1, 0x4e24, 0x8001, 0x4e23, 0x0, 0x2, 0xa0, 0x20, 0x0, 0x0, 0xee00}, {0x1, 0x6, 0x3, 0x23, 0x9, 0x8, 0x224, 0x7}, {0x5, 0x81, 0xfffffffffffffffc, 0x5}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x4d4, 0x2b}, 0x0, @in=@multicast1, 0x34ff, 0x3, 0x2, 0x80, 0x43a5, 0x5, 0x7fff}}, 0xe8) fallocate(r1, 0x0, 0xc7880000004, 0x800000000000104) preadv(r1, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/125, 0x7d}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x3, 0x7fffffff, 0x2) 15:05:23 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = signalfd4(r0, &(0x7f0000000140)={[0x200]}, 0x8, 0x80800) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) r4 = syz_open_dev$usbmon(&(0x7f0000000200), 0x1, 0x105081) r5 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000c00), 0x1312) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r1, r1, r2, r3, r1, r4, r5], 0x7) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r6, 0x5380) r7 = io_uring_setup(0x6b98, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000c00), 0x1312) signalfd(r7, &(0x7f00000001c0)={[0x1000000]}, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) ioctl$FIOCLEX(r8, 0x5451) 15:05:23 executing program 2: socket(0x24, 0x700000000000000, 0x0) 15:05:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x7}}) 15:05:23 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x182) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ftruncate(r0, 0x0) 15:05:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xedc000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:38 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/psmouse', 0x200000, 0x10) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) close_range(r1, r2, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000300)={0x0, 0xfffffffffffffffe, 0x0, [0x0, 0x1, 0x2, 0x7, 0x80000001], [0x3a54, 0x7fff, 0x3, 0x8, 0x0, 0x1ff, 0x800000000000, 0xc4, 0x3, 0x2, 0x9, 0x8, 0x10001, 0x9, 0x0, 0x35cf, 0x6e79, 0x9, 0x1ff, 0xb8e, 0x1, 0x7e, 0x6, 0xfe1, 0xe256, 0x4, 0x1ff, 0x510, 0x4d8d, 0x5, 0x4, 0x7, 0x4, 0x7, 0x1, 0x1b4, 0xfffffffffffffffd, 0x5, 0x72, 0x100, 0x20, 0x9, 0xe7f, 0x40, 0x0, 0x400, 0xd1, 0x3, 0x3, 0xa3d1, 0x8000000000000000, 0x2, 0x3, 0xb354, 0x8, 0x2f81, 0x80000001, 0xfa, 0x51d90fb8, 0x1f, 0x100000001, 0xfffffffe, 0x9, 0xffffffffffffff22, 0x7fff, 0x10001, 0x69ec, 0x2, 0x5, 0xfff, 0xfffffffffffffffd, 0x0, 0x400000, 0x9, 0xfffffffffffffeff, 0x3, 0xb8, 0x9, 0x6, 0x8, 0x7, 0x8, 0x7, 0x100000001, 0x800, 0x9, 0x6, 0x200, 0x8, 0x9, 0x81, 0x7f, 0x1, 0x6, 0x4c338b2e, 0x9, 0x1, 0x9, 0xffff, 0x0, 0x6, 0xfffffffffffff126, 0x0, 0x3ad, 0x2, 0x7fff, 0x8001, 0x1, 0x2, 0x0, 0x20, 0x1, 0x92, 0x0, 0x4, 0x3, 0x800, 0x40, 0x7, 0x1ed, 0x4]}) rt_sigpending(&(0x7f0000000000), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x563300, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x4a3a, &(0x7f0000000100)={0x0, 0x5230, 0x2, 0x2, 0xa2, 0x0, r0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) 15:05:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x20100000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:38 executing program 2: socket(0x24, 0xa00000000000000, 0x0) 15:05:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in=@private}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) geteuid() fsetxattr$security_capability(r1, &(0x7f00000000c0), &(0x7f0000000280)=@v2={0x2000000, [{0x1008c, 0x7d}, {0xffff0001, 0xfffffc00}]}, 0x14, 0x2) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) fallocate(r2, 0x40, 0xea1, 0x4) r3 = io_uring_setup(0x917, &(0x7f0000000140)={0x0, 0x7fc, 0x10, 0x1, 0x6}) syz_io_uring_setup(0x7da7, &(0x7f00000003c0)={0x0, 0x3ec0, 0x4, 0x3, 0x18f, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000440)) 15:05:38 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x11) 15:05:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x8}}) 15:05:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x20800, 0x2) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) fallocate(r2, 0x3, 0x0, 0xfe) 15:05:52 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x600181, 0x80) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0xb05e4000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) 15:05:52 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xd3d, 0x30901) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1220084}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x50}}, 0x20000004) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r2, 0x40, 0x0, 0xfd) umount2(&(0x7f0000000280)='./file0\x00', 0x4) 15:05:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x9}}) 15:05:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3f000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x20800, 0x2) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) fallocate(r2, 0x3, 0x0, 0xfe) 15:05:52 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x12) 15:05:52 executing program 2: socket(0x24, 0x8004000000000000, 0x0) 15:05:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xa}}) 15:05:52 executing program 2: socket(0x24, 0x8cffffff00000000, 0x0) 15:05:52 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x13) 15:05:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x100000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8cffffff, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:52 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:05:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x20800, 0x2) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) fallocate(r2, 0x3, 0x0, 0xfe) 15:05:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x7fffffff) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) 15:05:52 executing program 2: socket(0x24, 0xf002000000000000, 0x0) 15:05:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x200000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:52 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x23, 0x26a}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) fallocate(r0, 0x1, 0x1f, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000340)=0x8) pselect6(0x40, &(0x7f0000000300)={0x200, 0x5, 0x3, 0xfffffffffffffffa, 0x100000001, 0x100, 0xac3, 0x3}, &(0x7f00000000c0)={0x8000, 0x6, 0xfd6a, 0x7, 0x0, 0x8, 0x5, 0x5}, &(0x7f0000000100)={0x7fffffff, 0x8, 0x80000000, 0x1f, 0x41d8, 0x78, 0xf800000000000000, 0x1000}, &(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0xfff]}, 0x8}) 15:05:53 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x14) 15:05:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xb}}) 15:05:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xc0ed0000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:05:53 executing program 5: epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x7fff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) 15:05:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x10}}) 15:05:53 executing program 2: socket(0x24, 0xfeffffff00000000, 0x0) 15:06:11 executing program 2: socket(0x24, 0x0, 0x0) 15:06:11 executing program 5: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(0xffffffffffffffff, 0x40, 0x0, 0x100) 15:06:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x20800, 0x2) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) 15:06:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 15:06:11 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x15) 15:06:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x300000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xf6ffffff, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:11 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/selinux', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) 15:06:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xfeffffff, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:11 executing program 3: stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r0, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) stat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r1, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r3 = semget$private(0x0, 0x2, 0x0) semctl$IPC_RMID(r3, 0x0, 0xb) semctl$IPC_RMID(r3, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010006000000000002000700", @ANYRES32=r0, @ANYBLOB="02000100", @ANYRES32=r1, @ANYBLOB="040004000000000008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="4b3a23d48b1050c02d14a12e49b33768dee0222200000000000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="10000200000000002000040000000000"], 0x5c, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/drm_kms_helper', 0x400840, 0x14) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) semctl$SEM_STAT_ANY(r3, 0x3, 0x14, &(0x7f0000000000)=""/39) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x571100, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r4, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) 15:06:11 executing program 2: socket(0x24, 0x0, 0x2) 15:06:26 executing program 2: socket(0x24, 0x0, 0x3) 15:06:26 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000b00), 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)="7555eee10cadb3d2b2db1d8439ce2cbb58b186aa06bfc3a5bbeb6316559b9f98b8e2eb78b74321cb8e84fb8451880129bd8115e5d81ae97f63972fb0089207deba6cc0623763e71cdd53b0ead6c5884100ab364ae1ba88466746b7b777639b326c7a36e3801831a05b78d91480d6b3d0502be2533b80d015af72396bb71035b781b0c6591668957203a144b617328d20593e7bc83a72df4fa28f700d243325841bb371e844341b59490c58b508e8abdbdc71567905588dabf4e4c01dcc092d07dc7d6dab29fa98e307256f77a70981cfaf45372f5ffa371a3160500561c0ae92264e4babb2d2ff6dd8ce128bf6e174aa", 0xf0}, {&(0x7f00000000c0)="477e7412e480cce05b67dd3eb4177daa9f062034757d9e9ba10d9f6cd312be36d3bcd5817f1d66ea101e868760992c4afb9cd179131d6a6df5739bed597032887fc2f39b91323e11e60bc878a755c736a868397d25793e6308b6194c2be35081660e8cc278d2ee8cc6d85df477b0fd58e6224efe45db766300cad12c53dde18b09674facca0df174c6e929db5546134790b0d4c089d7d0e5", 0x98}, {&(0x7f0000000200)="2f7b5c1355bd9a9b436abbf222086ad32e631ebfeae9a98ff7436f6ff98875e69f52152b", 0x24}, {&(0x7f0000000400)="66d788745d06e8e1f4bf6a22f7585e5af8e752882330498c037fba3f1291503d245dacd5747fa433f1ffa86a49973537cc7ac1e4a97966eac0ad90d18d2f7d7b30675df332a5e6fbeb09e664e3abfe30e0b31be750c1d419755b9e95290d682c327e2bacffe9d5c5e22a7d23d3eb4a753edccda92e99a53f6839bfc8770c6d1d2f9af09f73b0a8c9eb78357af29db9c2965a2817f04f6d654a946b2e1b", 0x9d}], 0x4, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}], 0x30}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000500)="e6f3ba303f8db99b6a69e535c959424d891b3b4f0875c54eea5399d65cf920aa995324200681ee6f8003eae81d758d2081b820bd6bdcf8cdf3152f0e5509cba332d65e89272771ec11190bcc4b0f1660cf0733014e7187be94c40f95044a94de2b0d97c4c18ee759c2bb016a056ca7b9d296604e1a2b97d7c01258e6e511d2a8171b1d5154b69e9a1044c843437573b2968ab0694be8aecfa6c7e657bb5cb157bd8ca7ffa86e", 0xa6}, {&(0x7f00000005c0)="7d381c02d43663c51686511b7690df46b2d9c25b024b45ac590d2efa33fb66edfa600d1423bf401d9d72bfb1ffa68a3e952aa2133a1b2ed47adaf4f74cb64aa3fface9d9ba6c9b", 0x47}, {&(0x7f0000000640)="4e82e5eaa5f9fa1c80b6a5ee6495407cdb3d00914c1c65b2797432442f20f910249d35005488c3d917be491b36e81a4e7961ee818dc792a9600d04625927bfcd62840f3807bcace63b6a838319e2f98a0f4a32b555c26bc62c673b2c19a277b2d5ed27f2421865f7ec585576650c9a142475145bb19aea0b23dc95fb699fb4e568aa9f070c893e1714c0c20643fc3d52537022966b05233017d1cebb619f5a8b8d4adc2c85396359f4d98b13d98a1ffe0e7034c9a28e10e9ddb019b7a93e0f14cb30f1fb915d01bc4bad53115bc072ebfad1c0a982deee1c225a903a17bf6e3db7a8611ebb137dcced3c929eefa77b90a56598fa929324fa", 0xf8}, {&(0x7f0000000740)="6afce1ef622bb6cb652ca64294d5f641e7", 0x11}, {&(0x7f0000000780)="bcf83758aaccd0761ef06c011b2c4062eaab74e33ff986db2d2986e25073c9119884d546ffeccdbd", 0x28}, {&(0x7f00000007c0)="780bb29111313ec9ce54cb2232c1c4c688cdfcd4d8a6103f8a9c5f107f2cb86df8974579574d7a820fc7ba6e0f94fdd3c5e2130d5da7f162a6c25dacfd9bc1469ba2ff8047ea1d9a3a63460433c0671dfd4095bcc3d4ece9980f880f7326358a4de387fb1dfabe3069ef8981353185219d72ed38fde4b2b4bbc93e9e452fa503f0ebe3e1bd204c7ff8f25e669da6ee2744f8e2b7d6d4d659174abd4c5e6cc2b7550ce4f220c005266898699437d501342c385133", 0xb4}, {&(0x7f0000000880)="6e46fb2e00dcc10f62b044357957e5dc8e1367a15a797cb66aff68278888ef0a9945a9aca9de5e97aa2da4acb59f7ad86fc837f07ea93879f2b846c7854e91e5de704a2cf4e7e9424c45226d103cd04a837cd13d82f75f5106d0a6e02c6b06298a8019f8cbcf1b9a7f3323cb0bcd2629f52a3096592dffe35d5c5d2c86f6328a7a145ce31f2089093017f5020c1d824527", 0x91}], 0x7, &(0x7f00000009c0)=ANY=[@ANYBLOB="8400000000000000000000000700000000004414d25000003167ffffffff00000005000000050712f4476199c14eb71465ead2d2d9a7fde144245c517f000001000000eaac1414aa00000e5f0a010100000000ff0f000000000000ff01018624ffffffff02077865551058021021a8a7379d531ffb95d706ae662a01079a4b99184b00000000d081"], 0x88}}], 0x2, 0x80) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:06:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x700000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x4000, 0x100) openat(r2, &(0x7f0000000100)='./file1\x00', 0x301000, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:26 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x16) 15:06:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x20800, 0x2) io_uring_setup(0x396d, &(0x7f00000001c0)) 15:06:26 executing program 5: setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@local, @in6=@rand_addr=' \x01\x00', 0x4e21, 0xfff9, 0x4e22, 0x1f, 0x2, 0x0, 0xa0, 0x153, 0x0, 0xee00}, {0xef2, 0x6, 0x7f, 0x2, 0x1000, 0x5}, {0x100, 0xfff, 0x6, 0x8}, 0x8001, 0x6e6bb2, 0x2, 0x0, 0x3, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0xa, @in=@multicast2, 0x0, 0x4, 0x0, 0x20, 0x5096, 0x4, 0x20}}, 0xe8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x3}}, './file1\x00'}) fallocate(r0, 0x40, 0x0, 0x100) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x8000) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r4, 0x4, 0x0) openat(r4, &(0x7f0000000380)='./file0\x00', 0x100c0, 0x3) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) lseek(r5, 0x4, 0x0) inotify_add_watch(r5, &(0x7f00000003c0)='./file0\x00', 0x400) getsockname$unix(r3, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004000) 15:06:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffff0000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x20800, 0x2) 15:06:26 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x17) 15:06:26 executing program 2: socket(0x24, 0x0, 0x4) 15:06:26 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@fowner_gt={'fowner>', r2}}, {@subj_user={'subj_user', 0x3d, 'trans=fd,'}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '!'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) creat(&(0x7f00000000c0)='./file1\x00', 0x40) 15:06:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffffff7f, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:26 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sync_file_range(r0, 0x401, 0xfffffffffffffd09, 0x7) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:06:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x40) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x402400, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)={0x0, 0x2e2c}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') pread64(r4, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, &(0x7f0000000180)=0x400000000, 0xc681, 0x0) fallocate(r0, 0x40, 0x0, 0x100) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) lseek(r5, 0x4, 0x0) fcntl$addseals(r0, 0x409, 0x5) bind$unix(r5, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000280)={0x2, 0x18, [0xb07, 0x4, 0x6, 0x855], &(0x7f0000000240)=[0x0, 0x0, 0x0]}) [ 1770.219925] audit: type=1326 audit(1768921586.774:36): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9865 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6a304b19 code=0x7ffc0000 [ 1770.228937] audit: type=1326 audit(1768921586.783:37): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9865 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca6a304b19 code=0x7ffc0000 [ 1770.238010] audit: type=1326 audit(1768921586.788:38): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9865 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6a304b19 code=0x7ffc0000 [ 1770.249101] audit: type=1326 audit(1768921586.790:39): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9865 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca6a304b19 code=0x7ffc0000 [ 1770.256127] audit: type=1326 audit(1768921586.808:40): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9865 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6a304b19 code=0x7ffc0000 [ 1770.261587] audit: type=1326 audit(1768921586.808:41): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9865 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6a304b19 code=0x7ffc0000 [ 1770.267944] audit: type=1326 audit(1768921586.810:42): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9865 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6a304b19 code=0x7ffc0000 [ 1770.274458] audit: type=1326 audit(1768921586.810:43): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9865 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6a304b19 code=0x7ffc0000 [ 1770.279175] audit: type=1326 audit(1768921586.815:44): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9865 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fca6a304b19 code=0x7ffc0000 [ 1770.284994] audit: type=1326 audit(1768921586.815:45): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9865 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6a304b19 code=0x7ffc0000 15:06:39 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x18) 15:06:39 executing program 2: socket(0x24, 0x0, 0x5) 15:06:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xae6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x10000, 0x0, 0xfff7fffc, 0x1, 0x8}) 15:06:39 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x1, 0x40010, 0xffffffffffffffff, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x23, r3}}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000005c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r1, 0x1, 0x0, 0x7, 0x0, 0x1, {0x0, r3}}, 0x3f) r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x5, 0x3, {0x0, r0}, 0xfffff5ec, 0x0, 0x1, {0x0, r3, r4}}, 0x0) 15:06:39 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) r2 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1, 0x5, &(0x7f0000000380)=[{&(0x7f0000000180)="39fd07a46af0316d3033799bdcbfd3871438dae56aea0e70f7d0bf5fb278a269148397139dab0578d1267eba2159c93ed45a2d0907c500e06e15842ad200c133c902e76c493c3eb0f48a9fec52c007764d6413912717db6760c37bc66600031a7fa3281d", 0x64}, {&(0x7f0000000200), 0x0, 0x1}, {&(0x7f0000000240)="df5232f7402c734d44af147d86e5464a129b92c43e2c5f0f1c195d48fc0b5a8441f8d55fef2b176b", 0x28, 0x9}, {&(0x7f0000000300)="8b56959f9a69b14774df6705da505d984c6a5b881a73b68ada751cf1355c4f249d950b959152659054a907368bd8d8caefb595da1d58b67b5dd6f5834f4b027fed2acfe9fb30a82135ea7b3af415737a7f47c090f461090a4171f3e12536bf0288821b914e", 0x65, 0x1}, {&(0x7f0000000280)="31029ebff03e7b83b95aa15bdb2062c793656be6e9c43b95c526bb02c570a2deaa54a7d323d650e386f7d671", 0x2c}], 0x1118000, &(0x7f00000004c0)={[{}, {'9p\x00'}, {'trans=fd,'}], [{@subj_role={'subj_role', 0x3d, '\'-\xe7.{\\-\x00'}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x39, 0x38, 0x33, 0x38, 0x31, 0x38, 0x65], 0x2d, [0x35, 0x63, 0x36, 0x36], 0x2d, [0x39, 0x3708891042627261, 0x31, 0x36], 0x2d, [0x61, 0x35, 0x38, 0xc6a8cab5da45d73d], 0x2d, [0x39, 0x36, 0x62, 0x38, 0x39, 0x35, 0x62, 0x37]}}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, '*\xf7\xe5+}'}}, {@fsname={'fsname', 0x3d, '\xd8n\xa1\xaf\xdc\xae\x82\x81\xa4\x8d\xa1\r^\x90?