0000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x9, 0x2) 00:22:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x0, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x0, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:00 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) process_vm_readv(r0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/7, 0x7}, {&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f00000004c0)=""/102, 0x66}], 0x4, &(0x7f0000000900)=[{&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/60, 0x3c}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/250, 0xfa}], 0x5, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:22:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) 00:22:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:22:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x9, 0x2) 00:22:00 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x9, 0x2) 00:22:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:22:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x0, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:22:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:22:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:22:00 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="587b49a9f6ec46ba4628c7b52f2cffabb915f9a949586f26e499cf9af2c468f35d62", 0x22) r3 = getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'rfdno'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x35, 0x34, 0x66, 0x64, 0x30, 0x65], 0x2d, [0x30, 0x66, 0x38, 0x65], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq={'uid', 0x3d, r3}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x0, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:00 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) process_vm_readv(r0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/7, 0x7}, {&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f00000004c0)=""/102, 0x66}], 0x4, &(0x7f0000000900)=[{&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/60, 0x3c}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/250, 0xfa}], 0x5, 0x0) fcntl$setlease(r1, 0x9, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x1, 0x9, 0x3, 0x0, 0xd95, 0x80000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xef, 0x2, @perf_config_ext={0x4, 0x1ff}, 0x8504, 0x1f, 0x80000001, 0x0, 0x8, 0xfffffff7, 0x4ec, 0x0, 0x8, 0x0, 0x8}, r0, 0x8, r1, 0x8) 00:22:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) 00:22:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x0, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x0, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() sync() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x9, 0x2) 00:22:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:22:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x0, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 988.903411] 9pnet_fd: Insufficient options for proto=fd 00:22:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x0, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="587b49a9f6ec46ba4628c7b52f2cffabb915f9a949586f26e499cf9af2