\x15j\xefw\x80\n\x99\xb6d\x96\f|\x12\x1f\xcc\x04\x97z+\xa1{\xef\xa7_\x97\xcc\xeft{\xbd\xecW\xcd\xb0\nD\xf1\x94\xd8\xb5w\xb7\xea/\xd1\xfe\x1al1\r\xc6\xee\x94K)j\xffZ\xdf\a\xdf\xe2c\xafJ\xb9\xba\xb1\x7f\x05\xe1\xbd\xb7c\xf1 `\xccw\x06\x00\x00\x00{\xd5F\xb3\x80\x7f\xa6\x1d*\x82\x97\xb7\xdd\x98\xdf\xf3\x95J\x8a=\x03\xa5\x19\xb1'}}]}) r3 = openat(r2, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 15:06:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffffff8c, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x900000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) [ 1782.784918] 9pnet: Insufficient options for proto=fd 15:06:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:06:39 executing program 2: socket(0x24, 0x0, 0x6) 15:06:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xfffffff6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xa00000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:39 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x19) 15:06:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') r2 = epoll_create1(0x0) r3 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0x50000006}) r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c00), 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x2000200d}) signalfd(r1, &(0x7f00000000c0)={[0x706]}, 0x8) 15:06:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGDEV(r0, 0x5424, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x4, 0x20000000000000, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) 15:06:39 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105543, 0x0) socket$unix(0x1, 0x3, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x2) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x348, 0x1d, 0x400, 0x70bd29, 0x25dfdbfe, {0x9}, [@typed={0x8, 0x2d, 0x0, 0x0, @u32=0x400}, @typed={0x5, 0x1a, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x91, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x137, 0x93, 0x0, 0x1, [@generic="75bce3731e0995b28388e694941c25f4fcdb47ffc742b147463d34899ea55d80574ac5b852b32af1307015be1d94de850a61aadc02f9", @generic="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"]}, @nested={0x1db, 0x48, 0x0, 0x1, [@generic="13f558c4ae9391e2c32d24d4e7286f3126d78d155675af3cc7e2154ad1da07bea83721461d1fd5046019e9a8234bb93a4d814b0c42ee4f8bed378777152552a5954bd229eaa2ddd328a5fe203411b35138f356d31191119686c8cc0bc23567ef5df0f14214ef4ccf3deed2d8b2dcb23acdf902df869b93afaea405ea441a747e87b41b04ccfe1cce88f85d79223a8ffd90e77a752a3ced7fc353a333e3dfb9740976379f9e2c84270f79a9b5792ef8ce2faf176b794e1c55efea1988981d16663b961344861e83ce9213f1af4c1262227e680c540450cc65033c9576103e21e6158388fac8f1db26d48505bea969064029f1971825289bd4", @generic="52726012c8f94c34e8e35587178d5a7ddcc52704ef86aa5cee68ead162fb19639991cb9b8d3bbc89109e3d0a4459ecd6122618dacf005a7e688451a873a9bd9a40f2e8030ced77737c7c57ac6c20ccbc92d8bf02559f097bd05a56d7c086c434fbb034e046fa538a3fb7e87498ef95a795fd2d4d8329a2ca82bce24cfe6a9366dd41d9a73d92fcaeb7cdaf3040ef603f49a698027e5cb66f28bf331bc57da5caddb640cde06b58a27863f16f83a59b4fe01c75eef72b9ba9cd14c2e47494b6235d88bcbc814060a412a1292074e1ecb94f56d20a9c38d7fc659844c79000bd"]}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r0}]}, 0x348}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) fcntl$setlease(r1, 0x400, 0x1) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)={0x0, 0x10, 0x0, 0x0, 0x2}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x262080, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB='(\x00']) 15:06:39 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:06:39 executing program 2: socket(0x24, 0x0, 0x7) 15:06:52 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1a) 15:06:53 executing program 6: r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 15:06:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xfffffffe, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 15:06:53 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat(r0, &(0x7f0000000040)='./file0\x00', 0x20000, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = signalfd4(r1, &(0x7f00000000c0)={[0x40]}, 0x8, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r6], 0x38}}], 0x1, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) 15:06:53 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:06:53 executing program 2: socket(0x24, 0x0, 0xa) 15:06:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xb00000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:53 executing program 2: socket(0x24, 0x0, 0x2f0) 15:06:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1000000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:53 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1b) 15:06:53 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:06:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) fallocate(r0, 0x40, 0x0, 0x100) 15:06:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xedc000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:06:53 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) r2 = pidfd_getfd(r0, r1, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80080200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fddbdf3301000000080003f3010000000400018008000300000000001d00020007000000ff7f00001400040000000000000000000401ffffac1e00010600010002000000"], 0x50}}, 0x4809) 15:06:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000040)=""/56, &(0x7f00000000c0)=0x38) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x40000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@posixacl}, {@access_user}, {@loose}, {@noextend}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@context={'context', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@hash}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) 15:07:07 executing program 2: socket(0x24, 0x0, 0x300) 15:07:07 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) dup2(r1, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB="2c7766646e6f3da085136b65260980d8b4f76bc2dd6451ea3b5329cc4696bb670573c93a9a760d87c304a422a663f99c7f8ad490324684383c28b6be9d97aa62d92a9303a55f9da66e2517da34604b1871cad5dd", @ANYRES64, @ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB="2c61cb7aaf0f944da35506e9543ee3ff756469742c726c6f74636f4e746578752c0000000000000000"]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x2, 0x0, 0x0, r2, 0x0, 0x19, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) r4 = semget(0x0, 0x0, 0x180) semctl$SEM_INFO(r4, 0x2, 0x13, &(0x7f0000000480)=""/245) semctl$IPC_RMID(0x0, 0x0, 0x0) semget(0x2, 0x0, 0x186) getuid() stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x3, 0x0, 0x0, r5, r3, 0x21}, 0x100, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x7}) stat(&(0x7f0000000340)='./file0/file0/file0\x00', &(0x7f0000000380)) 15:07:07 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) ioctl$CDROMREADTOCENTRY(r0, 0x5306, &(0x7f0000000100)={0x4, 0xe, 0xe, 0x2, @lba=0x2, 0x4}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 15:07:07 executing program 7: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:07:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2000000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:07 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1c) 15:07:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x400000, 0x100) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0xfffffffd, 0xfffffffd}) fallocate(r0, 0x40, 0x0, 0x100) 15:07:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:07 executing program 7: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:07:07 executing program 2: socket(0x24, 0x0, 0x480) 15:07:07 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1d) 15:07:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2010000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:07 executing program 6: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) io_pgetevents(0x0, 0xc, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1]}, 0x8}) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r2, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x7fff) r4 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYRES32=r4]) 15:07:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) signalfd(r0, &(0x7f0000000080)={[0x4de5]}, 0x8) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72, 0x10000000}) fallocate(r0, 0x40, 0x0, 0x100) 15:07:07 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = io_uring_setup(0xeab, &(0x7f0000000140)) r2 = openat$cgroup_ro(r0, &(0x7f0000000240)='freezer.state\x00', 0x0, 0x0) getpeername$unix(r2, &(0x7f0000000280), &(0x7f0000000300)=0x6e) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001400)=[{0x0}], 0x1d00) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040)=0x8, 0x4) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:07:21 executing program 7: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:07:21 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1e) 15:07:21 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200800, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) r1 = io_uring_setup(0xfa7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESOCT]) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000380)=[{&(0x7f0000001400)=""/174, 0x9e61d8ceb85a4951}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/65}], 0x2) fdatasync(r3) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, r2, r0, 0xffffffffffffffff, r2, r3]}, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000c00), 0x1312) io_uring_setup(0x6, &(0x7f00000014c0)={0x0, 0x4015, 0x20, 0x3, 0x5a}) sendfile(r4, r5, &(0x7f0000000100)=0x7, 0x1000000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:07:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200400, 0x2) fcntl$dupfd(r1, 0x0, r2) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000100)) fallocate(r0, 0x40, 0x0, 0x100) 15:07:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3f00000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x100000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) io_setup(0x6, &(0x7f0000000440)=0x0) r3 = accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x1800) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000140)={0x6, 0x6, 0x101}) io_submit(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:21 executing program 2: socket(0x24, 0x0, 0x500) 15:07:21 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x21) 15:07:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r0 = creat(&(0x7f0000000000)='./file1\x00', 0x4) r1 = socket$unix(0x1, 0x3, 0x0) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) r3 = io_uring_setup(0x6fe3, &(0x7f00000001c0)={0x0, 0x1ded, 0x0, 0xffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r1, 0x0, 0x3f, 0xb3d}) r5 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x6, 0x3, &(0x7f0000000240)=[{&(0x7f0000001440)="69c099d9863900b55d59ed5b2ece4d87636ff78932846f95ee6536179baaf176b67b2a969cc2cf4a729284e4e04fb5481890c9374c3fe22542adc9e8881003a3deef5e95a4e6569f41bc5393531163703b01764fdf4f61975bf2e58ba9af65322e91169cca3ed5060380091632d314c70fe4dd4a245ba3d5ecbd1de85436fa61b871329f8652b5760f786db4a801ea08809b896a8d15a446ebc1cc26de9476716f0ec654ffe57fccdeab439a202be4c70c6bc077ca18e0d6d2eaeb3a225acc5b1be9ca2f3a", 0xc5, 0xfffffffffffffffd}, {&(0x7f0000000180)="40b4b5aebe089a25204c0a0c0fa8cacf", 0x10, 0x8}, {&(0x7f0000001540)="ce9b411faa66098c5d74f8848324c7f81c8d5ab83875873df55e7e3dbd3750d25fcb6957428c37fc45335e17d75277d9b9fde21a12ebad23ccfa4c51f7fd742874a2fd72127a3c5d885c40653e0edac0bc4f51ccd564e7e1b5ca7fea4c19f49e6732d734cde8b90100db8854f23cbfb1a6ec2679cdb794d5e82cd3af5ed74fa59a4b3211c162500ab36a8cf1c3939a53ea42", 0x92}], 0x10, &(0x7f0000001600)={[{'\x00'}, {'\x00'}, {}], [{@euid_gt}, {@subj_user={'subj_user', 0x3d, '9p\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) r6 = geteuid() fstat(r2, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000001680)='./file1\x00', &(0x7f00000016c0)='system.posix_acl_default\x00', &(0x7f0000001780)={{}, {0x1, 0x9}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x1, r6}], {0x4, 0x1}, [{0x8, 0x5, r7}], {}, {0x20, 0x4}}, 0x3c, 0x1) sendfile(r4, r5, &(0x7f0000001640)=0x9, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) pread64(r1, &(0x7f0000000440)=""/4096, 0x1000, 0x7fff) r8 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000c00), 0x1312) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x810c20, &(0x7f00000017c0)=ANY=[@ANYRESOCT=r8, @ANYRES16=r2, @ANYBLOB="4e2f4b6ce3af29075d2427c1dd8b9065083d4d77b6ec760b46f408713812eec54323c8eb62b0635794d9af906fdb27f94f04a9dbda04adfc9fc2268f6cab0dc9f706e952500000a8f5e14c8f622fccdc45b034e1cec824310c7bd380436a6c156bd2defb39a05b539c92a39e61c50afc5cfca528d2602a682514e1c227cca6d1e75701a09275b98219dc011c31820029ce691d6af1bad4736c7f26e7a110a58f64bbb8a3ce618c937c125f2e5c1c638b94bbf705210446aeaaa5bb093e4054a8149aa8c03ab7c9a1f2158c1645eaa7a183d2bb13c2a335b4361e5661812a0ae121", @ANYRESOCT=r2]) 15:07:21 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:07:21 executing program 2: socket(0x24, 0x0, 0x600) 15:07:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x200000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8cffffff00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) lseek(r1, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) signalfd(r2, &(0x7f00000000c0)={[0x2a]}, 0x8) fallocate(r2, 0x41, 0x0, 0xffffffffffefffff) [ 1825.133740] loop6: detected capacity change from 0 to 8388096 [ 1825.174730] loop6: detected capacity change from 0 to 8388096 15:07:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x466602, 0xb8) fallocate(r0, 0x40, 0x0, 0x100) 15:07:33 executing program 6: ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0xf2b, 0x80000001}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:33 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:07:33 executing program 2: socket(0x24, 0x0, 0x700) 15:07:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x300000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:33 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x22) 15:07:33 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:07:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xf6ffffff00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:34 executing program 2: socket(0x24, 0x0, 0xa00) 15:07:34 executing program 5: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="1b040800000000002e2f22dd8ed9220fda4c5714000000000000000000000004bd99aab7b5a6de0ed88453756a6201259da4bc92e504cb44d0a3290c06008151b09769dcbc9f5712a6f5832d1b08cf3411d14bf0e302330b835e9bc2a2fe34f1ce9538fe449c8c2c72655b8858725808fbfb6bb72d0332c546af1c49342671a446e41b3da7a404fee0c660125e556b45043a73a3ced40101bf57e05068bdb83490ed5103"]) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) syz_io_uring_setup(0x6415, &(0x7f0000000440)={0x0, 0x9496, 0x10, 0x0, 0x3bd, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002ec0)=[{{&(0x7f0000000540), 0x6e, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/187, 0xbb}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/153, 0x99}, {&(0x7f0000000880)=""/40, 0x28}, {&(0x7f00000008c0)=""/139, 0x8b}], 0x3}}, {{&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000a40)=""/4, 0x4}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/201, 0xc9}], 0x3, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/26, 0x1a}, {&(0x7f0000002dc0)=""/41, 0x29}], 0x3, &(0x7f0000002e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x4, 0x10000, 0x0) r3 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000002fc0), 0x80000) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000003000)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0/file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x1, 0x1ff, 0x1, 0x3, 0x2}) r4 = openat(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)={0x72}) open(&(0x7f0000000080)='./file0\x00', 0x400, 0x92) r5 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0/file0\x00', 0x6, 0x1, &(0x7f0000000300)=[{&(0x7f0000000180)="af09bb0692c5fb15453e755f60ae986f6b3dbc6794ba8e9e4bfcbd2e71249036b355d1cc1dd2dcd6ad133305d16d0b7d37f1f5591878d870", 0x38, 0x32}], 0x10010, &(0x7f0000000340)={[{@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '{\xd9-('}}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0xdbf}}, {@obj_user={'obj_user', 0x3d, '!.'}}, {@obj_type={'obj_type', 0x3d, '\')!*[&'}}, {@smackfsdef={'smackfsdef', 0x3d, '{\\/]'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@euid_eq}]}) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000000400)) fallocate(r4, 0x40, 0x0, 0x100) 15:07:34 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x23) 15:07:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xfeffffff00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:34 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:07:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x700000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:34 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0xa, 0x0, 0x1, 0x80, 0x6, @multicast}, 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:07:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x8, &(0x7f0000000000)=[{0x8, 0x0, 0x5, 0x3}, {0x9, 0x1, 0x6, 0x401}, {0x4, 0x8, 0x6, 0x1}, {0x5e, 0x9, 0x0, 0x6e}, {0x1e7, 0x99, 0x3, 0x80}, {0x8000, 0xd1, 0x5, 0xfffffffb}, {0xb854, 0x2, 0x6, 0x5fc3}, {0x489a, 0xff, 0x3f, 0xfffffffb}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616a733d3d3a93844e2d762c30bb3898e7df197786dbb029b835d787c37a1043a9272a42d46938d7f743813649cb13f3c7e8dd905657f3b499f7d4bc24cd9bf5ebbad3e586590604aa89a651ab6528f5076a21bded5df077069bdc62cb517ca2edda573243312d37a07c9f4ba7fb46bb153ab2bd15e2deee5b5ce2fd87949d24580f583fb33a4b30e346a6395dd4f8058898b9b61a450a1eae884b7b9781a0a2f7fadc6303a1fa061f63c5fe4cd4bd3543d63170df2360e9c87816197634cd5e806e714cdd855def9c515baa56eea2a540fe16406c7758e28b836f86caa5b82110bb3beb319a9d9875df10e853", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:07:34 executing program 2: socket(0x24, 0x0, 0x8004) 15:07:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffff000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:34 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x24) 15:07:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:07:47 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x25) 15:07:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:07:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x800000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:47 executing program 2: socket(0x24, 0x0, 0xf002) 15:07:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e) 15:07:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffffff7f00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:07:47 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200020, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000100)=0x1) write$vga_arbiter(r1, &(0x7f00000000c0)=@other={'lock', ' ', 'io'}, 0x8) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@unlock_all, 0xb) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:07:47 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) getresgid(&(0x7f0000000540), &(0x7f0000000500), &(0x7f0000000580)=0x0) getgroups(0x1, &(0x7f0000000440)=[r2]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'}) lseek(r0, 0x4, 0x0) r3 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r3, 0x40, 0x0, 0x100) 15:07:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:08:00 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x4, 0x0, 0x20, 0xbf}, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) clock_gettime(0x6, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x8}) 15:08:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:08:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xfecdb1ee01976f7b, 0x19e) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) 15:08:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:08:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x900000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:08:00 executing program 2: socket(0x24, 0x0, 0x1000000) 15:08:00 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x26) 15:08:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:08:00 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x181) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733c664404000000000000006b96c37dcb81dbaf737d25637e57", @ANYRESOCT=r2, @ANYBLOB="2c7766646e6f3d76b30d27820f3d35261ff00d05ccd2ec3ed7a2aaba8274980f50921141aa124f634ad330c77b8902caa63b515ac4f5e620caa17c52fc37039a6967d2e4dbd518f96097bd7ff8f9279a7cec1d41c38cf0336df36bcaa5adac51cc8e57227e04d675e656b3defeaca1867511fd6a79200598538b5b6974033d79ca2c8bbfc8ed02d17e28343202092f72d2da849141600873aaf2ded74a2bba75a6be2cfaf5e21a0bdf48b1ca9e8617dae379be83a30cd41e3f21ce3b9f142a2fb80e671ce0b6a010052376eae5a379fcfc35a0394deaac230c6f02", @ANYRESDEC=r4, @ANYRES64=r2]) recvfrom$unix(r0, &(0x7f0000000300)=""/138, 0x8a, 0x40012020, &(0x7f00000003c0)=@file={0x0, './file1\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file1\x00'}) openat(r5, &(0x7f0000000280)='./file1\x00', 0x68201, 0x44) [ 1864.428303] 9pnet: Insufficient options for proto=fd [ 1864.455131] 9pnet: Insufficient options for proto=fd 15:08:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xa00000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:08:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x8b3e) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) 15:08:01 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x27) 15:08:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:08:01 executing program 2: socket(0x24, 0x0, 0x2000000) 15:08:01 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x56c2}, 0x0, 0x0, 0x0, 0x0) 15:08:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1864.634062] 9pnet: Insufficient options for proto=fd [ 1864.636538] 9pnet: Insufficient options for proto=fd 15:08:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r1}}) 15:08:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:08:14 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8b6e2, 0x46) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYBLOB="010000466349b69b7701ebd99bc58bc939b253def65426117361b1952face7312fd9e43a0c5c1569292a66f004d9048fe7dee6807afb2877a2340c7862aafee636f4e609586caa33c64265e2f9e0c888e44f2b62a23141d1093b5d5f746cb9ba930fe9036790b19829cd0b94ee254f57a6b632170d7c3981", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000008c0)={0x0, 0x7, 0x81, 0x401, 0x8, 0x6}) fallocate(r0, 0x40, 0x0, 0x100) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r0, 0x0) r3 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x1, 0x40010, 0xffffffffffffffff, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x23, r9}}, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f00000005c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r7, 0x1, 0x0, 0x7, 0x0, 0x1, {0x0, r9}}, 0x3f) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2000, @fd_index=0x2, 0x9, 0x0, 0x0, 0x20, 0x1, {0x1, r9}}, 0x10000) write$binfmt_aout(r0, &(0x7f0000000140)={{0x10b, 0x2, 0x9, 0xa8, 0x25e, 0x9, 0x62, 0x5}, "dbd135389f5aa84712ab29cfb4ce09c10bf5fe66ac6e052651a44d3d39e7a20d78dbbfadbe720d2db37ca5fb05aae8"}, 0x4f) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0}) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x20, 0xff, 0x6, 0x33, 0x0, 0x3, 0x8400, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x98, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x2000, 0x4000000000, 0xfffffffa, 0x4, 0x8, 0x9, 0x6, 0x0, 0x6, 0x0, 0x3}, r10, 0x4, r0, 0x9) 15:08:14 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x28) 15:08:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xb00000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:08:14 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = io_uring_setup(0x796d, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) close_range(r1, r0, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:08:14 executing program 2: socket(0x24, 0x0, 0x3000000) 15:08:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 15:08:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) [ 1877.846110] 9pnet: Insufficient options for proto=fd 15:08:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) socket$nl_generic(0x10, 0x3, 0x10) fallocate(r0, 0x40, 0x0, 0x100) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x100) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x30) [ 1877.852253] 9pnet: Insufficient options for proto=fd 15:08:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1000000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:08:14 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x29) 15:08:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:08:14 executing program 2: socket(0x24, 0x0, 0x4000000) 15:08:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}}) 15:08:14 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'trylock', ' ', 'mem'}, 0xc) 15:08:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x4001072, 0x200000, 0x0, 0x1}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x3f) fallocate(r0, 0x40, 0x0, 0x100) 15:08:14 executing program 6: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x30ec1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="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"]) [ 1877.987387] 9pnet: Insufficient options for proto=fd [ 1877.990310] 9pnet: Insufficient options for proto=fd 15:08:14 executing program 2: socket(0x24, 0x0, 0x5000000) [ 1878.009648] 9pnet: Insufficient options for proto=fd 15:08:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x1}, {0x92}, 0x21, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="80b09b389ad9e1e17cf5ade78594f3b2976ee774b03e20a2c6ed98ee26014408bd28db6723a8b6c001ed66b3c80f", 0x2e, 0x0, &(0x7f0000000140)={0x2, 0x14e, {0x1, 0xc, 0xbc, "1401ef99a0eea646caca9fc7f8a680c21821527d1f2e38764f0bfd81f739d25f411bc914cb381b7d1a08ebcc9c5efa71a3c6b1a2de904cc62f1d8c476bfc9cb99c49258f1d7b5fd0d846a9d3d48ad2313c889924f972f23c38e3703a3c1a3b49dbc94f5525a71b8287054d61e2ddf0948edbba61c067fbace8477a1d78812b042700992ec9d06bc18699a62407a1ffa1c944e977e20729491e13521dc223f9a75afdb1f14de2377fb9d18037c9c4c1d9bd174beabcc51108ce3691d1", 0x85, "716c3c38068672655ca0877f8719385066e7b3be9f7ece835af1bef6401dfedf9679e4d6b4ae56ae44a2ebcc62998070e6a19d73b666991056b989d50e72b7b2abda61f78c310b16a93bbf8b43745e2f404c26060194f919853c9457571a43918a130991f11ee0c5a80687650c948462fe98f52092097c05ae84870870ab0e96ad0f2d78e5"}, 0xf0, "1496e211d8a8de760a9e899d96f571923a82263e810dd0548a3ebbe06e8445c0ce73f22c58e421f35fb2fe639e6694e328ff5544cbfc4a7337ce9f0c7b5cbca43b29525ea7e913b11266b804ac98c07eeefd87305fbb72de20e94aae4c2098919bd0060859826d7e1f4a1ea8726fd9e2f6ba61a9f489e6847284b01e0310d2a531907f166eb38324b653f564d5a538404efdc9d3ae8a74b0098df0c6cd0b66c81dedd00b1bcfe75d4c0e5e06f74c76a8e134ce305a62ceb99c9eebcbddf129577ea991e5811fe9775955f0668b4e9646f551816a9fe0e20a12da5e927f5ed83ae76fe86da2d707b57b2c64f4ea0de6cc"}, 0x24a}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[], 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) 15:08:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:08:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}}) 15:08:30 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x2a) 15:08:30 executing program 2: socket(0x24, 0x0, 0x6000000) 15:08:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:08:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2000000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:08:30 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000002106c63bb87c82d09342e05a893343f94caa00bfb460079f78fee755d378676b1e0b08e5e28ee2a44117ef3c3b0cf802dc543ffd60028eea5fa4f3e7188bdbfd4e96826d74d10cb8aa1f03fa4c6aeec4bf42c5de7c2ea96b250cebdf5efc69feed9a38b6861a3e8fb2506b053da8ce", @ANYRES32=r0, @ANYBLOB="6e360000bf2700002e2f66696c653000"]) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f00000000c0)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) finit_module(r2, &(0x7f0000000040)='}\x00', 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000100)=0xda400000, 0x4) [ 1894.159408] 9pnet: Insufficient options for proto=fd [ 1894.170129] loop5: detected capacity change from 0 to 41948160 [ 1894.181182] 9pnet: Insufficient options for proto=fd [ 1894.194336] FAT-fs (loop5): Unrecognized mount option "pæ¡s¶f™V¹‰Õr·²«Úa÷Œ1 ©;¿‹Ct^/@L&”ù…<”WWC‘Š ‘ñàŨ‡e ”„bþ˜õ ’ |®„‡p«–­-xåð" or missing value 15:08:30 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x2b) 15:08:30 executing program 2: socket(0x24, 0x0, 0x7000000) 15:08:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2010000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:08:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:08:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22}) 15:08:30 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) write$vga_arbiter(r2, &(0x7f00000000c0)=@unlock_all, 0xb) [ 1894.302355] 9pnet: Insufficient options for proto=fd 15:08:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8a442, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1}}], [{@uid_eq={'uid', 0x3d, 0xee01}}]}}) [ 1894.315778] 9pnet: Insufficient options for proto=fd 15:08:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) [ 1894.961441] loop5: detected capacity change from 0 to 41948160 [ 1894.977278] FAT-fs (loop5): Unrecognized mount option "pæ¡s¶f™V¹‰Õr·²«Úa÷Œ1 ©;¿‹Ct^/@L&”ù…<”WWC‘Š ‘ñàŨ‡e ”„bþ˜õ ’ |®„‡p«–­-xåð" or missing value 15:08:45 executing program 2: socket(0x24, 0x0, 0xa000000) 15:08:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, r1, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x4e, 0x7f, 0x3, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x13}, 0x20, 0x80, 0x400, 0x100000}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, r1, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3b4bffaf8792e2b9, 0x12) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r6, 0x40, 0x0, 0x100) 15:08:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:08:45 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x2c) 15:08:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:08:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x3f00000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:08:45 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x70bd25, 0x8, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4800) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:08:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x2000000) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="907b7266d1883e64000000fbaea44c457a8f203d0f00000000ca8db6069391124d28cdc0c0d4b4eefd894840a99e23786395836cbb714051829375fc867c6390c796266b212b3386964c1de02b30dbaba9cd526d91f449a2", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_setup(0x2a78, &(0x7f0000000240)={0x0, 0x1, 0x20, 0x3, 0x5, 0x0, r0}) ioctl$sock_proto_private(r1, 0x89eb, &(0x7f0000000100)="55332fb0d920a350718e817d9a7881748ab75652df369650cc642528337a8fbc6c37733d9c") io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000000000000000611ce39f1aa7f8e32ccb4c90be612566595166555f2c15263b7d"]) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000700)={0xb, 0x2, {0x4ae1, @usage=0x2, 0x0, 0x2, 0x3, 0x1, 0xffff, 0x1, 0x0, @struct={0x1, 0xffffffff}, 0xffffffff, 0x9, [0xfffffffffffffffd, 0x7982, 0x6, 0x7, 0x3, 0x9]}, {0xbe97, @struct={0x9, 0x41fb}, 0x0, 0x6, 0x6, 0x80000001, 0xffffffff, 0x800, 0x0, @struct={0x1, 0x6}, 0x0, 0x4d3c, [0x6, 0x1, 0xef8, 0x5, 0x3, 0x3ff]}, {0x7, @usage=0x100000001, r4, 0x8bee, 0x4, 0x4, 0x0, 0x7f, 0x2, @struct={0x90b, 0x3}, 0x20, 0x8, [0x9b, 0x9b0a, 0x9, 0xffffffffffffffff, 0x3, 0xfffffffffffffffc]}, {0x9d, 0x4daba499, 0x9}}) 15:08:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8cffffff00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:08:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000240)=r3) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000300), &(0x7f0000000380)=0x68) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r4, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) r5 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000c00), 0x1312) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000040), &(0x7f00000000c0)={'L-', 0x1}, 0x16, 0x3) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000280)={0x2, 0x100, 0x5}) 15:08:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xf6ffffff00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:08:46 executing program 2: socket(0x24, 0x0, 0x80040000) 15:08:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x21) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x1ff]}, 0x8) sendmsg$nl_generic(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="90000000400001002dbd7000fedbdf2505000000e4a7a51737f90aa474eadac02e5bb29416a24b187fcea256da0c438f706f5103fdbe9c00e0f90cb702eee7d5783d0e64d9bebd1be44c4742a2bd91df911f56fd4e805179d4ccd3f6fb901848f88dea78e9af0deac29361bc75fbd20e3944711e06fe2ac93d42551be88d01524f58fa8ab45b64f8548c046f5c4ad700"], 0x90}, 0x1, 0x0, 0x0, 0x20}, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0x10, r3, 0x14663000) ioctl$CDROM_CHANGER_NSLOTS(r0, 0x5328) 15:08:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:08:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2}}) 15:08:46 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/mipi-dsi', 0x200000, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0xa, 0x1, 0x40000003) sendfile(r1, r0, &(0x7f00000000c0)=0x3f, 0x7) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000300)={0x9, 0x100, 0x3, 0xff, 0x5, [{0x400000000000, 0x2, 0x8, '\x00', 0x200}, {0x8, 0x442bbd80, 0x7, '\x00', 0x1001}, {0x7fffffff, 0xfffffffffffffffc, 0x10001, '\x00', 0x284}, {0x9, 0x1000, 0x2, '\x00', 0x908}, {0x80000001, 0x9, 0x7fffffff, '\x00', 0x800}]}) 15:08:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xfeffffff00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:08:46 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x2d) 15:08:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:08:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x3}}) 15:08:46 executing program 2: socket(0x24, 0x0, 0x8cffffff) 15:08:46 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4000) setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000040)=0xfffffff9, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x4, 0xfffffffffffffffb, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) 15:08:46 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x2e) 15:08:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x7}}) 15:08:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:09:00 executing program 2: socket(0x24, 0x0, 0xf0020000) 15:09:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x2, 0x0) lseek(r1, 0x5, 0x3) fallocate(r0, 0x40, 0x0, 0x100) 15:09:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffff000000000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:09:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0x8, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:09:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bind$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 15:09:00 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0171c200000000000000000086dd6096033f00303a00fc020000000000800000000000000000ff120000000000007800000000600009e600"/68], 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000140)=0x80000001, 0x101, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000280)={0x23, 0x9, 0x80000001}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/148, 0x94, 0x1, &(0x7f0000000180)=""/18, 0x12}, &(0x7f0000000200)=0x40) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:09:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x8}}) 15:09:00 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x2f) 15:09:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 15:09:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffffff7f00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:09:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fallocate(r0, 0x40, 0x0, 0x100) 15:09:01 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x30) 15:09:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x9}}) 15:09:14 executing program 2: socket(0x24, 0x0, 0xfeffffff) 15:09:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="080028bd7000ffdbdf255d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000001007c0000006400a6800a00f9fffeffffffffff00000a00060008021100000000000a00060008021100000000000a000600fffff9ffffff00000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff00002800b680ed18060008021100000000000a00060008021100000100000a0006000802110000010000"], 0xb4}}, 0x4000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r3, 0x40, 0x0, 0x100) 15:09:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xffffffff00000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:09:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xa}}) 15:09:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x301542, 0x104) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:09:14 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x31) 15:09:14 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) signalfd(r0, &(0x7f00000001c0)={[0xffffffff7ffffffd]}, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:09:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 15:09:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:09:14 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x216040, 0x20) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 1938.124147] 9pnet: Insufficient options for proto=fd [ 1938.133291] 9pnet: Insufficient options for proto=fd 15:09:29 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, @out_args}, '.\x00'}) openat(r2, &(0x7f0000000140)='./file0\x00', 0x143000, 0x89) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000000c0)) 15:09:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1953.092003] 9pnet: Insufficient options for proto=fd [ 1953.095394] 9pnet: Insufficient options for proto=fd 15:09:29 executing program 5: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x400000, 0x5) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72, 0xfffffffe, 0x8}) openat(r0, &(0x7f0000000180)='./file0\x00', 0x103442, 0x18a) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r1], 0x1) fallocate(r1, 0x40, 0x0, 0x100) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) fallocate(r3, 0x0, 0x1, 0x3e) 15:09:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xb}}) 15:09:29 executing program 2: socket(0x24, 0x0, 0xffffff8c) 15:09:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x540, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x102, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x38, 0x4, 0x70bd2d, 0x25dfdbfb, {0x1e}, [@generic="4f6b3f7d954a334370add1d4a88d782bd902a1e2b7c632dccb43a33c7232e85df1d6f5ef5e22ce5151777770df8f3e8c7d6b57d9210373505026927e84ba470bad3f0b8d56c4eb"]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x4000840) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x9, 0x7, 0x81, 0x6}, {0x101, 0x2, 0x3, 0x6}, {0xe1e, 0x3, 0x80, 0x800}]}, 0x10) 15:09:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 15:09:29 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x32) 15:09:29 executing program 2: socket(0x24, 0x0, 0xfffffffe) 15:09:29 executing program 3: socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socket$packet(0x11, 0x3, 0x300) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x304, 0x10001, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}, 0x0, 0x0, 0x0, 0x0) 15:09:29 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f0000000340)=""/32, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040)) fallocate(r1, 0x40, 0x0, 0x100) 15:09:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x0, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:09:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r1}}) 15:09:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x10}}) 15:09:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:09:29 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x33) [ 1953.276986] 9pnet: Insufficient options for proto=fd [ 1953.287106] 9pnet: Insufficient options for proto=fd 15:09:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000100)="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") r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000001200)={&(0x7f0000000200)=""/4096, 0x1000}) sendmsg$802154_dgram(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @short}, 0xb, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000080)) 15:09:29 executing program 2: socket(0x18, 0x0, 0x1) 15:09:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}}) 15:09:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x0, 0x7fffffff, 0x7, 0xddf, 0x8}) [ 1953.434863] 9pnet: Insufficient options for proto=fd [ 1953.442321] 9pnet: Insufficient options for proto=fd [ 1967.960204] 9pnet: Insufficient options for proto=fd [ 1967.964947] 9pnet: Insufficient options for proto=fd 15:09:44 executing program 2: r0 = socket(0x25, 0x2, 0x208004) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) lseek(r1, 0x4, 0x0) sendto$inet(r1, &(0x7f0000000040)="be5995123773fadb2da2167d42d2446bfe91304f8f83ebccd894b3cfce181ee3b4a4d18cf6c4a805d8fc36b5154923603357ffa560eaadb9f3942a1eecaea71b53c7b4437cd482839bced26a6c4f62fa7a31697a4dd0653835f7ff342eb4e11dd193c86565c59228ccc82af7c497af844ffeac2d43e1b42e7fce50bbe9cc7024fe045c3c95", 0x85, 0x4, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) 15:09:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x100072, 0x0, 0xff7}) fallocate(r0, 0x40, 0x0, 0x100) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'lo\x00'}) r2 = epoll_create1(0x0) r3 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0x50000006}) r4 = socket$inet6(0xa, 0x4, 0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x40000009}) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/2797], 0xaed) 15:09:44 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x3}, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:09:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001840), 0x280000, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001880), 0x10001, 0x2000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet(r0, 0x0, &(0x7f00000018c0)) r5 = openat$cgroup_procs(r0, &(0x7f0000001900)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000c00), 0x1312) newfstatat(0xffffffffffffff9c, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r10, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) r11 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f0000000c00), 0x1312) syz_io_uring_complete(0x0) r12 = io_uring_setup(0x5f21, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r12, 0x0, &(0x7f0000000c00), 0x1312) sendmmsg$unix(r1, &(0x7f0000001b40)=[{{&(0x7f0000000100)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000016c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=0xee00, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r11, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32=r12, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c0066c70f4cd09bcba951dff34b3fbcc8eec44b54038b7ab96900", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000064bbb24682e735701eee82148462bdab03322ac934efaa85ddc0634325a0992aa2e23b146556c61c6d5d614573220553ad9c2a5d", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x1f8, 0xc0800}}], 0x1, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0xc0, &(0x7f0000001c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@cache_loose}, {@cache_none}, {@cachetag={'cachetag', 0x3d, ','}}, {@access_uid}], [{@fowner_lt={'fowner<', r8}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfshat={'smackfshat', 0x3d, ':'}}, {@obj_type={'obj_type', 0x3d, '\x00\x00\x00\x00\x00\x00\x80\x01,'}}]}}) 15:09:44 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x34) 15:09:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)={0x0, 0x3f2f}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) flistxattr(r2, &(0x7f00000000c0)=""/146, 0x92) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dd5e7d2de6caa9430028855f2bd651776a8a7d16d1fd287dc7dd2308eb972948067ee6ecf5faecc33292fa7f21dee674e527514e5e5585a47405cb83451223a1e10bace9244a88ca2941d1c43b900ccbe04bff15a35f30690a447177b6d6b415a79372b7fc4c23bb7b216f73ab120f28e00000000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:09:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x0, 0x7fffffff, 0x7, 0xddf, 0x8}) 15:09:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}}) [ 1967.977539] 9pnet: Insufficient options for proto=fd 15:09:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x0, 0x7, 0xddf, 0x8}) 15:09:44 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x35) 15:09:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22}) [ 1968.136784] 9pnet: Insufficient options for proto=fd [ 1968.144874] 9pnet: Insufficient options for proto=fd 15:10:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',1\bdnoO', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:10:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1989.454424] 9pnet: Insufficient options for proto=fd [ 1989.455566] 9pnet: Insufficient options for proto=fd [ 1989.461461] 9pnet: Insufficient options for proto=fd 15:10:05 executing program 2: socket(0x24, 0x0, 0x0) socket(0x25, 0xa, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.numa_stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000080)={0x8, 'team0\x00', {'macvlan1\x00'}, 0x8}) 15:10:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000280)=[0xee00, 0xee00]) lchown(&(0x7f00000000c0)='./file1\x00', r1, r2) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x2}) socket$unix(0x1, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x44, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@cache_none}, {@access_user}, {@cache_none}, {@posixacl}, {@afid={'afid', 0x3d, 0x7}}, {@cache_mmap}, {@cache_fscache}]}}) 15:10:05 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0xb, 0x80, 0x9, 0xcd, 0x7f, 0xc5, 0x0, 0x200, 0x20000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0x8}, 0x20, 0x0, 0x1, 0x3, 0x6, 0x101, 0x0, 0x0, 0x7f, 0x0, 0x20}, r0, 0x6, r0, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/graphics', 0x200000, 0x2) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x3, 0x113) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x1, 0x1000}, 0x4) dup2(r2, r3) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:10:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x0, 0x0, 0xddf, 0x8}) 15:10:06 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x36) 15:10:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYBLOB="010000001800000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00'}) 15:10:06 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x8}) 15:10:06 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x315bc3, 0x0) socket$unix(0x1, 0x5, 0x0) 15:10:06 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x37) 15:10:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = io_uring_setup(0x545, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x100010, r1, 0x82235000) r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="25032332f8dc0664c66e99183a35dc2d82ca3ec0baab92d18813a1e85d8036f8713d0062ae89cdae9669547b0b40003b36cd9c5b1590f553f2309599308633eda4bda32ed4d2ab1e1c2ce978ab263d16afc5dbd360ed21628db852f37fe413839a2c4a603a5e737a331a970ed02d1dcd2ca640b00184d41d46309a7693791dc012254b36d5ce6d776ca4d51ca4c69f4063d0ab1f2ef5af8e22bb0f33713c03096bf18f8346317e093096cd6f3676e8a83ecc50253371d535a7171496561e85bef43b46776361977962c406f8a744c051da76ecf08ef364be2de6"]) 15:10:06 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x34200080}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x58, r0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40044011) r3 = msgget$private(0x0, 0x101) msgrcv(r3, &(0x7f0000000200)={0x0, ""/158}, 0xa6, 0x2, 0x1400) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x2, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000480)={0xff, 0xfffffffffffffffd, 0x0, 0x0, 0x6e39, 0x0, 0x0, 0xa865}, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r7], 0x38}}], 0x1, 0x0) bind$packet(r4, &(0x7f0000000040)={0x11, 0x9, r7, 0x1, 0x3, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0\x00'}) 15:10:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2}}) [ 1989.654582] 9pnet: Insufficient options for proto=fd [ 1989.680772] 9pnet: Insufficient options for proto=fd 15:10:21 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x38) 15:10:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8}) 15:10:21 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:10:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1001) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x2, 0x8, 0x44, 0x3}, {0x81, 0x3f, 0x1, 0xf0b}, {0x3, 0x80, 0x6}, {0x6, 0x1f, 0xff, 0xfffffff8}, {0x7, 0x7, 0x1, 0x4}, {0xfff, 0x2c, 0x9, 0xbe}, {0x6, 0x6, 0x7f, 0x7f}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000dfeef83b8cf8000000002e2f66f8ffffff00"]) r4 = io_uring_setup(0x77e8, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x2010400, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d0db3b55bb815b3566f3f3b9ec152ebe2a2bf5df64f6d79c12d69908a", @ANYRESHEX=r1, @ANYBLOB="9f07"]) 15:10:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x3) 15:10:21 executing program 2: socket(0x25, 0x0, 0x412) 15:10:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x3}}) 15:10:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) fallocate(r0, 0x40, 0x0, 0x100) 15:10:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x7}}) 15:10:21 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x39) 15:10:21 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xfffffffffffffe4d, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}}, 0x10) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) copy_file_range(r0, &(0x7f0000000240)=0x5, r1, &(0x7f0000000280)=0x1f, 0xa4b0, 0x0) 15:10:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x303743, 0x40) r1 = socket$unix(0x1, 0x3, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 15:10:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e731f66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:10:21 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) lseek(r0, 0x4, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000600)={0x4a, ""/74}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r1, 0x40, 0x0, 0x100) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x240201, 0x0) recvmsg$unix(r0, &(0x7f0000002300)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000002140)=[{&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000008c0)=""/182, 0xb6}, {&(0x7f0000000980)}, {&(0x7f00000009c0)=""/213, 0xd5}, {&(0x7f0000000ac0)=""/140, 0x8c}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/71, 0x47}, {&(0x7f0000000b80)=""/41, 0x29}], 0x9, &(0x7f0000002200)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x40000001) write$P9_RATTACH(r4, &(0x7f0000002340)={0x14, 0x69, 0x2, {0x2, 0x1, 0x1}}, 0x14) r5 = fcntl$getown(r1, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000005c0)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000000c00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)={0x44c, 0x17, 0x1, 0x70bd2c, 0x25dfdbff, {0x7}, [@typed={0x8, 0x75, 0x0, 0x0, @ipv4=@empty}, @generic="b5c043d78d20dea29a5eec3182dd8a705f94f0e10ef4d694d9d1ad7a0e1b08b3e9fc9c0778ffea31654d204bc5a9831073b1e09732446afa200745144012504bd157b3b6e223880429b1f62117dcbd225f0f75887a378120a601db954bc05c11d4e053df6470e9e8c5141753150e638f9498b0e291ba973565f835a8b37d96a43aaac365a877840efc01cc9beb82d9f355ddbb5be35e847d06337b3610fdea7491a8c586ba6cff450333a954d9c119ca6358cd3c5870930cd5fa", @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@private2}, @nested={0x35d, 0x79, 0x0, 0x1, [@generic="df50dffc8f36f61c4037c9bf3504e3139e1f3a7c6af70cd187f1d032501523da5af9539bc8e0c401f8ee313df5e7bca392f212667d95983d0b64d93a5c696bde50bccfc610e5c546acb1557f471b638d7710b98abaeb152eaa95682af58386fbcdc5a8d65bd2c7090f388b858bbf0e056717cd1392f16ede5a7ed9b79bdbc88aa7539fa3fbcacc44335fbc2cabe0c2de6bfec8b59574130e48e4c8507fc50af7a2465ced32a01f73a3ef4f23f0245f446548becf7a134427b2422f5dc363e2ea90be8c7ea70f8bc1c9653bee67b5397138ef9113685398fb2a3e05061ee5d7c226", @typed={0x8, 0x20, 0x0, 0x0, @pid=r5}, @generic="e852b1c0c9d54427c55ed5f3a5a2109fef4dd700f4b70c91cdb5b4da99609fe52551123e052152ee3af50d0dbc93f288c878a80f459540877cb6c6894ba7d0fd6b3385a665715ad17062536f38d42389ba8a95e19db6099c282907be227c024c52b82748ad14e27824d7bbaeaae90ec066710fc7e92fe05d55d1f678bb4536656fbd9bfb5815e85979ccc581b3659d71ea8b909ba908c90621a291c213271782ecaf8a75d49995645453786f3996745e96f967dfdd8cf62e0544ba764f312d3a8ba1a3fc15e72d7a2b75df9f47f55d44c0ba4108632c46d9b8b01502a4a893a7df46e1be1171", @typed={0x8, 0x45, 0x0, 0x0, @uid=r6}, @generic="96e5a8cb04a1022d866dadb8416d33c1e3dc66e5d7d7d97bc6b48f632153e15862a664a64a7e0848ed3c89bff948196a0ed6d8508ecf2f7ad81bdaa4c0bdb97f6b76ac7d0879e6bbb1b2f86893eff007e218c68cc3f6f52a15e01a91ed63dff93a450438b0ca4a138326fb6667abcc394dfca4fc0bbed8e730fa35aef5f06ad5067235e4725f6188240ddcc99861dff41b", @generic="cb6431faf3828a8d408ecf0ad30f7c29d209634cab04f4449bd92f81a0a73b80938dadb2dae6cc221a381abffe070e645f04b5a59f7360eb13a69eebbc52ae62251229e8b23de7ecff87e4f3b9bfcf5cdcc6dc365409f70ce57cd36aba398255096b88385f79ef815c454a3e344451b79946d9454c7596d99cd2ec98f84c1f1a03f3331596d906a9e37f7239dfc9b3280bb758413120cb49f58e5c70fb32d6ed62d69cb073d324dc70ba12eeaf359c36268175d28b780b277cc0b1708bfd446231e213475b96d7497bd1f5125ad052bb99d0b3881d9da9933afca8743ac1c2bafe3a16f1e381912eec0d113d931f6d064f"]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) r7 = syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x6, 0x2, &(0x7f0000000300)=[{&(0x7f0000000140)="1a82141665dde23c05cda6486742f371a0bacde4bea8ef089263decc0e1a02f89c771ec3f98d197bbd2df30c1400dd41dbc1fa6dfbbfee154ac049aafef1e558072c6c3bf8de3b964f2df681de8cfb0d71b4f74a480bdfa197abddc86cc7e1526eaa43abdcc8f6d59f70a022708d1c47463a7c14b13f051c45e1b11a134990cbb83475fb0a82b3778ad55edfa4c2d19e213e8f2cfe3dd73d2c873004a5ba6fc91e35628e0d2369b0008b0d31a250df593004051032ef47cdd53d736dada599b6e516d6f848b05b0813ca5f22f5a688fd3e9d3e88c6e984bf761e67e8a75f715934910fbf981e975455c9ca316079e080dd", 0xf1, 0x9}, {&(0x7f0000000240)="024a97f6913d98f92a6dbd965cd9e08c83e6f0e32e7100bcba2ec099acaed3c592d3fd87a1c459cbaf3bf965cc141d35b678f48765468d6d5990fccde5e0d0db5aa8d68373a9b07b4fbc43e2f57e613ac932c94dd4b76a20d41f7c3967d24747fdc5f9c10c587b7ee66029c13847703d3e84cec3a31982a87d0e8358aa982ac3f2ad79b73828aab2bc003629155d220a8bf1fa9361cc6b1e9470764df297ecb716b2fab050d707c05d7375e6c8b3a33a7eae48e2e41e9557cfe2fe26", 0xbc, 0x56f8}], 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB="002c2c2617232528252c24212c232f5e242d2cfeeaf4a2232f2c002c002c002c6673636f6e746578743d73797374656d5f752c7065726d69745f646972656374696f2c008d747f599748087544a9d3688b0641bb880e8b6c30226d477b1095489a5f13d40c88640ec9a985a2e936e2174a0f4c1c39b47de6c414e7f0e5ba8eb716698673b76e31e903726ccbd59cf8844725724b00ab6f2b2d2d3ce40d33d83c4ce479f6d9724a7455bdbdf1a8553ae55b77b5a9c5710401128ddaee"]) r8 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FAT_IOCTL_GET_VOLUME_ID(r8, 0x80047213, &(0x7f0000000680)) splice(r2, &(0x7f0000000080)=0x9, r7, &(0x7f00000003c0), 0x69d, 0x1) 15:10:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fallocate(r0, 0x40, 0x0, 0x100) 15:10:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x8}}) [ 2004.979966] loop5: detected capacity change from 0 to 44032 15:10:21 executing program 2: r0 = socket(0x24, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000004240)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000140)=""/46, 0x2e}], 0x4, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000200), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000280)=""/179, 0xb3}, {&(0x7f0000000340)=""/229, 0xe5}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000540)=""/149, 0x95}], 0x5}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000700), 0x0, &(0x7f0000000740)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000980)=""/54, 0x36}, {&(0x7f00000009c0)=""/204, 0xcc}, {&(0x7f0000000ac0)=""/172, 0xac}], 0x4, &(0x7f0000000bc0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000d40)=""/57, 0x39}], 0x1, &(0x7f0000000dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/227, 0xe3}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/177, 0xb1}, {&(0x7f0000004000)=""/173, 0xad}, {&(0x7f00000040c0)=""/89, 0x59}], 0x7, &(0x7f00000041c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}], 0x6, 0x102, &(0x7f00000043c0)) mkdirat(r1, &(0x7f0000004400)='./file0\x00', 0x77) [ 2005.025701] loop5: detected capacity change from 0 to 44032 15:10:34 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0xfff, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e24, @private=0xa010101}}}, 0x108) socket(0x24, 0x0, 0x0) 15:10:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x2, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r4, 0x4, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000240)=""/4, &(0x7f0000000280)=0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x5, 0x2, &(0x7f0000000000)="0e459a6cd640726ae7", 0xbb, 0x0, 0x0, {0x2}}, 0xfffffc00) 15:10:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x9}}) 15:10:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fallocate(r0, 0x40, 0x0, 0x100) 15:10:34 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x3a) 15:10:34 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:10:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa8062, 0x0) r1 = geteuid() quotactl(0x1f, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000440)="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") r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r4, 0x4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@local, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) r5 = io_uring_setup(0x3b9f, &(0x7f0000000580)={0x0, 0xfdf9, 0x0, 0x1}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000c00), 0x1312) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r6, 0x4, 0x0) bind$unix(r6, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$int_in(r5, 0x0, &(0x7f0000000080)=0x3) 15:10:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) r3 = syz_io_uring_complete(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000280)={0x0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r6 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000c00), 0x1312) r7 = openat$cgroup_subtree(r3, &(0x7f0000000300), 0x2, 0x0) dup2(r6, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r4, 0x3, r5, 0x0, 0x80000}) r8 = io_uring_setup(0x396d, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000380)={0x1, 0x2, {0x1, 0x0, 0x3, 0x3, 0xe28d}, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000c00), 0x1312) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000000000), &(0x7f0000000240)={'U+', 0x10000}, 0x16, 0x0) r9 = socket(0x1, 0x3, 0xf8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r4, 0x0, r9, 0x103, 0x80000}) 15:10:34 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:10:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xa}}) 15:10:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fallocate(r0, 0x40, 0x0, 0x100) 15:10:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72, 0x0, 0x4, 0x80000001, 0x80000000}) fallocate(r0, 0x40, 0x0, 0x100) 15:10:34 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x3b) 15:10:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdn\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 15:10:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0xc0030, r3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) lseek(r2, 0x4, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x7, 0xff, 0x7f, 0x4}, {0xbd21, 0x1, 0x80, 0x9}, {0x8000, 0xcd, 0x1, 0xffffffff}, {0x100, 0x1, 0x80, 0x7ff}, {0x9, 0x0, 0x7, 0x10001}, {0x5, 0x3, 0xff, 0xafd5}]}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='transefd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00']) fcntl$getflags(r0, 0x408) [ 2018.392370] 9pnet: Insufficient options for proto=fd 15:10:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2018.402442] 9pnet: Insufficient options for proto=fd 15:10:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) faccessat2(r1, &(0x7f0000000100)='./file1\x00', 0x1, 0x100) r2 = socket$unix(0x1, 0x3, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) openat(r3, &(0x7f0000000140)='./file1\x00', 0x200, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 15:10:49 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) openat$incfs(r1, &(0x7f0000000100)='.pending_reads\x00', 0x200, 0x6c) faccessat2(r0, &(0x7f0000000080)='./file0\x00', 0x7, 0x1300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r2, 0x40, 0x0, 0x100) 15:10:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xb}}) 15:10:49 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/node', 0x604100, 0x51) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x4) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:10:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="74727ed4f6f599f8ff7fffff6e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) openat(r2, &(0x7f0000000000)='./file1\x00', 0x180c2, 0x26) 15:10:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:10:49 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x3c) 15:10:49 executing program 2: r0 = socket(0x24, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x4000) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x19}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 15:10:49 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) signalfd(r0, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:10:49 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x3d) 15:10:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x10}}) 15:10:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:10:49 executing program 6: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000180)=0xd5) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2c4280, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file1/file0\x00'}) r3 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 15:10:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x10000, 0x20) bind$unix(r2, &(0x7f0000000100)=@file={0x0, './file1/file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:10:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xe28c2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0xb8, {{0x2, 0x4e21, @broadcast}}}, 0x88) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x101140, 0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x1, 0x48) dup2(r1, r2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000001c0)={'macvlan1\x00'}) fallocate(r0, 0x40, 0x0, 0x4) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) 15:10:49 executing program 2: socket(0x24, 0x9, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0xfffffff8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x2, 0xa1, "4d78224d75a45488a24d75239afb26ed266cfb20a63d960864bc94f9e0da668b9811e826e003fba18f82f45f391ae6435a13f5d40852e1a2b6cce0fc96329287822a0a3e325e767877858d7f8904a2c0b24b2ec6ef914083641b86c34cf17a19fc040046bee5b6082e8685c29ffa81ccf722c7c9cb48ca32ebf0b1817948cd18575c43c7e00d50eeed620d34de626e718ef28a4d51ffd5de76980b9cedb3350fac"}) 15:10:49 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x3cc, 0x31, 0x8, 0x70bd2c, 0x25dfdbff, {0x1}, [@nested={0x3b8, 0x9, 0x0, 0x1, [@generic="6ac94442c443f46297e7592c401c062b87fd438b88b6e06f4dccbcde36e3b5e3b82df1e70853469d0aa886a50cb83b0a619862544063f08e49e2", @typed={0x4, 0x60}, @generic="6f62848363bc25fe950a6323393a4bbfe34407caccbec2f66dacb1170f1b8a146a48527c8d023e4d9f7ceec99a2cfa8472340280e3bf451f697c920a0a3c6933996ef9415f07845d1d66b23fc9d64abf30e09271c530f1d43c8f9108a6bcdf8e37110eaf6e7946a52b2a2d1b00bca49ddbd4d863cf651d6c6781fca248ef35a1f7073ccf353031d62f4982fd24e86c0d6fc4deb619b8fa5f00c943435e14ae78eff452a189a073071fae7fa2872f5e60c37345bd8c0568841498a94a2cc70b76a4b37b7d630e18dc92625f0ccfa6bf6f22200c40d28844cf261e5a5d8377", @typed={0x8, 0x38, 0x0, 0x0, @u32=0x2}, @generic="801a6ef98d2d2a104ec258e26c5a3f98ab86d1cdb9377b5a5adfb801d2ad65ede2ecaba764cbc66656d321a0d38c0273ba5171469904affb4879ccd47fc6a850ef3076b9820b534af1226e17b8f6c7b8bcc3d4360cca2c26c594f9e0b9903d1aeb5f2da2a92c03bbdbeea4ff94450c856b1ad87589cbb90191c4e7fc49ddf9c4503fc77d36f1b15326ae51b0ffb424d728f5794caefc2a373b2d3d3e72beb6606a140cebc54b2d064754d41ee7fd876eadd46da7cd536bd1818a059a171e4974f9ad203399156496a02e89d3b593781dd84a67406f7829dc3f9fa6466773d6d75e7f8b5e5372c047db1894c413c2f5", @generic="5f38c6625a55dab24d32546601edecb2a5e4dbfd1783886b3f6a01b5fb125b677a0bc922c504ee237f66dbf8a100bce5f09a11fbfbbe4ebd769f5bfeee81f30e73a9ebf0547c46c621ed5db2c2e5299e099e38800d0341e683745b24d2608bfa920e1bd64bb73a806c50d8047ce29027d2415744ded57c27a740be29f2c19e4f1c52", @generic="67df1529efbe788a135037d89b6cf7786b18a0e07111b3264b40de4205cad56e9f1cc0da4b3571e926570bb4bf6c1879bd42466aa7710c", @typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0xde, 0x22, 0x0, 0x0, @binary="2847e5284f305723672766d9c53f91b2a0eb2d7190685180a8b085acd7fa267e888edbe85e7a12a794afbc3483bc4345ff0000d18387d337843b5a97c62c9d9839c7fcaa445a548f755218ecfaab97250f9b9ecac42941d0e76ce290deba6e4f1aeb8adc7fac1c7e1ff40877a45d5bcb1e64360f7d1ffac2c697b778110faedac93e173f4beee1c6aa99a34d013adc73fd5a04007113537bf9f31f3b45e699799262d9aa189c286862f48b78d29f38b5352979ee2416d5ae49f6801e67a58e3a00b5fd7cc1ec4564c27e719f1bf2c0e5e4755f38b903157cb697"}]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 15:11:03 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) r1 = openat(r0, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001440)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) setxattr$trusted_overlay_nlink(&(0x7f0000001480)='./file1\x00', &(0x7f0000001540), &(0x7f0000001580)={'L-', 0xfffffffffffff1a4}, 0x16, 0x2) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)={0x0, 0x0, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000300)=""/249, 0xf9}], 0x1) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x3ff, r1, &(0x7f0000000140), 0x3c4800000, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="74720400046a2d4fa84be24566ec2db1c4528400000000000076646e6f3d00", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="fa0000000000000000"]) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x2, 0x4) 15:11:03 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) sendfile(r0, r1, 0x0, 0x1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:11:03 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x3e) 15:11:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_pts(r0, 0x10000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000140)={0xc0000000}) r3 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000200)={0x50000006}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x40000004}) r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x50000000}) r5 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 15:11:03 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:11:03 executing program 5: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x13, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000080)="163db28aec256d8cbb1ad8e21280b0f6acd84fa95db1565b3b6d23a917e602ab106540386e20efdedc2421382ae35d7bd717e5a93850ba4cfc8907b8952fded37cb89815dbb1d0c08d1d1e9c1d53e1396c90873591a1ad569f006c4770096ba273edf48e26ba544f2259a499d31e5073d6588b069420c3b50aeac3", 0x7fff, 0x0, 0x1, {0x1, r1}}, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r2, 0x40, 0x0, 0x100) 15:11:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) r4 = openat(r3, &(0x7f0000000280)='./file1\x00', 0x40, 0xc) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000000000066532a3164d213746917839af5d3d6f839eb7796d0a63b54da1c0b990775236062d838ddd83610", @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file1\x00']) ioctl$TIOCSBRK(r5, 0x5427) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000140)) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) accept4(r6, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x80, 0x80800) openat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x220202, 0x0) accept4(r6, &(0x7f00000003c0)=@nfc, &(0x7f00000000c0)=0x80, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="f0476457f0247a262f43ecba82db85af1facf628ceb3b718abc0c86a0e450cb59bacf23e7cdb3b47f531a0559b2405bfa7e44f6a09f9f92a3b53bb6157edd42f5ba934e1"]) 15:11:03 executing program 2: r0 = socket(0x26, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000041}, 0x40) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@device_b}, @NL80211_ATTR_SSID={0x18, 0x34, @random="10b6c1996e08b75e3fec588f15f811a7fb525a21"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x50}, 0x1, 0x0, 0x0, 0x884}, 0x4004) [ 2046.775885] 9pnet: Insufficient options for proto=fd [ 2046.787678] 9pnet: Insufficient options for proto=fd 15:11:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) write$binfmt_elf64(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x6, 0x80, 0x40, 0x8001, 0x3, 0x3, 0x6, 0x349, 0x40, 0x191, 0x7, 0x20, 0x38, 0x2, 0x7f, 0xd6, 0xd24}, [{0x1474e554, 0x7fffffff, 0x9, 0x8000, 0x2, 0x0, 0x9e20}], "56e5e432abcfab33c1fe934ef1e254c09d5e96413befa15ef470a19cbd47b740b5b72cbe7d11432386c7614fd6aa65360a063339d2a72548653ff4743175947aea2abde1efda4fc203808e2d7d0ab44a25c25712c848863054b818e9a29a91e8fce73d176b5f0909bb87ff3d8ddb22b9e5bdd48f9e98014d029630a736c7cc03672d8a9fd1ccf246ab510e81a2b6bfb9121887e639bb8f462f822fb48fa69423dbd6ce174d0d58b2c551064acc3d704158abb521c69e9b2f9eb0e05293b7486f37dc08ae7f028f92300cd2547f3894b64e6c8f442dc4305c62ced4532d86c5c425762339742fca85ae2e463e4fd2fc1a6c52a82c3e52bf514643936477044569da0b1adb8e9113d231da964f039298c43eaec7f8eefb506e5654575e83a84ff0158be8e1a5ed8501a51ee0047ba8e5ff54a25160f8a815cd6e49eb262c148eaaee02e3b3217f3a3fd84e0803951a539eee788996784edd6b27bb18edbf11b5a0c4dfe0b0bdcb48d9a010993f9ec26963425e3e731296cfad455d0a409f236673e06034bc0c0134de96375473c932330624122adf9975be7cfa9c9eec8c3f1f4ec759f29de722d9fd946e8eee3a654e2ab207acbce6eef8df49ae4f6279b27fb5b6e224102aa10f46eb3ec7a8da7f93650dc7bfcb57ec8152b1edc559b5d42b8a3550a2d09040f8a35cbf6b6a3e633061ab007d5ed1401ff1a1325ae6a33981acdaba148915b580c7bbcab39426408709cbe9f44c7b874b2e0f5e3191b10e36ef59d2ee4a0d31bce7e9fed6b667bd219e3bd7c043b4ca2ce0540f9450431db6b0420bb19825dd761c07028bfe6b6af6f06c6e33b7686bfa36f6d08dc155f2e0a983d2ab346524829e6abb0909d014d152fe5a201ba05f2a3c4a42ad568656021e1a6f1dbc8456ba5575a6ace1eb045a707a149906643149991d8bab85e95ead1e31e1f319bae937c2fc89c91cf6418a45111e6bbbe56d532db5ac573088cb4e4a12ef1f181bf0f8b36748ebdc3e9c6c65738b72c2a92bee11dc1ce5fd70a783fa92986691974a322da3c06e6810758d3da3bc37db8c1f8728268c74fb11d3860b387917cb6b29f3e543a77d2723137bda588fdbdb28b0e51f779b1d464b6eafbee5d498744f0a197c3ae1b3b0c946c5845ce9171c0e3e8d1eb5be52033d2c8147145e1034737f50db0f9a4ee42340372202ea38f0eae42ebd5f9a660203b1d3d1fb8649c2487c3e2c108c1f9153edb71f574acb992fb693d8f3c2198cb21f04e6dee63cc6082560cf5a2b4729fe6b5557c06ccf16659924289f60ccd8f579ae48735dc8bb869f7122e8268f409f3cfc9b96ba786b6897545e7d1476892dabe14f25f1cf28872e47f43e4eebf6f2f22e90a9516331aeeb9d3d1072898a00a5104dc5a7487ec3dd098548308fae30a3aea70dbd77000656c62dc942adfba730c45596965a1efe651c1b96b47aae605ffd3812e436feba63093c93920af7daa3c931bc7ca0057c37f6d15d3e44f8c6ded4bd85a59ff060d15dcb6aff3b6985f4d0fad5febaa75c07e2eade202891666d8e2d4791bde1759270f10d6980f11ea5ed11dc17744da56babe988132e8d428aba9fbbf0d3c54994aa4d8a421dd1a089dd10f14695d8caec9d7cd7c978804ad3be40be9f2af1903506b5deef7b8a46b51c98637204f5f3dbb62b2b2a5e3843ec691bb7a714302780d567f276e8e43380e57f6e41eedd8fea35bf1a871e469dfffee0a9460d6f87b16a9136eca4724cf41049ffc60de788684112e3bd53748f5a168a615faeadb00d772711f4b6780cddc1df8900d731e93e18c3b6925ea43d3175d5740151408c5293d2c8eee5037aafa9102831fc52eeb21771857f6f499346083cbc2f3f49306b49d3ed423cb49f49d96755ec36363a93fe018cd9674bde133274b70cda46c7e32f0976531c3a64ec78c6a75f5d280b6977b3998a91a404997f45a1b8f29cfe8b8b2385a6597afbf248a073536422cf6310e42f3ef3e717660e3af90962a317580b533a2acdb5adcc1ad29fced39d70e01015502dd39eca7ed81f829b62efd9229916c6912c61ea16bd65a200695dad65ace6f412083cd1ea9f3dc939db1e9422c328813314d066a2e6dcc6e60c1595e881c4bc7e15a3dea24bd1b5cfdc7281ad91e072b09649ee3da389e8291b344c212f5f4da03556b50979579a016c3fc93e9d96d82d1b8c501f809ac7432ad86ed446d220b4e5d7f5a83f53618b63ab3e8bef27e30f0a6feea393cee405ae02263af192047cf16d574df0e624ccec3d8c01c0c74339d40f7ca268c90a122bd9ace3ffc6bef1017c9962258aabdd5d178c15a50b46a3826c47cdca3cc241bd6fd4f55ce862c99e1f58cfafce451243c4f32c2f7be46ba778dce860e339b4b0bfabfa42e97363bb33223cf961635cb0492fe1d11e7fd01ef144b890b536f6e9085a850c2129f41e6feca4b6785575c5b3f157b3372912e3a8c6affb91835e12a60b319f9bf2fab45fa324e2a47bf1d89c4b9c9e60b338085c58fa3aaf43bac4d04e38d8bc0ad1e9d93558595a30fc5a42b4228922d5358569d69a88e89989defc2afefdb71ef673b98b4eff2ae0d4b3b28ad8667dbec52632cc06f23f1a6e73ec147f9ed2e5378499ca042ef52e92b25e0f9d610286baf5fe4b182d79e7fbfed57ba5c4765aa2dd1241f178dccb5b52b82b3fb5c7b5a3f57b2c43734dbca8304bc9a3862b8ab5ec15b24f0a876c028beedb1ec8492b9f7d3d68323604ba7c497d58f22dbb544bb7868c0f5c18f014fa77a2db03b93c8f9d20209b03a1c0c184bbb2a7956aa91175238ac3fd326d2993e793e6a891c7836f1a61354529cbb9989516023ce2751cfafa0ed4e9f59ae6022afe1684dac5bfb0612bbef681734f8e497c5cb1ee8d87d7d3db301abd4aa5a99ef2e74e9e4e3733d3f0f3bdfc5b995907a761087d34dd71575376d7522274a7731fee277fea33c7da5b722bc611ecea499b0b9d23fbd46805d418d7a80ef6e1f599a55f10837b8172d76d8e161f49c7fe803ffdafa3bc10aa07c56fc77a533ac713183c9ca4762e2d31c28c3f20f534c18c7212d67b9a7beb246b96d4d920536ed7b8cb693a9424dbb9461eef8c1a04b128ccb0ccc61c0cd58b59195bd1a7b9d67e18ba71f5295a3328f4d8662a1beda75ba1a1c1ab3e0c36834525ae7f1ed811d058b2db0e2b7dbcf15500c0732a9968ddefce0b5b66a3c8ea11038a3c0f7e8cc1467d204e1d95d6e36fb822a94ba5ae244000f83d80f3d39d25205add2399be2a4e7b31bfab781b8b6be650b434ae0423ff0978936da61f78a66c1372214c4b5f5a99318f178638064e075bb0341ab3a4be891a799e926bff3e16a7b7e98935e5396b515b0431c1ff0fc71a62d3c72f2d72626ae26c54b6cb30c7bf137a8b7c200962d3e42925e74590ad0950594f65c611cf5a931730ba7c30ec6c13d3a8be9af3efd19ca2cc48f117aab0434d0c68ed758bb1a1be2defe0e73c4c823f79144f89cf3687bc1b58edb8d20056d07d357c438f1413d23b9b25a1d1a3c27dd319e711695664a0ba387af693e256af6aa1b557833c90fb41300cfbdc6cc2fe187486a539f9aad9a30cfa2115be07858dd67eef02d26c05a321e53f87a836a4c2488927fa3d88dba0146ea0c6e11b62df4b65bfb9244234ce03df899d537a471c41eacc91d0fc02870854bdcf38cc0ab6634d9b3d0e4e8912950cf044a242b35e19c929984eda2a00bd29f5bf8af6453206929728f9d933d80cf219cd12c00b71ba177b11b0a1153f44aa892c22596c8232dd298796b05680785d1de2cf7df8cc6e53ee91ba8e5bf28b2ca7f6fe59fd1c43ca3816eba505a7a160c9bfb9a72442a60d4c860e2c2231055c6efe5b95493df9544d3872f29766231d5d804d549198904eb8e0338b41006c5db1e0f198f73e608bf9e8e5f1e08cdfa410ca6d03aa1d415a81c0bdd1b5d6fa762aeb6986c7b041403672ff16b7ae2f65147ce765c15c0bef3960f7fbc638cc16bda6b2c4244b1eea2be8a57b9512235a944f45fff474b0a4189bc850c0f1c058df4a117e13b0f931b8d7ec369fca721958480b474b9777aacbbc8b2ce460f605c513edede7618259c922d6cfcefd9de349509dad8f035d550dc9e7a4514e6477d86a81476f0f95b920f4a41e4835b8eb169c9e44a5b8e18d765b17ae378e87c76578930498ab712ddd090b5820c6f1c9434eade8e233027d368a72f0d7c6a7b128e4228d6e546f1870b6687b81d9fc35242e11d620c55e03b6201d9c177facb3cb66d1a7a3f65fa21d13744bbbfc7d9d4a1ef3c441b5d8537bca8488bd287ef64fc10dba0f120bb7e532627bffa4b6e2b3776da8ffdc00ca0f6df9bc320f9ce83814d2b8e2f6d84f7e4e73c937625d6de761692f983e322f54814d4636ce8c19ed76a5f46995290728542cc391f0fdbb344b0d109787369f6bb282c6daabc5932f174f91d4211567ac9d2890d00546358d6e4a91b030eaaa5306abb26fe26b3ea92b6c008cdb691d0f310c1c73542dee152be4c963b1fa614af1f0a7a5508a75ba4e69a9fa09057dca85aaa1c1cd9b780b08ba4663b1759bc62be33559deefe789cd45f31ae9c59aa62f63a5c8e3b9c17e3ba42dfe296beb2921587ebac683866247877e5853a3888a4cd1741c90dcc9959be4c973124a4e33d8a1cf3d472824944977f1e18480106a6770892f5f8847b6096832fcb620583ef45e84ad040125e00f0cb6e6f9304d03825f9122552df969856864507344902fb2d9b5caa4c00e4ed8fa606ef8c92b1739732dd215739de45b795012abefabc8e526e1998b6728a69ed1d4c0d8c86c116bc939750a11d910167c10ede0104ec7a399efc99d1c04dc3f336fdcce1b1593f98240c4933cff8def2a60753d8081b8d782cc0d33ac0c3826aaf8795ce2b33937288f72186ae2bdc695b44072b3d13956b28e01b7d2618bf9f5a2a7e60b3ebd9dfab132f6c23938277bd5f7783ed2638ed4b4f32d5b912cff82133d93e38cdfce3fa0b372b19a22018b2d363ae11ae3a1fb0903a3584241289f7c75e53f27573e30c2952e116c7342315a24e402b69adc57474fd710b12bd896d7866cce900fa770e05ea93a2553f2e52d7c44fce76d211e7710cf09f85f3a2c0c5baf1662a4a3fd95b147410b2d429d3b16464c45f69bc13055500cc25ef11689621e63d5dd2a612586506e1a9f1446d1b1c0a3d7d90a27fc4911f249eee3cf5f07c62f8f9c3b6dd052260b0365456ecbad0ffd6f97e03fb80f51ad2a7633e494f69f44a8d6e49a13bd0befe1584636417faffb4e66bcfe033b37ab99f90d586ad656d9606f61e6829447ec5fcfd68aa5d392905f45684f6a949e356b65a42808b160954d046faa4809211b70bd11c9e5c437f52d7ecf75e5f13de86ce88bab85363cb7aca08d42bcd69f1c644afc6f032eea8006533b748aa185169a39b9354c43ea7ea8e5fe81202b09998eecd0069401f257f8b167252ba6e2309c6cda703d8020cd86343f963b08ec989f944404a01ea5fd4a3a46733bdcd96cd554a4337fc09657b6ad6724f190de97c2cbc72412408276a1ca3caf0e2987764f2aabca2ccae10ea75a399b4a51760a5ccf57471fd34c575f4176f03874123559db5fa5dcc4773b15a80b0e11cd82ee9185f084f640e64a0c8efcc6349f2533967f2a1bf719471c0db92ff5730d4c11bcb0761e454be7a5a1030851b020b04cc99f03456774eea82358c8a914fed09ec35b8f059d4531e24d24873cb87cb62e54976709", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1578) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r2, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}]}}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x2, 0x2, 0x800}, {0x2, 0x7, 0x800}, {0x3, 0x2, 0x1800}, {0x2, 0x40, 0x800}], 0x4, &(0x7f0000000100)={r3, r4+60000000}) 15:11:03 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) copy_file_range(r0, &(0x7f0000000380)=0xed, r0, &(0x7f00000003c0)=0x8, 0x8000, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x80) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r5, 0x4, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080027bd7000fcdbdf25020000000c000400ff030000000000002c00078008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="0800010209cce0f59732cc1bc396f62673daa9879ce0514f0f67b110c19529256630ed7e56e8e63ca6614654ef9095a9ff5435dc2417796cf3466f5bba8fea603ee943515167a4ae87afa891ca1db10c46f1e51dd7e7c76f9ffa8990151ced5d540ef934fc0a9da146046c9f6d739e8c095a9b30736d3fbef57e8ef1e30ef2dcec0d2796455daea8d587aad990badde0f4577c50ebf9e325558cba757c040ffd1d3e899b9d3ca7a835cf5dbaf25287740b554ae7cb2382b004c903c61e404124a23eb180edccc0a8f031fee299d72ec45c67844d55867ea768c278792712725cb63a0678fa5ac7c1479eedfd77892a6933c2cf7ec7", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00030009000000000000000c00040001000000000000000c00050001000000000000000c0002000500000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40408d4}, 0x810) fallocate(r0, 0x40, 0x0, 0x100) 15:11:03 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x41) 15:11:03 executing program 7: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 15:11:03 executing program 0: chmod(&(0x7f0000000240)='./file1\x00', 0x182) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x7, 0x2, 0x9}) getpeername$unix(r2, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file1\x00'}) bind$unix(r3, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x402, 0x0) sendfile(r0, r4, &(0x7f0000000140)=0x74c, 0x8001) 15:11:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0xde) openat(r0, &(0x7f0000000240)='./file1\x00', 0x3aa00, 0xe9) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) recvmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x6e, &(0x7f0000000000)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x3}, 0x2) 15:11:03 executing program 2: r0 = socket(0x24, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) r2 = mq_open(&(0x7f0000000100)='+\x9d\x00', 0xc1, 0x4a, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x9}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x500, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 15:11:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) r3 = accept4$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x100800) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r4, 0x4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) openat(r5, &(0x7f0000000280)='./file1\x00', 0x48000, 0x0) execveat(r4, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000580)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='9p\x00', &(0x7f0000000380)='$[\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='9p\x00', &(0x7f0000000440)='\xe3Q@--!\x00', &(0x7f0000000480)='@\xff', &(0x7f00000004c0)='\xaf\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='9p\x00'], 0x1000) copy_file_range(r2, &(0x7f0000000000)=0x2, r3, &(0x7f00000001c0)=0xf32d, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d95e1b342429e74c1aa25b3fa7f9abf69a92ff5d4a2bf66357ef0cc21f68f19af77b5ca79d2254a273f0a39c120073bcfc26035999a66d4a445640ca7187acecdb67ca871d0720aadad65c981c7db3b1c125339e5cc4824a65b12580f9b1bd397262db0350aca7d86a95e9193eb7dfda1268e3a2136ee31c75bb4f20bfbab3466340e5362e27134a58b61502c020476be2d5005b7d1dcb308324760e459e47b707e7db7258f2ae257a9fa12e0b858aebe8e4bbb3ee2a42dc3ff1b5e8c173ea3d83ab3538501341df61434a7075463f2906ac4ac6b19145ef8b9536ce7e079ca1879cd", @ANYRESHEX=r1, @ANYBLOB="ac02"]) 15:11:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x15, 0x57, 0x3, 0x4, 0x8, 0x2, 0x3, 0x689d, 0x11a, 0x40, 0x128, 0x0, 0x200, 0x38, 0x1, 0x8, 0x5, 0x503}, [{0x4, 0x0, 0x8001, 0x0, 0x8, 0x7ff, 0x80, 0x400}, {0xf5b665b252c5a8e, 0x6, 0x2, 0x3f, 0xf8, 0x4, 0x2, 0x4}], "56fa123536c6eac1373a721bf911c7035aa31e7301277e152d1006b78c7aeac25c26bb95ef68f21a77ff0fbba24b7ea38e3038648908dc1d604b0e3fb0dec1ba059fc4d2b64a9d2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaf8) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:11:03 executing program 2: socket(0x11, 0x0, 0x0) 15:11:03 executing program 3: r0 = io_uring_setup(0x1033, &(0x7f00000001c0)={0x0, 0x51c4, 0x0, 0x0, 0x164}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) r1 = syz_io_uring_setup(0xb6b, &(0x7f00000000c0)={0x0, 0x4000e98, 0x0, 0x3, 0x1e5, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x40010, r1, 0x8000000) syz_io_uring_setup(0xaff, &(0x7f0000000300)={0x0, 0xd921, 0x4, 0x1, 0x30d, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000380)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000a, 0x110, r0, 0x10000000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0xc42, 0x0) lseek(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000008c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000780), &(0x7f0000000880)='./file0\x00', 0x2, 0x6000}, 0x7) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000740)=@IORING_OP_STATX={0x15, 0x3, 0x0, r4, &(0x7f0000000400), &(0x7f0000000700)='./file0\x00', 0x800, 0x800, 0x0, {0x0, r5}}, 0xc1d4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200402, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x2]}, 0xfffffffffffffd5c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r6, 0x4, 0x0) write$vga_arbiter(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14) pselect6(0x40, &(0x7f0000000180)={0xff, 0x1}, 0x0, 0x0, 0x0, 0x0) 15:11:03 executing program 7: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 15:11:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wf7no=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 2047.031383] 9pnet: Insufficient options for proto=fd [ 2047.061920] 9pnet: Insufficient options for proto=fd [ 2047.065846] 9pnet: Insufficient options for proto=fd 15:11:16 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 15:11:16 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) signalfd4(r0, &(0x7f0000000040)={[0x7fff]}, 0x8, 0x80800) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000000c0)={0x4, 0x80000000, 0x3, 0x5, 0x1, [{0x3ff, 0x80000001, 0x101, '\x00', 0x1080}]}) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:11:16 executing program 7: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 15:11:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:11:17 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x42) 15:11:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = io_uring_setup(0x396a, &(0x7f00000001c0)={0x0, 0x0, 0x8}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) fsetxattr$security_capability(r1, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x1, 0x7}, {0x0, 0x1}]}, 0x14, 0x6) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000240)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000180)={0x2, 0x4f2a, 0x1}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x41c003, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000000c0)={0x4, 0x81, 0x8, 0x1, 0xe94}) r4 = syz_open_procfs(0x0, &(0x7f0000000640)='map_files\x00') fallocate(r4, 0x40, 0x0, 0x100) 15:11:17 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x84800) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 15:11:17 executing program 2: fcntl$notify(0xffffffffffffffff, 0x402, 0x80000001) socket(0x24, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0x400200) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 2060.478389] 9pnet: Insufficient options for proto=fd [ 2060.497183] 9pnet: Insufficient options for proto=fd 15:11:17 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x2000000, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file1\x00', 0x88, 0x40000, 0x23456}, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 15:11:17 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x43) 15:11:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d07c5ed6f66c3efe90119a4b24d5a673e4efdbb5fb4b998b1fa03ae9a9b8248cd34ea417679e87beb8b7207ecf85b527bc76a99d55bcc070000de13a7aeb9698b458664e6fe4cd3fb5d6a7f75f3c6aec6637a2fb3127eb58f5c6556e69faa726387054b12a94e3b533c80047b3664e1869568b6f8f43a1ef70218b0b6c5c2d10f4baf80e1d7b8e73065a491d1d134fde8724e86a499f660d829a7d4c3505a61519d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x2) 15:11:31 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8545, 0xfffff8ba}}, './file0\x00'}) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x30f660, 0x85) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept(r2, &(0x7f00000000c0)=@tipc=@id, &(0x7f0000000140)=0x80) fallocate(r1, 0x40, 0x0, 0x100) 15:11:31 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x44) 15:11:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x5c3, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = accept4$packet(r0, 0x0, &(0x7f00000000c0), 0x800) r3 = dup(r1) sendfile(r2, r3, &(0x7f0000000100)=0x33, 0xfffffffffffffffb) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r4, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB=',version=9p2000,access=user,dfltuid=', @ANYRESHEX, @ANYBLOB="82a4cf72fd29572e605412d08c88fe02616399ca38633d7dec132481ae51af4b1c49b44ce0c5f2d481895671dccceaa05713b36d247c7f901b446743e38ac4a9fff1c543c8e96429e8ae7a6a62532d8089136730e4917ff0613d26", @ANYRESDEC=r4, @ANYBLOB=',cache=mmap,access=client,version=9p2000.L,uname=rfdno,\x00']) 15:11:31 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:11:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@context={'context', 0x3d, 'sysadm_u'}}]}}) 15:11:31 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x55011df4e6eb1630, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:11:31 executing program 2: r0 = socket(0x24, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000007c0)='io.pressure\x00', 0x2, 0x0) r3 = io_uring_setup(0x6622, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x260}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) r4 = accept$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000c00), 0x1312) r7 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000c00), 0x1312) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x204000, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000008c0)=0x0) getresuid(&(0x7f0000000900)=0x0, &(0x7f0000000940), &(0x7f0000000980)) getresgid(&(0x7f0000000540), &(0x7f0000000500), &(0x7f0000000580)=0x0) getgroups(0x1, &(0x7f0000000440)=[r11]) r12 = openat$zero(0xffffffffffffff9c, &(0x7f00000009c0), 0xb8344786adc6afb4, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="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", 0xfc}, {&(0x7f0000000140)="1791402f636381fd3acbf4f2ad2194ea33e4acb251cc2cc0c343ded30bba74e7f12dbfca531406d1a3503be653212c8d21d221d8cfc505811b34291a642e7c12fb222e4037ec5f3ae9b053", 0x4b}, {&(0x7f00000001c0)="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", 0xfe}, {&(0x7f00000002c0)="c567dcbcf9768fb8fbfa5a99f1d29cc96c8a09eeac2c66b4698a98dd31788685bcecbe437bba8c16f3adb8088c147f859d246fb7163f7cf5ec2806cafd0148ac94070a695df97300543e188a61f6ad6063f78c8217d97054f5057d9d52e98227cf6d77e27f438e6c6888cd18736a0e64a460c4ee97d2698754b525ca26cefcf31f52970d8a167514efb3dbad07556d63338a631237b893b5f70cf3d2ac0c21516633bd3d657fda6350f6c14385d3", 0xae}, {&(0x7f0000000380)="1e2231a1b51cc504", 0x8}, {&(0x7f00000003c0)="635e17903ab34a0b19863f11d9399aecbcdff4448a3817d3c42aebf7814e2b2b350e779579b4eea6416a8d6ef0db49a79e940eccf6fb6db571e6f0f4550c747da9875c5d0243f9409be327283736adff273a3115c656a70c1f5df88df2c7ee4c47126687fd5137bc4079582778ad696ce9ecec6e76eaab899790c15dba44e89f5cad410ca670454886dc45fe102151202f2b7d5ba8b6364aa14958ade905923c5f5f6715b51bbdd64b785247e1a9eee46f50aadfcbb4dae220b81f97a63792af55c95b", 0xc3}, {&(0x7f00000004c0)="6d3a6757cb4b7451142f2113dfdb10a1590181681255ef26b0ecff1c16d3f32fe360a039571927566571971f6016d81c5e24956116145cf43383adc5f4eb479f34d533e3a8398cb7d8cc2aff5ce6a43f64af1807b5d23d9a1ffa7e573b716a8b3686b6ef5ccb50827752c10e9703dae6d6f117f44d6707d8f14785759931c86afd7e6391c81ce850c7d9edc7867dc4ceee046d7da66f9eef00c06ea89d317f2d171ebdf467656d67b725444da0845fe0e225dce46553ac926ed8ba589b00e883eb33a80f8e427fa81882a2b2af8953", 0xcf}, {&(0x7f00000005c0)="2b05d1bd906fb22fd8f9da42c284732fc1310154a8449f840ffb29d4a0be0a6a03b12dbcd27987205df6d667cc89f7559dacce13455e401ec4d54ff91fbf868479e44cb7747b1b123069c073e31b0bb6faf568679408b011e2ad7c7aca7fb2fa39108d4c1ea5f4b85a1a46308450ffdd6723cd7f9d2a0da6eebb29984b0c8ecba89d6afdeeb182ff9a26f27c383c4cefc58e1ca4851847264fecbb6efbcd9e6e3e49a453d84455235ee35ffe3698243b", 0xb0}, {&(0x7f0000000680)="9d5dc91b761a5642a250ea9b9e348057cd488a142a380558c0310fd9078aad8e7fa938dcbda062ec27699700dc49a8ece8b39892ed33bce219384e8723906952552ef53a0c6dc82592fb55385c1a9803e44ef326c109ff", 0x57}], 0x9, &(0x7f0000000a00)=[@rights={{0x20, 0x1, 0x1, [r1, r0, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r3, r0, r0, r4, r0, r0, 0xffffffffffffffff, r5]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r6]}}, @rights={{0x24, 0x1, 0x1, [r0, r7, 0xffffffffffffffff, r8, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [r12, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0x158, 0x10}, 0x4040005) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x8, 0x7fff}) 15:11:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x9, 0x9, 0x5, 0x0, 0x62dd, 0xc1a11, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xc458, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x408, 0x2, 0x7, 0x1, 0x3f, 0x8000, 0xff, 0x0, 0x19, 0x0, 0x8}, 0x0, 0x200, r0, 0x1) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2075.049908] 9pnet: Insufficient options for proto=fd 15:11:31 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="1591985c00ae2c21b06a38b55c7bf350d43802c97171f0a5d7551adc347a0e641a916de449f67a565573307dc5a63ed7277eebe994f567a7bde1d943c8218bc275c8e4293d653e57d89697d440ffac984333e387b3b8878fa47bf74530c1250e603137df3161015a5ac61b8d0bc5536f0e5701906cf367322c5d78ca313ad2efe4f15e970eaba53990b484495db1a1b1c3e9d1ed123597a29c3a5318b56d3b1f886b58a4d95c57005fcd789910a2420f50ab917c92f5bd511e6087af7e8bf65257fa55a0703eea9e6e750a2024f5378628b1e372", 0xd4}, {&(0x7f0000000180)="be7ca5e5dbe201fefd1a6796faa8c9c6c3a61f70d305e44ad4b968a1c81f07d198fed2f738be7f8302f85ae684f5033ccd0020dc2ba347e45b30ddba4699cda2bf445f973fdf8e9a73b617689dd63045641b08ed3ad6c1a446a44db5f6e153d060e7da6b07e34741eaa7de6d3dcc773696f0dccdb85e9e6a31ce8aaec616aeb8fb596fa52b5da0645cf0d41e5d1be49cbf9770f817035ce952f1f5f60004481e52e498b8ac1559058cb05616670d982d2abb5272ea70bcd852e20f12d7cc65f4e7f8062eb97e94c2ab147b4df12b69d27f3e23c4883f3fb9c3c52b8d02b887de515f9d611f0ca8ff5885d1429084f681f14f5c391939f35255b371c30ea7", 0xfe}, {&(0x7f0000000280)="85c0209f477467fb1207a3960024028eab3fee4a0541fc4b6ab5d129c655293a95679f98a22af7147f75b446c2e6a61dfbbef8fcdef800dd8c117d52ef69261f44769fa9808e9e932260a068959e1a229fed8da7bf0735cd0c052af37dd0693b46defacf204678fa90f08d20f83ed4ecdd9dbb0137b24ba3532165f6447c15269b9234635011737fc367e7ae7442d06865912501a751f13895f39d8fcf0c8a7414b24c2d9212c003e45eda40f67e9e73c615157d5354312d0a9c40ab5d7440ea0c95953b0bfc7f4e1ac7394f3d0abccc7d90db6eb8", 0xd5}, {&(0x7f0000000380)="dff80201aab2", 0x6}, {&(0x7f00000003c0)="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", 0xfb}], 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="10100000000000000100000007000000fe551ee6467290e7f44e6c5134b7400eebfd0f06820cc6d1d02640c7eaecc864c6ef6f470100e500c1b296272c5ec54658e9d536ae34080ab7c3881213953aa532d5201e9e1705c28d8797e4700525b043c51132646fb5266a2d0d583a3cc01903a0773dbd718821b69ca86ada2afeca9bef59c304af8d55b5efde3806b327cfe89cd323f62108d61a592d9d133c996a05ccc728e57e2876fa4e542bab7f9aa716787a94cee8d291b7d0b472829940557b8c95c420a08e8ce6213e6649c88f04fde6421f9639a10255a4900bc50ed1ad7af00e442850b78477d00d696631e955deba4efa67b3bc23093253ab113791fa706e1e8939baa6c2fb3d9e054df6f0b5bf780192ce5e6ba66123638a00551b10798e242a70bb86423421e17e11379c9fe82bf48ea5f5d2dbe74e7a94f817f765a5724ce3889b237a95fcbe92a67a798c7fa827dff37bb199e5267cb23f1a7532a83380d31615133b2b82d2fc328afa22bb0229ca149d873051d7136d6f48ec477bb22563666bc0504721efb44d117110d36da9a7d30838985f3340c85e30970cc39d686bea95ea072e5b8610102abf305fb053e57e6e863677a98a3865f340aa995db4facd936555002e598abdda722108691d6fccb635de22abc0f77b110d95d6fcdad67c2d0125cac44d4d10164374ad4dad51d838ab6d367884788598941b0d8ce219d13a7290f982b40f605535cba0cb689fd34f011e80d3e8d373f1536e623ff41794e226677766b3a54fa8a619a1ed4d399c1537882f571018d7768836f5a4bfbc6d2b4303f7e0130ed2d1236f3eb296e0efb862fdc889d534c0f552431acfa61ce508b8d4551e3699395df57387c719c745a6fd078997d306b47299e620ca09acd6da6f5757919ffe5a38adb337eafad6794c6b8103de491b131357c9faa8a458dbdb12ff5ce846545d98d6cae2e4bb06810057788fc540f71536db03f671e3b8543394f0648502c475250c434b109a726c55b51cf1a99833b4bba50e11622c211e5a0bebcd01e3c6aaa3e0f532a920d1f88503b9f49974f2567e1b4941747692d000afa5bc8aa32ff81f40ab938821b101a3cc2961aef436a8a0abb058368f894062dbe83fbf3a329b03f55155a55f8a5135e57c0c087279b42056200aaf3276895399af593cc1774ac0cc67f0439f266f2a4f4d364b8b254564cc93de5c3ccf9a957b5e3b668f232ab1aa11bb1b61747b50af1af7b9a836ef556d6e01acf28a82cce932296a16e43e501182111559aea2a9b556a5d1269816529d522683ce82729dc6017dc171f0968d9fd772218897d48d75f817d89b866ed2cb7ffd62b7d21c962b82fa62c272810f5996061f3cf755db63e5c878f3720d626d87f6707301dd2ca6fcbee05ee64425cc787bbb09002957f26b1f0ec941f742afa3939a150a66e38d32147ba9851d16af7bfa9459f4005737274f47c3082238cad9084883ee4567f8cc57ba38b1101ac2b31975a55b3f7641fe9300b6b543a998cc4d307cdcb8525bb0405955828ff895046eb7010baf35c1d027ddb5470fdfdcd9f4d35d7061e2bb48cfea5aeb7a7a2f6d5e46fc101e9cb4fc31243a02147e2088cfaf33f557a2b82781ab5ef7df956e0f5c4fe58ea0ba55188a3983ee5bc7870726d1d1c7dae6acad37b9dff86a39c1dc05bc64bd3bd59b8e8a53f632e5e8d0b9a7183e6ea08c61ca174d72d4e3634652461729fd791a9eb419cd6976e51bf579610fcc13d2c533ba7767764eaabb15a472f047ed4e49adaadb87fc71f99cefc6212014e5dc3c474e53666226dacd0c91884fa198fabd5b1df75572bebbf81aa5ecdd4cae2794489bac510b392d2f7c16eaa3baef44fa84ea75f0eeec6db528d4154696c4b54a620e0077c66159239fcb766e017461bc0b4f49b54cac01aa41d778e449d20b5eda7e5bca0dad664f8a706215845f142d0b1df7c320028c262b87a3edcf3c72fa85f4bc6b56d5050acf76b3b03a842b3c1fc52ff324131836b678be8ec66fe23a69ae554cb0ceae272e774bc6f741f12933e3f8c2de245d36cc9f39418bfe53b733d6f5197621e38ffa8bd5098dbabf4fa75984c084612951d148ff38a2acc9624dc71f30b2a7c7f79d078fbabd6ebc871bd88b9e008ca0470e3b284073b98a144a2b6c4d7793ff997461e7aab7e87251355f27eeecd0f9a54d0af33f21bd2e253f557fb9c7f4ce158f20c528d4a289c8e42456c3d720a58b7a1113a0c3199b9bb772865ea5981bebf7c3cad3d63312392ea4901f46c01ba7b6811cc9b9bea308c732658b796857efee20cbf33b69c3b1263c6cd2d9492943852ac51ed22fe6302992b8e504cac70df962d72f75311d4fd944fd48490fb3b3f918f47321997f9ed71da62f8cf2d786ec5f1e8576b30bae3a242fc09a75a4a40a908c0a93c0ad8b01234ba8365923ac7102ce52ae599f8da32be63551aa9b07b464fa2f1c8b9f049c4c3b08fee45c78772804e3b864f798602d97e4c742661e7ad700a21e0d6e4efec3d860819754693552926b966ac6622313f78cfeaf8e25a3d57e627f5d7ccf521c7a26185875d41c4dac9ac3d03340f894221d3c9bd8ccda5922e830ad0fc48ff02f913ba767bd46f2798aee6dd4b03f2962ce4cf3e1c995d24bc745cfd001ff4fc4a40422fd63f609e77ff0948cb09a4f8206237325b20ce5753eb2f762dd571219b88101de72df327bd158005f6246143572d448c44bf76f53c61ce2e74624ef8a940dfe5915c2f990bbd47abc1f694d8ba8a3eeafe3d636156a32785e4c85b3097992a6d47f23655b99b7f91037fb6338d0084b862fc969c6ef553b7fca154619b672c4a420fb70d0500521956e7a50fd768c29217b3da71b28f6d09aad111fbc5d53a97cd0cdcf24b171cd349dc6498ad0a272c0874c2d157190f4a093025d55838b5166c2fc99eff58463ec765b282508e0d7a71c2da00d30fbed220588f7ccc4ca06fd2594f98ad590f7a4adcb1eaaec00f72f8395d29079178fb5e2ec676ad688d7082cf40120c25a44684563e7f97c8c767333c31ef8d44fea39d9bb8e8ea3c4529965088c9f3d33800cf1fe1d3bee5b0b8c5983f2d23feaf39c16d4cd73db0af033bb0fc24329f92e1b15eab40ed15429a61096dfc34a7978838351cfd80410fbde9d03a12951d4f62a8488f186e3c2bbe959a9e8842ec99d2a3ac9b3483c9acf588091a1983b20738b590f128f62c525789e39efe3f1ea84c06d8b217f8a6864b00edb5b2c92dc017ed4d240df56d3f84e866159dab7721e5835c011f2c029c61f328a1a80c4ca2f8144bfe892a62d26581a26f7c80b80236889c3973024ec3d4f1f443283c595f38683321fdc9407312478fd949ca8e2ff45a371a47f2c84546164d5273d27e3ddf1d9f5e3f4688617fdac0173649f20d614bb61dd0d12d4014a90806fb8bca5832a326dddabcb3e9c1f73bf2a74cfea43459be12daf7795c3c8d34bfc7dc1adbfa3db40379cbfceecb9c88e5a8a88f9c92f1b65af5812f3528d9d197e5eb3de05291dd3d3d5fc7835adea8379dfdb4836d38197a2aa07e4a12ec88c24badc2e28ff714eff261d855e1b50efe567b41e08b9af4899a69c611e3a3a97caaab76ca6a329ba17c9227817478644f1c55f0b3a4e0487dcb972fca77771ecbcf291b182555399f9e1fa0cb0f5e89b500ad6ff4afa968bd89e056bd247538bf748ce2d1692e2d9c00dbd4e0eb98cc6605a7a962fa097a2ef7d303e8301f24821460d75179c0becfb74219f45dcad92eb99cd1b8471f3364b667fb9ecd9f945f169e8030d4d70e386e5edea7c1e78318da0b4a9c788b22a3aa276d13cc2b36c490005c78ff010ba8c1aaf6fc4465ea5db76945063a18f43ab0d2496d618aecaae1de5cd610f93025f2ce588678550bb1253ad9e18dee4ab62779a4f119bb57622b7135c5528d29fd390051271fab1bb5e64a5d0cb3fd43fc1da310db8192a13330e61e33a1ea464566bfbc6082fd11a5b142330ef2af5f8931cd91d56b54b276d42995535bed7f50dbf7c2de601205a71eabb2fdcbc1f07e2367bc96530878a348c2b498ba309a81a3b632ae37081436ee93252ee831e03584a7621fe1c94e8f3f2377c150473d7824551288c0a634b22d8b82ccd4d5d1cdfbc9ee7be7866c812af63fc9cc830dbc9f194a5120700f00efdea0b6b96100714aad22b399c62aab55235a72f4bbad206cea9a7f6b5bf4809f1e2040c3261b539b99f04d0281c85e2025972413c97733713933c93831a212e4e3dbbe21d7070107100e6d3f805c073cef831c84a4cc1572db6376e845ae0ebf2a256a1f00aff4e4a26c9da4446ae3820116473a67f0bdc81a91ec681a8849dbb072b13558454bc685e4d53a54950780ff229590cfdc9ce90940fcb4138c407488bd029b756799f14a31e5bae8d45154d19e42f4e0b1f2effbbd9e5b5206cf1e9aa33023aeca24fb79c82651e084bee2655d8f6173e35cc7bc38e68846086ae52fd71ca198b4f91f442f8a0fef61f3eb48a3a8221e657fdd9c84edca714b7d2e8aeaef73253087ace5c66ed6593f739dc2a019e4d70d114d1f8e1e4c662c3052fe96548c6edaa50370d2ca8e8fde08e1767faa1181f5c2a5a58e4e17ebb071fb01edde33573e2dab6cd80158dc80b8b16514a095200f656fe5b7d044c2992602878c0b97b758664cdfef3f921f1a4e0f0ba3146b2aa961afdbaea0f38e92124cd70740603ea2a1901178036754b56a28289693aa658e380a1f1c6d3a3605ba426ad0a073db85f4169dfa5aa81b85b7c1aa5e0f8fb56290aa52714190d69eca9ba1de423038ecdfa5f0c74f30fc8537a52cce551a79f420e4a7da4b13738646011564503ec10d151a6991a43b4accec948a73330a10f990f0e2228fac058670afae366f7a129c88d79a32d7f63314844fe32395100db6e43ddf940d76ea901e06b2f1985bc51c91b8af3f6fd78af55b53cabfe69bb9e70f0a1609a360b331fb947433547ff34fe18c842165c4846cdb682adbaa614103dd46f5cdf88157ed6087522bce11a5a15a12929951967f7dee596cfa80b744e7c550e74f5a8b96afb96c3f5c664a767e44fba028a132cbecc247d40b1b19d77223ead3dab0351977aa4df3e6b86aa1769548188c5bed863d42a9d57755553ff0f8df8a04e2a0561a34d1e7146d102fba474306f01585fbba20cba1f918ba30f6a4ea37dd3f59b94650f817edf3bd5fb5bab6c98d149fa88b173523baf5200b6df6200b5655b7b78b4175418d1ea861bafaeb22c7ed788066db524de13b403c157c8495288e2a0cf2231ef3135743da32a25e0605f5ee0ba972836442631c3f21e45df195c7b5eff5da8b3ae7518f50a3064329a00982d2b71d44382c5562e5632d8e0171fbd71ff19b66530a4edf91d8b0b31d64a451c0cb7b23376c10a51ec6fe7990a0d5c7c2afc0dcffc176ff91e9eb3623a1ddda69af812fdbe96de8304913fa79ee308ce33dd7c435b23e6248052d90c2d5239cb5d2290f62948be87a16e67b0ff8d12e76bc4fda35eb2e12c1103cc11f1cada63dc8beb9a6f1caa42940750b7f87c9916a22e1b7e3a4280df707c2e259576ce286b6624b44840f236e898ebb88693b97cfd9d336b74aa562dd7205d42ed0a60f749418c60e613d6f5cfbc3511cc40af2554d5c7458b4174af28d309021742d0bbb7d4bd4698abf34a75fed483dc1380b174a384119796441aa97e7b4712419544c4def95c8f10282cc8a54fe6de17278e193e875b95c1f094366bb8aa796780f7e4ab7b0e9783eeb94317e89f82a4c868616818f509c6515bcc4b69853f472f7151809454da1740068aceb45f5f60e9d0a4b82fabf80ea55db02ee0c30c980dd5a8112706dfba9616260471639d"], 0x1010}}], 0x1, 0x40000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', 0x600140, 0x101) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) fallocate(r1, 0x0, 0x0, 0x8d2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) 15:11:31 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x480c0}, 0x20000000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 2075.063209] 9pnet: Insufficient options for proto=fd 15:11:31 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="976ac1c23e3c09a5fff4578c4d66eab48c8d841f9d4b4364b31af360eeadb470314d4b060fb620235835c8a0a6df4d699ba46606beec102348497403fff53f5f4ea649f135e6c0578c9c809fe8e813e0b4a559128216573857582b4f539236f410eafb8a7b741bda7b456ae4515b1c34a69c82108ee315f235c575c5e84f36078df54e39c52ba5dfb5bf404181af818e4636d6a1cc134783b57a010eac55a8b61e1acd1af8e81bc03ab6cac56b03511fb2f27dc23d19d068a3dea28c4853eb", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:11:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="78d7abc1b1f6c97e14b20b0affde2e04cb987fb450f61f34964b11a9e0dead9243cb5b706fb7d8804889c9b5e299499beefde74503a93184875ae36ab9f01716f3516fd2ddbc14ad2e01d579131c6b6bef41553a6665dca25a9845"]) 15:11:31 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:11:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x40) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000000)={0x2, [0x0, 0x0]}) [ 2075.156069] 9pnet: Insufficient options for proto=fd 15:11:31 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x45) [ 2075.176424] 9pnet: Insufficient options for proto=fd 15:11:45 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101d42, 0x62) r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 15:11:45 executing program 2: socket(0x24, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @loopback, 0x4, 0x80, 0x1bc9, 0x0, 0x5, 0x210010}) 15:11:45 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x46) 15:11:45 executing program 0: ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000300)=@manufact={0x4, 0x0, 0x800, "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"}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:11:45 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x156, 0x4) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:11:45 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:11:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0xeb3, 0x103) 15:11:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x27}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x8880) bind$unix(r2, &(0x7f0000000100)=@file={0x1, './file1\x00'}, 0x6e) 15:11:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="6390"]) 15:11:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:11:45 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x47) 15:11:45 executing program 2: r0 = socket(0x24, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:11:45 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x400a80, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) 15:11:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x111042, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdn\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:11:45 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci_express', 0x200000, 0x2) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) 15:11:45 executing program 6: r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x800, 0xe0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) socket$unix(0x1, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x10a008, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x9}}, './file1\x00'}) faccessat2(r4, &(0x7f0000000180)='./file1\x00', 0x108, 0x1300) [ 2089.058386] 9pnet: Insufficient options for proto=fd [ 2089.074910] 9pnet: Insufficient options for proto=fd [ 2089.089041] 9pnet: Insufficient options for proto=fd [ 2089.122889] 9pnet: Insufficient options for proto=fd 15:11:45 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:11:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8200, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = open$dir(&(0x7f0000000000)='./file1\x00', 0x200200, 0x8) splice(r2, &(0x7f0000000100)=0x5, r1, &(0x7f0000000140)=0x100000001, 0x7fff, 0x0) 15:11:45 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x48) 15:12:00 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x49) 15:12:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c00), 0x1312) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001980), 0x103000, 0x0) r4 = syz_mount_image$nfs4(&(0x7f00000019c0), &(0x7f0000001a00)='./file1\x00', 0x3, 0x7, &(0x7f0000002d00)=[{&(0x7f0000001a40)="021ae855a14d2c0aecf95a54d583ba774ccc267de4e9c3828f27bc7da0220fd8c1597d2effb07eebe27c4c5d2eba66ce73cf99e671ce63a071ac01ee", 0x3c, 0x7}, {&(0x7f0000001a80)="70cc3ca16793de02683ffdbe541b234a6c98ee8d45079b37e09643b112426a7949a750777c2c0860978f2ff1d36a80c8ecf257fa0909fee8c645be6410f694156c2161781b62a5d528c6b078eb904b73dca7fe3eec7a5b4b8c4bcf096d935f06f5", 0x61, 0xfffffffffffffe00}, {&(0x7f0000001b00)="f64164365ee331cb468e1af6f05fa1823317307153b0714575377c93d17eda9706f93eeefa02ec4af5bd07003568f248dc680999ab68d289897a0d582bdac117db35237151686bbdcbc75e62db2abe92a8cd0b371b38ed263bb48887", 0x5c, 0x7}, {&(0x7f0000001b80)="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", 0x1000, 0x80000000}, {&(0x7f0000002b80)="06426622d8b1b3b617e83a4bd55f18658d2faaf4c84fdd5280f9e29bee2c057f451659faf0a0ceb9ddb5b7b3782288704da4c507620133a2a47b6eeecdfa0196f8ec59c79edd6576456a3068fd8ff3ade89b06b26109f9e4a7a9b024103f7b427fd7dce2d3d8dbe023f4a5b111b7bceea6fcade6bd71ce25b7b525f425ecd8b35c3d8ce1190bf174010f28c4", 0x8c, 0x8}, {&(0x7f0000002c40)="78dfd8fb2ac578f65fbdbcb0f89b2d9007e4fc723d0c4c1395e035d218d477b9e20fc05c9b5a33800da1bfbac98d971fc6d0a2474029ab23c900d3c866189f82db7e335bd13b45137af04f32c9b04f7c6fadfc6cf6b6", 0x56, 0xfff}, {&(0x7f0000002cc0)="e2e6055b068a85b533ab405927f94d90744ade16ab4a9fcb1381e5dbe7e4455cd78a9d", 0x23, 0x7b}], 0x100000, &(0x7f0000002dc0)={[{}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) r5 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000c00), 0x1312) r6 = syz_io_uring_setup(0x4691, &(0x7f0000002e00)={0x0, 0x6579, 0x1, 0x1, 0x36c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000002e80), &(0x7f0000002ec0)) r7 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000c00), 0x1312) r8 = syz_io_uring_setup(0x2d62, &(0x7f0000002f00)={0x0, 0xcffb, 0x2, 0x3, 0xc, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002f80), &(0x7f0000002fc0)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) r11 = getpgrp(0x0) pidfd_open(r11, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000004380)=0x0) sendmmsg$unix(r0, &(0x7f0000004400)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)="c74e62fa7a3e3a7ec212ec14f6f26fc4a04bcfae4315a46dda393d4dd40676b1ed1068fcaae0cad4e1e6ff615397bf33904282d7c49a4e3f591f219fc00b2946c998854e071b8fb2781a213e80f71e544be41427b7e6e46659d4deb51316748c9b68dbcfaa40f016f638f624c0bcbd57d940662f5854e4aca41f961431be9963bf21cde3d0ef7a220bf8d84ff5d552ed5f2e6fd399ae43ded67462905f77f98670a959d75d8c82805fda545f53c24f3a2ced", 0xb2}, {&(0x7f0000000000)="456e5cf2af2430976220a19cc75dc73723ecce0f4161d796fdbe", 0x1a}], 0x2, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x40045}}, {{0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x2000c006}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)="a20d74bbd438fe94f1ec5c2c5a9e3a8bb2b3da83f5306ba0f756689deebd2daad99aaf2f5a9c10f141e0fa0d", 0x2c}, {&(0x7f0000000400)="e7d560e0c029d4bbe148d591f7f3fd6b830a5c7c2a6755d2149b34153475aa36f825b7ba7b7bb96c84dc91b38d900f1000b3ad46a843cb1aaf9d0cdf13b80dfbc892e6dd0446b4f4910e129a46654816e544eae79d3336476812e90f377ac1a569c96127b8233b3ecf101c2447406d9b27052f33dec3f194f88c9658bbf04495221d507aa4bb70f3c01acdf5e3ac024c3cdb8723a1bda44f801c606f66b84e32703e65b472087b91", 0xa8}, {&(0x7f00000004c0)="666bb3fddb670c9f0773", 0xa}, {&(0x7f0000000500)="ed7b6ade2721c51f993b6e4a0b14b13f5d4758291ecf5cd9e8cdf6c00f0fde434fcfab332a954ef8e03a5a34e50d6d1e", 0x30}, {&(0x7f0000000540)="84d7a748d0dbf3e60bfbcfbb5109956e9c82793160f5a4b6864d17e4842f42955b2f283849e61bc4581e06990ac94e9c2c79e2f8cc7f83755645d8fd52a33c830c9af70b857713d8cbba794f7366f04fb72c4edd63d61833409ccbf017588f9a7abfc4bf028f578a8628ce8b498e22ae55c38ce93db93f9659726f74e63393d5acaa5658c262d31d4f24e743e9482dd7228eaa14a54bf6e9cdd50b9648ef71ada701f8e352169110a7c78959a0b62c81997377263962bad3ed271aa75eaeb7a7d8c301d2bf70fe90f5a31efddc710a506bac9e9be1a9411153a05b4f658c524b", 0xe0}], 0x6, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x4}}, {{&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000840)="f4070070b8a3035255d92565d68666dc78b79c6eff29db27d22b80dec00776e7957337d49cf4383c057116ff6737ab332ffb2bc3be2c9c3365508edd279fe43f3d88253448febd11b1ad2be428670791cfa5497e6f213f89aaf237319caf0cdfc0d356fc6d1eedbe653fc668d9186b03172adb34ebc3c6f2a6e02f3b8f79e272aabdee6f6d2412a530e3b7fe18faa2a283aeb7e327dbba2d3dcfccdc04c76111994baf105d857b56b791", 0xaa}, {&(0x7f0000000900)="787cbf44eb28777f8491a26a44bf216ed15cacd1d0594d0398768954dc9cbfcd282fda317208cb5de54282316ca15c27b50779d817dcdf61a64c5dfdea2810dc33b06afe79e8772af6e0eccf39cee2c035a79b3df096374cac7b1eace76db74086b5d5778e383c7a075ac10ea96143601a450f5da8155509ca6e", 0x7a}, {&(0x7f0000000980)="187db21848fec9975847d4e8a10bc7e2b8cefd3bbfacd313981ac2b15376559fc94723c04183e6e53df08e16d0bfc214772bbc54aab316ab2373d9871c1bed161412", 0x42}, {&(0x7f0000000a00)="1b48ce79dc6f7bf630dfada004ee174d3c9e214cbdb22341affc58ad2e7102a052630355aea39dcb16e3c3c68744a4173af5cec2b31c0854e7a25a2ee16a619d6371b73bcf4a61319fdcf3465fc8ea2af13e5f904080ad803e7a2f17d5dd174052270f02f2d14645953337cf", 0x6c}, {&(0x7f0000000a80)="5dffd68056b59866fdd6b78933a65ff13f877e0bfb6700c0d33a", 0x1a}], 0x5, &(0x7f0000000b80)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x60}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000c80)="14870be3a7015679aad113795074aaf717740bc1cc7571b51f44326c9dce636397416ba60437670112a6e97a5d5b2b3e00d031e67e802d1395", 0x39}, {&(0x7f0000000cc0)="696aa3eee036da1fbef0ca8c08ae735342315deabcea771405177990a5b0158b0fad73a39275baf1c3934b0488cc9ce5be6254a8003c18ae10c45c41cd3234b2dfee67815247dd6bc900c65d372a49aa827c3f0d548e60a5e0406f22c45045", 0x5f}, {&(0x7f0000000d40)="b483d740e67e26780b873f3323fa4e76a7e386e4eb498b2972a3bf26b621d96b6695e25650ccf54f7af52ea299a743d0312e384679a43524b9ed9658ecbc8623ffc5762d9422d1eaa35cccea14b0bb623cfcf1a108c7705433280cf8dc87a50c6442da653320b87d0d8ca3d1d0216e4afae4f0c5a537f94d319cf7658a0e05605b302fb5538ebd0797b2a3b2572205eb6e9796ce25c5682dec4e661a4ed2f5327f", 0xa1}, {&(0x7f0000000e00)="78010ab3f5350110c4cd55aa344d491f92d1ac13955f179df48bf4e662ad93628756d13d6aa0585fd3341bed58bdbc13e33de9aa686df9c88176400de20b9db3423cd11cbe6ab784ee56592ba651791b63e734982109aba16bff221c671809461377c75ce3c498257a084c33185a901f96d8bc6a49fdd6dbb59969c65746aae7c8cc69448579bb169bef556ea8971baa812cc5", 0x93}], 0x4, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x38, 0x40}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001000)="8e52b4a762a1af8d56c947a90143a3da3997a18f07b55a41f9e3698aa9469a63646d3f66f5c6f22eba048a6ec23715e8c77f33b392d6850b2b4b47c6dad85dcd37f1a791fb35a59b78e51a92e2248a0e8ded3a6733afd25fd7aa5a23df8e6d8e88d8fb41bf25ec1864befbb571a11b1017dc5e23f24ed99ec984aecbf97cc1f189a934ae59cdd4ecf2611967d60a55f7af13b50c93b5b95270887342eb99788f3bd13777aaa65ab29a2abfbfd67d1e1d48529ae84cf487febba1e699bb423a83ac68095b9b982c637be14041e66e604e9319278843064760f3251f8021af33f0ffa6fd74d4b73922b9df0204ea3181c2336bc8c989d95cbf93", 0xf9}], 0x1, &(0x7f00000011c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf8, 0x8001}}, {{&(0x7f00000012c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001340)="e8634300310f201c7f013b396462aade1bad", 0x12}, {&(0x7f0000001380)="05409167f83bacfa83670b74f95079f908622385090227937dbf67fed285361f6a9698efff1ce63f812af5c63d6f1c1a93bd77dfddd8c30cd18ee463c21c7bce312d74eb", 0x44}, {&(0x7f0000001400)="ca0adb0f2f6723c9d866de93ed5e374f816e70359b26f3a83e133d621329724748c223219c0bc471a33cda925f12679b048189e0", 0x34}, {&(0x7f0000001440)="4505c8b307d66c72c0fcaaa53036", 0xe}], 0x4, &(0x7f0000003000)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r0, r1, r0, r0, 0xffffffffffffffff, r0]}}, @rights={{0x28, 0x1, 0x1, [r2, r0, r3, 0xffffffffffffffff, r4, r5]}}, @rights={{0x28, 0x1, 0x1, [r6, r7, r1, r8, r0, r9]}}], 0x108, 0x4841}}, {{&(0x7f0000003140)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000004340)=[{&(0x7f00000031c0)="245712deb7af63e415c175f5f8e97f53eb7128a81bf1355afe1a76e070648318c8f28ed9e0afb0799da0e5911bd73b27d6f5daeefc6953dd2b0561485445d4a935d1fec2cca1ecfdefcf0bd23774e468554ca9ea130114b077acfdb985a44f50ce2f5c90b601d0978e850ecf9bec4c7b0c4e5942fbc15336efa09a97d04c84fc13204b12ba0bc19385cbfb993c79d45a5d217f9685b51cfe4517896d0991b095cfa812a6c278f97b07d155f891cb70c187b6e5418470596477d66b412209678b30c6a6c20a8932ffcfb9505928570181df90c7e9d1750c7e99f9106eaebc0adf92b70a7325d4cbee0cb9a6a647d724846ca4908e16eaa524", 0xf8}, {&(0x7f00000032c0)="0a3f1b8fd47f95e80cb86d55e12e9f3767f9345bdb7fd0c829c8da9954a45ebdac50e0f60a7f9851dfd0f0f8e50843dfdbd774663dfaadda2b310c2aed0c1b4aba2b65b1cfb8b1cb980d907b944a2639b4", 0x51}, {&(0x7f0000003340)="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", 0x1000}], 0x3, &(0x7f00000043c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, 0xee00}}}], 0x38, 0x20040010}}], 0x8, 0x8c1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:12:00 executing program 2: futex(&(0x7f0000000140)=0x2, 0x5, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)=0x2, 0x2) r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket(0x24, 0x0, 0x0) 15:12:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wf=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) bind$unix(r0, &(0x7f0000000100)=@file={0x0, './file1\x00'}, 0x6e) 15:12:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x3f, 0x1, 0x3, 0x1, 0x3, 0x3, 0xfffffff7, 0x3cb, 0x40, 0x357, 0x7, 0x2, 0x38, 0x2, 0x3, 0x54c, 0x9}, [{0x1, 0x1, 0x0, 0x85, 0xffffffff, 0x802b, 0x6, 0x5}], "4c644b30d8d305c713e4451bf49d2eef3aa1ddefc1d305fda26da56f083d1c09284d670f2ce66331f8dbac8b2f7a6b9366eabcdf0a15eef33b4670305bbada421049f7fcf5370b3828bebc73", ['\x00', '\x00', '\x00']}, 0x3c4) r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 15:12:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = io_uring_setup(0x39ee, &(0x7f00000001c0)={0x0, 0x161e, 0x8, 0x10008000, 0x2b3, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)=[r1, r2]}, 0x2) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x72, 0x2, 0x0, 0x0, 0x4}) fallocate(r0, 0x40, 0x0, 0x100) 15:12:00 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file2\x00'}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x5a}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4849}, 0x14) r2 = openat2(r1, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x149000, 0x1b0, 0xe}, 0x18) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x6}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:12:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2103.506834] 9pnet: Insufficient options for proto=fd [ 2103.513323] 9pnet: Insufficient options for proto=fd 15:12:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2103.531741] loop6: detected capacity change from 0 to 135266304 15:12:00 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x4a) 15:12:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x842e}}, './file1\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', {}, 0x401}) statx(r0, &(0x7f0000000140)='./file1\x00', 0x6000, 0x800, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r4}}, {@euid_gt={'euid>', r4}}]}}) [ 2103.620689] loop6: detected capacity change from 0 to 135266304 15:12:00 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x0, 0x0, 0x0, 0xcf3c}, 0x0, 0x0, 0x0, 0x0) 15:12:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:12:14 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYBLOB="2c7766646e6f3de39e65a5e76daf1201ed157abdfe826ef03e31dfe1ef882295825e54e8eee5ad76979e1be6df93050106ed396520a453da80453e1afd21b74fa6a550de527138cb", @ANYRESHEX=r0, @ANYBLOB="2c0072d4c7cf1bc6ca2893cd78f855bc98fad212c4b49ffd51b85dd49f6f206fe33b46eae115979ac767c3bb80a44e6587014e15d0e7b6920a73b536edd3bed64e201a2df75bbc06a289c749f6934c7bfc6934ce96567f05b324ec"]) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000000)=0x68) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000240)={0x2, 'bond_slave_1\x00', {0x3}, 0x49e1}) 15:12:14 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x4b) 15:12:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(0xffffffffffffffff, 0x40, 0x6, 0xfffffffffffffff8) 15:12:14 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop4', 0x200000, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r2 = syz_open_pts(r1, 0x201) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:urandom_device_t:s0\x00', 0x26, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x7db480, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:12:14 executing program 6: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x18) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0]) 15:12:14 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0xbc080, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000004c0)={0x2}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000240)) r4 = dup(r3) getsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x30, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "34bded5c1dce558baad1c0f3cfb4960ea69b51"}) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xc1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101542, 0x108) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x40, 0x0, 0x431c428753c85ea0, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x85}]}, 0x40}, 0x1, 0x0, 0x0, 0x85}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x60, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64=r5, @ANYBLOB="2c7766646e6f3d62205b6c190b7ef6b65c4cd0e6dbb1fe1b779f5fb10e5e7380c7c41ace34e367dde644127549557b547cb2a2ecd129c54cd6a62fc4d204a7d16b7fa731da2efb946da1f002a8ffca0acf261a298024762b8719bfe622c609f77c761bca6a5aa6793585709c083af8e5d5366668", @ANYRESHEX, @ANYBLOB=',\x00']) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf256f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900030000007d0000000a000600ffffffffffff000002e50600ffffffffffff00000500180125000000080026006c0900000000a000ff0000000800a100b10000000800a100090000000800a100ff070000"], 0x70}, 0x1, 0x0, 0x0, 0x20008080}, 0x44801) getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) 15:12:14 executing program 2: sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2010}, 0x4040000) socket(0x24, 0x0, 0x0) 15:12:14 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x4c) 15:12:14 executing program 2: socket(0x24, 0x80000, 0x5) 15:12:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x220100, 0x40) sendfile(r2, r1, &(0x7f0000000040)=0x355c, 0xbe28) 15:12:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)={0x0, @aes128}) fallocate(r0, 0x40, 0x0, 0x100) 15:12:14 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:12:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:12:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='tranr=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\\E']) 15:12:15 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) 15:12:15 executing program 2: socket(0x24, 0x80000, 0x4) 15:12:15 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x4d) 15:12:15 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) r1 = openat(r0, &(0x7f00000002c0)='./file1\x00', 0x40000, 0xaa) r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) recvmsg$unix(r1, &(0x7f0000000240)={&(0x7f0000000100), 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000001540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x158}, 0x2023) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) sendfile(r3, r4, 0x0, 0xd1ce) 15:12:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 15:12:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:12:31 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x4e) 15:12:31 executing program 1: r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x1, 0x20, 0x81, 0x90f}, {0x2, 0x58, 0x4, 0x5}, {0x9, 0x0, 0xff, 0x57e1}]}) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000140)={r3}) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x358}}, './file1\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x1}, {0x8}, 0x72, 0x0, 0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='./file1\x00', &(0x7f0000000300)="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", 0x1ba, 0x0, &(0x7f00000004c0)={0x2, 0x7c, {0x1, 0xc, 0x32, "347f85793eba5db6298be873ef7424400f213a633482472e0611d5427616287503713d53c906965bd4597e42b85b3a6066df", 0x3d, "827144d4df502f165891f0c04079eed92cc48702263f76874b0efbb35ad1baabd05db92bc2300978cf821c4b31ab133779e4dd4ca75bf000e3eff19cd4"}, 0xa5, "463ec7632344609274d014d6ca01a1ac9d70cf6e7239fbc6607f718ffaa89b8228734c29d8bf3065d504836eedd8e54c7b60d04a0cb095107851815b31118dcacbeb046104f7f5a998107020534d2c647289edbb372c2354ae195a937ba2f63b496736c53b93ee058ebb6b5c238de077d3a8b21573321909ea30215b8b3b44912fa5c4e71de9507ef9624c8519838d190bdaf5c58bc7186115b0d7d4baedc88adde21780f8"}, 0x12d}) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x400) fstat(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid}, {@cache_fscache}, {@posixacl}, {@loose}], [{@measure}, {@pcr={'pcr', 0x3d, 0xd}}, {@obj_user={'obj_user', 0x3d, '\xf7[/\xd5\xdd\x1b\xd1P\xfdK\x99\b\\H\xe7V\xbd\xaeX\xbb\x04\xbf7[\x04u\xa8\xc5G\x17\xbc<\xf4f\xff\x01\x82n\x02|!\xdb\r-|\xe5\xa6\xefv\xbc\x8aN\xe6tl\xaa\x10\x86\xf8\f\xcf\x1c\x1d\x99\x94\xddb\x1dV\xbc[{\xdc}dM\xe1\xa4\xa1'}}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@measure}, {@uid_lt={'uid<', r6}}, {@obj_user={'obj_user', 0x3d, 'rfdno'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, '9\x9e}g\xa4\x90\xadp\x008oY\t\x96g\x93\x86B\x01\x98?6\xa2\x9c\x16\xf8\x03\x82\x96\x8a\xfaFg\xd9\xe8)v\x1a3\xe0CX\x17\x1aX\xa6\x92n\x1f\x8c0?9\xb3\xd7\x9eg(\x12\x99E\xeeS\x00\x9b\x95:\xbb\xf7k\"\x7f\xac\xc9&j(\"\x8f\\\xdc\nM\x82\xbc\xb1_|-\xd3\x15\x12\x016\xd3\xe6i\f>\xb8.\xa8^=@M\x17[d)SD\x03\x00X\x02\x91\x9c\xab\x12\xe1\xa4HH\x11\xdc\xca\x15>\xdc\xb3<\x87XWi\x0f\xbb\x14\xe4\x900\xe2A4\\\xc0\xeb:\n\xa7\x99\xedl98\xdc1\xaf\xc9\x99\x9aC\x86d\x95\xae\xe8b\xd5\xf4\x11IG#\x13\x15\x8a\xde\xfa1a\xfa\xe07oL\xd5R|\xd0?s\xf9\xceS\x96J\xfa\x92\'\x89\xd2@r\xce\xdf\xea\xa1}\xb6\xec`ha\xeb\x94M\xe5\xbd\xbc\xae\xe6\x91\xeesb\x8a\x1aJ\xbbl\x00t\x93\x1f\xba\x8c\x970uj\x1e'}}, {@obj_role={'obj_role', 0x3d, 'rfdno'}}]}}) 15:12:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:12:31 executing program 2: socket(0x24, 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) fgetxattr(r0, &(0x7f0000000000)=@random={'osx.', '#\x9b&\x00'}, &(0x7f0000000040)=""/87, 0x57) 15:12:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:12:31 executing program 5: r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x3a8, r0, 0x4, 0x70bd2b, 0x1, {}, [{{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8, 0x1, r4}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x75}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xca}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r5, 0x40, 0x0, 0x100) 15:12:31 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="0cda8bc01f35ebb4863cc7", 0xb, 0x403}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="6572726f72733d63b5308fd3d6a242216e6f757365725f78617474722c636f6d6d69743d3078303030303030303030303030303030372c00"]) r1 = openat(r0, &(0x7f00000002c0)='./file1\x00', 0x4408c0, 0x8) r2 = signalfd(r1, &(0x7f0000000240), 0x8) mkdirat(r2, &(0x7f0000000280)='./file1\x00', 0x10) r3 = socket$unix(0x1, 0x3, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r4, 0x4, 0x0) r5 = io_uring_setup(0x7182, &(0x7f0000000480)={0x0, 0xfffbffff, 0x8}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000c00), 0x1312) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) ioctl$int_out(r3, 0x5460, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000006c0)=0xe8) getresgid(&(0x7f0000000540), &(0x7f0000000500), &(0x7f0000000580)=0x0) getgroups(0x1, &(0x7f0000000440)=[r7]) r8 = getpgrp(0x0) pidfd_open(r8, 0x0) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r9, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001bc0)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000003c0)="382d72861a105440a0936b83d67273b270c8c74b84e4cec1262d4d3d1797d7f15d3832be63bed8e84fe3c9e9afbbc8141c6e9f96f9aeb9c2ff9a848b461600d7af030d57b94db3c5e2b6a43d3e0dd17378f2a4c4c2023bd731a75ddf", 0x5c}], 0x1, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r5, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xee00}}}], 0x120, 0x20000004}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000840)="92920ee769299ce1cc98f243d07789f211d3561632a34e1921afa0461f1211c9ed2a343bb6d333823942e45eb5e962bc26148aed959fe27fa9d20be326a1210e047fc9f416a590f038dba418f74c7b1d9e46414fa0f95819528c899e94b73b87b7a9c9a7ec75476e9c168f75f2c5394ca447d6e067a4843a7ef382eeaac6853b4aeb78f0510976819aecc2587711698a2b47a036c01a1510b7f63dbe3305cb86495a1ca4ef588a68", 0xa8}, {&(0x7f0000000900)="508a8cb4d2b9bf5cba2205c6c06609ee9fcca1622694d1a37fe0233af67ee6258f0b56f05a79ba2c00a4975cf0c7bd582c07e0e83c887856e52042ddb05ab0cc98928d2922a7fb926cec9ee6f868d1a9217fa117dc17acb5025636b8ae46a04fed6c67a25e747ae108ff23fe0ca4ea158cb62c421dd6c54bacd7e41a13a7bf2b7fc2f82d0403e5a8c436d7e025e0583fe92fbc103d82265a58b658d0ff06b6945f70ba1d94b72c10", 0xa8}, {&(0x7f00000009c0)="2eb58ce27cc307598581554b02dc5040ad139e2c12121d6b6ad030dbaeb28d8f4354e8ba61e40938fc5d7c80b96b4f82a3aafaf67521bd3dc4bcfba029c5b94e76348acd98eb289b975105988f1731ba92a6ca66e9e1d8534ae956166173a1ee4eeca6f317", 0x65}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="604d33f8af0cd2286829448b59e21ef2d7f50dc8739e3b10199a4bf1690025a2d194939d1ed3e67b993d2679e5ba8cb282bd1278a9de3d03bbdbdda0b56865e0e1a1118c35db95d8ca7f5ab57337091fa142ace5024d7d4bd93d5477d8347baf96bab7d11ea62209a95f531f2480c7ab3b034815ced1f14d03c717b2675d82c10704a9a556f3e4834b23d84926e1646f52e1e3b3287a7c95b13ca9514c14f5cd617afcf96e55b7a41ad933c2430ec40359ce6fa8de2f", 0xb6}], 0x5, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r9, 0xee01}}}], 0x20, 0x40048c4}}], 0x2, 0x20008000) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c776664daef95", @ANYRESHEX=r3, @ANYBLOB="0400"]) [ 2135.355846] loop6: detected capacity change from 0 to 2048 15:12:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000580)="7672ed288bf472bcf49e976ae244f4eb0c944db2cb7fde2eb8f7220d923b5a890595a35504ebaef6ef138e5b1691ab1921721ce5a28007ee971aa683d100c96f3a74d8774c08e2b3743a5df7e84e0933311870e93933d45b61a736c0bb9b001c75888f848e04398dc79edb02725ecdbdfc1ab717ee30c4e36f2ce585798d2d0c2640c2edbd297436f4043f4976d75ae8922da988fc70152df75fe1d268e18e2a6b33a77102ebdaf8b3b12b6b223a23bb8fae53905c4004dd6b606fe4b3a5f7a286eb4efa412efcf0df043ce51fc6a3136b51fff1c3d9c0314d4e2a156e9d4c43f5c7e33e7d76a7583f39906f8798faa1232d1bcc4684095cc9c0bf89ba7ba4865f02a19ed83bc85fc7567e78fb242cbb5b8a86881c787f17bec95a758a0b2714105af8e8aa2661f697dac2131f28323e206ca1d53476b52b598e87d8fafe9a594458b7526e13aa8dabb697528d900011ec2d814227cd87862d32fe44063abd78a661c2940d61cc287f4eec64a7764ded9e762c932b41", 0xf9}, {&(0x7f0000000a00)="8370a1f76944fab1c0dabaf13b111354b7d510f407f5d726907ef886730ce323bfef428b806471811ec9d752a2ce64d307d8a62e857eff449f4f030cfb981445540a9c1476584f3fd77ce7963e179f19419f99fe5d7e7e822b65157e5eebb4388dfb4de708c30b2664b975488b1db131410a661a40e3cee18ccf0a72db1c813b9d5a1e32d4d83e2045af7b461997aa51a8907c2a85899dfbc4303c284e3d79b62990ae801b98e4c4d9e1452f2090019e6edfef405e141f33ef36d0edadf2e90abc4b03735096c7077fb60c3dfb12be6841b55be1226f9cdc53fef4b55e4188623e95d9732506b9783543fa15ee1ce5b33a44d09720", 0xf5}, {0x0, 0x51}], 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000800)=[{&(0x7f0000001ec0)=""/114, 0x72}, {&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000002000)=""/242, 0xf2}], 0x5, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000040)}, {&(0x7f0000000900)=""/243, 0xf3}, {&(0x7f0000001f40)=""/182, 0xb6}, {&(0x7f0000000bc0)=""/154, 0x9a}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="1f5bfbee74", @ANYRES64=r0, @ANYRES32, @ANYRES32, @ANYBLOB="b21355fab972bbd4ad62428b87c8aa70228df0c86a86ad5c238a35bf192d0d53fb569c6cb3977833a3f4270400a1587396c5b7eb2e4676b33f2b098dc789315961828b988e749953fd1939275d640f8f5bf3e3ea7273c3e2b9264e6f53f9c3b815ad8d0e000000000000a7ede5021fdb70a5e66ddee76311cf94a60917593ac184d986148044b96adc12c80809df7c42b3d0e536613018fe77c036bf592ae648031fef558750edc66945fb7351a29dbf2e148f5a7221853aaca352773a572a3de9f601de0afe25a2de849c108856c67a9704c7a857"], 0x30}}], 0x2, 0x40010001, 0x0) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000540)) lseek(r0, 0x8d6, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x20000000000]}, 0xffffffffffffff50) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x626a82, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 2135.393211] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 2135.414809] 9pnet: Insufficient options for proto=fd [ 2135.427851] loop6: detected capacity change from 0 to 2048 [ 2135.448254] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 15:12:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:12:32 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x4f) 15:12:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:12:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) fsetxattr(r2, &(0x7f00000000c0)=@random={'osx.', '9p\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7746646e6f3daab8a11d626715bf64bc5481b333a32a75ddcca9aa4c09c273ae4f4cd38fd584bcdc98a8cf1bbd5437f04db6548b10dd3434f23ccc4f39d6455466dd00e3e2540b0000", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 15:12:47 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x3) openat(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x42) pselect6(0x40, &(0x7f0000000180)={0x3, 0x0, 0x7fffffff, 0xffffffff, 0x8, 0x0, 0x40000002}, 0x0, 0x0, 0x0, 0x0) [ 2150.880143] 9pnet: Insufficient options for proto=fd [ 2150.892869] 9pnet: Insufficient options for proto=fd 15:12:47 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x50) 15:12:47 executing program 2: socket(0x2c, 0x0, 0x0) 15:12:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) fcntl$setpipe(r0, 0x407, 0x1) fallocate(r0, 0x40, 0x0, 0x100) 15:12:47 executing program 6: r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) fdatasync(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 15:12:47 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000003f, 0x76}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r3, 0x4, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r4, 0x109, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x4c}}, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wf$no=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r6, 0x322, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x62}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) sendto(r2, &(0x7f00000001c0)="e12fd41fd3abfa193b51334b99da8fcddd6517cc568d4beb2868379b5210dc3edb3210901a62469f1ebe68d05718d407510e1be6ae21f1317f3db1f7f1a9dde35aa5f5e82d2c3ecc5c155b39962e850552468dc9834a60216b5d5dd462b0c451ee821e159e75b1f216c7d8ba8d9d9faea776ce45f6b318cf5ad3494a966294c29d4ffd9086ffd511b4c7f9aa1253c8c30193004da1002434006509b43b5fb11feaa16e4ae470988d36135f266fa155642021205445dc0f1e8c24074785d59da8c8e76caae0657e7d625af9f8dc55a8e1bbd4a77c331d13d6a1a8df883ee416b6c81ad59824c043b9020a4f41af2bd8cbb2e4bd73", 0xf4, 0x4c040, &(0x7f0000000440)=@generic={0xf, "d6f7cc51f80cfd5433731f1ba3e2fb854824c9c31dfe9ad6491a1315f350932dc62decc2a945876634075aca88b2c3a7946780099d72d34eb433cf68eaff075df3f6a8e68ed5d4591871340533b191e55ebaad462a5b48ebe25a4de4d101c204bf856e4fee9b9bfc7aa88dbc6aa5c5e464950274aa4952471ba358d3bdf6"}, 0x80) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100)) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r8, 0x4, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x2d0, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0xc}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0d, 0xfac01, 0xfac01]}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac1b, 0xfac06, 0xfac0e, 0xfac0d, 0x7d609]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @random="518de5baf652"}, @NL80211_ATTR_KEYS={0x15c, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x7, 0x4, "4ae6c1"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e95743a6b3"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "216911e608"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0xe, 0x4, "35d8472c2e545cf902db"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "700584dda4b560bad6b668dc49"}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xa, 0x4, "01cc42927047"}, @NL80211_KEY_SEQ={0xe, 0x4, "b65fceae5befc1a26549"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2bd5a174e7d0f30130873a46af"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "65a403850e56db76bfd92e0545"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "74810ff22c0b3c621bb93520c2"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_SEQ={0x9, 0x4, "868e15ac02"}, @NL80211_KEY_SEQ={0x7, 0x4, "cf89ce"}]}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000800)={0x20000005}) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) 15:12:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) removexattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000400)=ANY=[@ANYBLOB]) r1 = socket$unix(0x1, 0x3, 0x0) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f00000000c0)=""/68, 0x44}], 0x2) openat(r0, &(0x7f0000000240)='./file1\x00', 0x81, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r2]) [ 2150.929172] 9pnet: Insufficient options for proto=fd 15:12:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r0, 0x40, 0x0, 0x100) [ 2150.938137] 9pnet: Insufficient options for proto=fd 15:12:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:12:47 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x51) 15:12:47 executing program 2: socket(0x24, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 15:12:47 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x3f, 0x40) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x5}, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:12:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) fcntl$setlease(r2, 0x400, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:12:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c0013a9ebea0acbba54e43052f427144fe6321fc79bc794ab12060df04ce47d746f5567bdd6ec181fe29f1869a9803ca3fb1ac6692eaff5f6234e5c09b7439ff501c4bf9ecdfd51c2f36ccce7565db94498ef83fc2d9aa75684a3553f8f93e5b87d0230485601aaac1af54a94b7b16ad868bc73d1824fc87ebc79df6c70294b74a332a4d39545cd243d4380a006954fe4b7e4a78c2d46b277dbba"]) 15:12:47 executing program 2: socket(0x24, 0x0, 0x0) 15:12:47 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x52) 15:12:47 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x0, 0x8, 0x3f}, {0xfc67, 0x30, 0x1, 0x69e005ef}, {0x1, 0x9, 0x67, 0x1000}, {0x8085, 0x7f, 0x7f, 0x7}]}) r2 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0xc8) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r2, 0x40, 0x0, 0x100) 15:12:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 15:13:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000100)=0x30) 15:13:01 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x53) 15:13:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x8) r1 = socket$unix(0x1, 0x3, 0x0) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRESHEX]) 15:13:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0xffffffff, 0x4400) r3 = io_uring_setup(0x2213, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xfffc, 0x0, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) fcntl$getown(r3, 0x9) 15:13:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3ff, 0x2) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) r1 = socket(0x5, 0x1, 0x200005) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x5, 0x66e, {{0x4b, 0x4, 0x3, 0xc, 0x12c, 0x66, 0x0, 0xc0, 0x4, 0x0, @multicast2, @remote, {[@timestamp_prespec={0x44, 0x54, 0xd8, 0x3, 0x7, [{@multicast1, 0x3ff}, {@broadcast, 0x8}, {@local, 0x1}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x5f}, {@private=0xa010102, 0x9411}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x80000001}, {@local, 0xfff}, {@multicast1, 0xfff}]}, @timestamp={0x44, 0x28, 0x3b, 0x0, 0x7, [0x8f0, 0x6, 0x7, 0x80, 0x2, 0x3f, 0x6, 0xffff, 0xfc]}, @timestamp_addr={0x44, 0x4c, 0xa5, 0x1, 0x8, [{@remote, 0x1}, {@local, 0x2dbc}, {@rand_addr=0x64010101, 0x3}, {@multicast1, 0x8}, {@multicast2, 0x77}, {@broadcast, 0xffff}, {@multicast1, 0x3}, {@rand_addr=0x64010102, 0x3}, {@loopback, 0x98a0}]}, @timestamp_addr={0x44, 0x14, 0xe4, 0x1, 0x7, [{@empty, 0xebfe}, {@dev={0xac, 0x14, 0x14, 0x23}, 0xab86}]}, @ssrr={0x89, 0x17, 0xe3, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @rand_addr=0x64010102]}, @generic={0x82, 0x10, "336fda7b41b57caf132a57511c3f"}, @noop, @rr={0x7, 0xf, 0x3d, [@local, @loopback, @multicast1]}, @ra={0x94, 0x4, 0x1}]}}}}}) 15:13:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 15:13:01 executing program 5: r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) lseek(r0, 0xc0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x72}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001400)=""/151, 0x97}, {&(0x7f00000014c0)=""/198, 0xc6}], 0x2) fallocate(r1, 0x40, 0x0, 0x100) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001380)=[{&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000100)=""/52, 0x34}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000001240)=""/106, 0x6a}, {&(0x7f00000012c0)=""/138, 0x8a}], 0x6) 15:13:01 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000003c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000300)="289e0cdff013f1e8b32069bd3600c913c74d3ccda84d994fb3383c674954422ef10669b28d8ed637de96cf941f12ed353f2c594a1323b4a054ee6fb2ada435c3b843ae9057ef2bd2bdde7054349953f8f899776352cba53d782cd76ec2b9a16e4466b2aae52fff4ea4ce050b8aee636ba0a58eb1a281efaa322b73d2e96378b90ecba83ffd83a3f1611cbf27b2", 0x19, 0x0, &(0x7f0000000280)="1a05205b7544723f4d90bc99f14bd39afbb09da860e9992852"}) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x698, 0xffffffff80000000, 0x7e, 0xe0, 0x40000000000, 0x2, 0x81, 0x3}, &(0x7f00000000c0)={0xff00000000000000, 0x200000040, 0x3, 0x40, 0xffffffffffffff93, 0x5, 0xffffffff80000000, 0x5}, &(0x7f0000000100)={0x2, 0x8, 0x2, 0x3881, 0x80000000, 0x1, 0x235, 0xd3e6}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000200)={[0xde44]}, 0x8}) [ 2165.365205] 9pnet: Insufficient options for proto=fd 15:13:01 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x54) 15:13:01 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) [ 2165.409140] 9pnet: Insufficient options for proto=fd 15:13:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) shutdown(r0, 0x1) signalfd(r0, &(0x7f0000000000)={[0x6]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:13:01 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001580)=ANY=[@ANYBLOB="010000000100000018000b874e550c972c0707da7f1f2b0c93b4554b9d5c81", @ANYRES32=r0, @ANYBLOB="7f000000000000002e2f66696c653000"]) preadv(r1, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/140, 0x8c}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x6, 0x5, 0x5) socket$packet(0x11, 0x3, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000840)=[&(0x7f0000000140)=']\x00', 0x0, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00', 0x0], &(0x7f0000000440), 0x1000) ftruncate(r2, 0x1000003) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x301083, 0x140) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000b80)=""/145, 0x91}, {&(0x7f0000000b00)=""/108, 0x6c}], 0x3, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24004850) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xb2, 0xd34, 0x1, 0x0, 0x4}) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x1ff, 0x7f}]}, 0x18, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8d, 0x0, @perf_config_ext, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000015c0)=""/182) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 15:13:01 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r1, 0x4, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0xc0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x72}) fallocate(r3, 0x40, 0x0, 0x100) 15:13:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x110) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7, 0x5, 0x4, 0x500, 0x100000000, 0x2000000}) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x1, 0xbe, 0x1f, 0x200, 0x2, 0x3e, 0x3f, 0x3e3, 0x40, 0x1fb, 0x3f, 0x61d2, 0x38, 0x2, 0x4, 0x2, 0x7ff}, [{0x4, 0x40, 0x1a6, 0x0, 0x8, 0x7, 0x9, 0xfffffffffffffe01}, {0x4, 0x6, 0x7, 0xfff, 0x76b, 0x3, 0xffffffff, 0x1}], "3bbf8758adc5cc7d12af0496b4d366aeb274c30d74c7c3555a5a0866670b8a71484ae096f6dfd49954edf90b6539538a64d92a2622599ac5a99ad7d2eb3679e3fa131596ae373019c8cb4192907a7565d35f7822fbb87f68d00346799121199ebe9eb41bd073ba50bfaa30ffc9323a89fbcff6563e26b9a404a65ca41c3642e6fd3bbce7ed5f39c779df7aa2f9c804068aa78232a67145a0a3df9d6e934d89af78d13623fa6a64f347bf43b552114e7049dea702291a74c9e8c3949fe53c1a442156f7ddde2f68e62aa15f4f463f5618d13d8d074d4a27b18142623657118276f4e94b05", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x894) 15:13:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}], [{@fowner_lt}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) 15:13:02 executing program 2: r0 = socket(0x24, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000040)=0xff, 0x4) 15:13:02 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x55) 15:13:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd157}}, './file1\x00'}) recvfrom$unix(r2, &(0x7f0000000100)=""/210, 0xd2, 0x20, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 15:13:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x80, 0x0, 0x8, 0x0, 0xdb, 0x8048, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x480, 0x100, 0x0, 0x4, 0x81, 0x2, 0x6, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x8, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x9ae1b4b7265e3ce9, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r2 = openat$cgroup_int(r0, &(0x7f0000000200)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000240)) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r3 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0xca, 0x1, 0x4, 0x20, 0x0, 0xbac, 0x100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000280), 0x9}, 0x7000, 0x7, 0x87, 0x2, 0x10000, 0x0, 0x100, 0x0, 0x8, 0x0, 0x100}, r3, 0x7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r4, 0x4, 0x0) write$tcp_mem(r4, &(0x7f0000000340)={0x4, 0x20, 0x3, 0x20, 0x5}, 0x48) fallocate(r0, 0x40, 0x0, 0x100) 15:13:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 15:13:17 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @in_args={0x125e093e857b72bf}}, './file0/file0\x00'}) r2 = openat(r1, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 15:13:17 executing program 3: ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x8c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/drm_kms_helper', 0xc40, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x3, 0x6, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) 15:13:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) recvfrom$unix(r0, &(0x7f0000000000)=""/3, 0x3, 0x12000, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000180)={0x2, 'veth0_to_team\x00', {0x8001}, 0xfffd}) 15:13:17 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x56) 15:13:17 executing program 2: setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, 0x0, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x1f, 0x1, 0xb971, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x8001, 0x7800, 0x800, 0x200}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x1, 0x101, 0x4, @remote, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x8000, 0x1000, 0x75}}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000100)) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r7, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r9], 0x38}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x148, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r10 = socket(0x24, 0x0, 0x0) sendfile(r10, r10, &(0x7f0000000000)=0x80000000, 0xf08) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r10) 15:13:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/230, 0xe6, 0x20, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:13:17 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/ptp', 0x400000, 0x100) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/hid_ntrig', 0x100, 0x40) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x100000000, 0x2d0000) readv(r0, &(0x7f0000002580)=[{&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000001400)=""/117, 0x75}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/214, 0xd6}], 0x6) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) [ 2180.732041] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 15:13:17 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x57) 15:13:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x141502, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat(r2, &(0x7f0000000100)='./file1\x00', 0x20000, 0x14) 15:13:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) r1 = dup3(r0, r0, 0x80000) openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x200, 0x106) fallocate(r0, 0x40, 0x0, 0x100) r2 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0', [{0x20, '.log\x00'}, {0x20, '\x00'}], 0xa, "502b6f6a7cf582e642f566e91e66b738a367fb9369a28151d3baad7e1d2202dfe1d5eff6de4fc4826345b565007b9c63a6b0b233258980578923c3a064217523d04dbd98ba3fbabc103bf370112ab0a2e1f3efedd7e9dd9898ad017c88c30c316e9228b6470eb9701db7e07d2d2c312d71adf9a7e3e4c1c591a0fa6dfcdd278ec12589762118c3f29bd6cf0f42f064246d43ae7f28f65de6b145cc88699a96b75a01f5c0c9852ff012d8216788e501"}, 0xc2) 15:13:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x4, 0x0, 0x1}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x480080, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000180)={0x2, 0x10, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0]}) r2 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="74010000003d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f0000000200)=0x4, 0x7) 15:13:17 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001580)=ANY=[@ANYBLOB="010000000100000018000b874e550c972c0707da7f1f2b0c93b4554b9d5c81", @ANYRES32=r0, @ANYBLOB="7f000000000000002e2f66696c653000"]) preadv(r1, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/140, 0x8c}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x6, 0x5, 0x5) socket$packet(0x11, 0x3, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000840)=[&(0x7f0000000140)=']\x00', 0x0, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00', 0x0], &(0x7f0000000440), 0x1000) ftruncate(r2, 0x1000003) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x301083, 0x140) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000b80)=""/145, 0x91}, {&(0x7f0000000b00)=""/108, 0x6c}], 0x3, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24004850) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0xb2, 0xd34, 0x1, 0x0, 0x4}) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r2, &(0x7f0000000040), &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x1ff, 0x7f}]}, 0x18, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8d, 0x0, @perf_config_ext, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000015c0)=""/182) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 15:13:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) recvfrom(r2, &(0x7f0000000000)=""/55, 0x37, 0x40000000, &(0x7f0000000100)=@generic={0x1a, "09a1fcc34e44644b8364de8cc6330ba304c9f65fe63e8082433eda1ef11410a17e2a4dc875134b8118cbc0340c5dd63296a1fe416e7eced35a70e152d2101082724f961af637262349deccc17def5e69313fe2eb6661838b53b051bd856b524a0f9399f7f2d693bff778c6ea0e2c1487aef189df2732defca829a6ef0e26"}, 0x80) 15:13:30 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) shutdown(r0, 0x1) signalfd(r0, &(0x7f0000000000)={[0x6]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15:13:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) openat(r0, &(0x7f0000000100)='./file0\x00', 0x8c000, 0x100) fallocate(r0, 0x40, 0x0, 0x100) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) dup2(r0, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="db003000"/16]) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f00000000c0)={0xd, 0x4}) 15:13:30 executing program 2: socket(0x25, 0x1, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) dup2(r0, r1) 15:13:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x133}}, './file1\x00'}) accept(r2, &(0x7f0000000100)=@vsock, &(0x7f0000000180)=0x80) 15:13:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2480"]) 15:13:30 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000040)=0xc0e, 0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r2, 0x4, 0x0) sendmsg$netlink(r2, &(0x7f0000001780)={&(0x7f0000001640)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)=[{&(0x7f0000001680)={0x98, 0x35, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@generic="d395c19b10edae7a5b87943c67364fbd41e0a9fc7c07b9ce85909f6478ce1065067b7e5a2e12e3de21b399a2b723732440f95c9466fdb8bec97a8b377b892b39dc67fb40e7e03715255b6b6a6fe1f8e18e1d450d1356acf77c31419cca4bc85d952d88c6a353193a530ddb69cf0671a3f56fc8f711c195e08a5791dbeec7acffdd3b18427e"]}, 0x98}], 0x1}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/power/pm_test', 0x200, 0x120) r4 = io_uring_setup(0x396e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000c00), 0x1312) readv(r4, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/164, 0xa4}, {&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000000200)}, {&(0x7f0000000400)=""/247, 0xf7}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/184, 0xb8}], 0x7) 15:13:30 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x58) 15:13:30 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x59) [ 2194.060946] 9pnet: Insufficient options for proto=fd 15:13:30 executing program 1: r0 = getpgid(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x0) r4 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)={0x50000006}) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000140)={r3, r5, 0x7fff}) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x10, r6, 0x0) r8 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r8, 0x8000000) syz_io_uring_submit(r11, r10, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r12, 0x4, 0x0) syz_io_uring_submit(r7, r10, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r12, 0x0, &(0x7f0000000180)='./file1\x00', 0x10, 0x41, 0x12345}, 0x7) r13 = socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="74726101000000642c7266646e6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB=',\x00']) [ 2194.079633] 9pnet: Insufficient options for proto=fd 15:13:30 executing program 3: bind(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x2, {0xa, 0x4e23, 0x5, @mcast2}}}, 0x80) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000c00), 0x1312) r2 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) sendfile(r1, r2, &(0x7f0000000080)=0x2fa, 0x8) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8a104, 0x0) r3 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c00), 0x1312) io_uring_setup(0x28be, &(0x7f0000000240)={0x0, 0x572c, 0x8, 0x0, 0x43, 0x0, r3}) pselect6(0x40, &(0x7f0000000180)={0xff}, 0x0, 0x0, 0x0, 0x0) 15:13:30 executing program 7: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x200000, 0x0) socket$packet(0x11, 0x3, 0x300) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xff, 0x0, 0x4, 0x0, 0x20, 0xbf}, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) clock_gettime(0x6, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x8}) 15:13:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101542, 0x0) socket$unix(0x1, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x80) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0xc000, 0x1f, 0x20, 0x3}, {0xffa3, 0x2, 0xe, 0x1f}, {0x1ff, 0x20, 0x1f, 0x933}, {0x2, 0x36, 0xff}]}, 0x10) 15:13:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x72}) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x6de, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000100)="62b82d488ae509750b620638f62c26d37b858cf47e8c0f96c1091e675a87ae067187344e1a30997bdb166d95fd869890758139c3b4cb9340e13508a8af4f27415616229f9098d88f9b2efd2d79651708eb378609b53d98cdc1687b1cd2453baeff749e9e71261e1a6752ea35771534e19fe80188eb71e00be182a77c27ad8be88249bd7b21900bd8473a0eee59861acbf37d3c611ca310789f06dd0c78a10c4e326c9ca3a910c5e8009d636ca70a6b8ed999cff23ee93a40970aab665d533be6a9bd30cac5d1d2bf0246b3d7282fa3b0dd7aa87622332bd68f9656b914", 0xdd, 0x61}, {&(0x7f0000000200)="47dda8ff955f35d33902da1371928c3baa981f1c2cdaeba3187de61bcb0a669fabc9f51937ed87b4874cd90dbffede1398d37d39dbc312d674b6291bce01bf33802160e34569bca8c1bcc2d316d2d16895aaa8396f48590525b9581e82fe7aaa15f9210aeb3810af5bb2c66c4434d75e9a6117e9a42aaae82e403480a801a35cfcee9726a03e7b45a2bc4129ee03cd4ec16da8c859387e5879361f139ca29520e3bcb4c8", 0xa4}], 0x2280e0, &(0x7f0000000300)=ANY=[@ANYBLOB="64696f726561645f6e6f6c6f636b2c7379ddca67726f7570732c7375626a5f747970653de45d27272c00"]) fallocate(r0, 0x40, 0x0, 0x100) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) fsetxattr$security_capability(r0, &(0x7f0000000380), &(0x7f00000003c0)=@v2={0x2000000, [{0xffff, 0x4}, {0xfffffff7, 0x3f}]}, 0x14, 0x0) 15:13:30 executing program 4: syz_open_dev$vcsa(&(0x7f0000001a80), 0x0, 0x0) r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x5a) [ 2194.277106] loop5: detected capacity change from 0 to 1536 [ 2194.292113] loop5: detected capacity change from 0 to 1536 VM DIAGNOSIS: 15:18:33 Registers: info registers vcpu 0 RAX=ffffffff83e9c9b0 RBX=0000000000000000 RCX=ffffffff83e8461c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e9d178 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff8567ac88 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e9c9be RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd6be69178 CR3=000000000fd8a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=003202fe016c6c6f502e726567616e61 XMM02=00000000000000000000000000000000 XMM03=00000000000000003f73abfbb159b694 XMM04=7320636578650a006873616d73206365 XMM05=73746e696820636578650a0073646565 XMM06=786511006c61746f7420636578650a00 XMM07=00737472617473657220726f74756365 XMM08=676169727420636578650b006e656720 XMM09=650a006873616d7320636578650a0065 XMM10=20636578650a00736465657320636578 XMM11=61746f7420636578650a0073746e6968 XMM12=7473657220726f74756365786511006c XMM13=007a7a75662063657865090073747261 XMM14=006574616469646e616320636578650e XMM15=0000657a696d696e696d20636578650d info registers vcpu 1 RAX=ffffffff83e9c9b0 RBX=0000000000000001 RCX=ffffffff83e8461c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e9d178 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff8567ac88 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e9c9be RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd6be67160 CR3=000000000fd8a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004176ed0600000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000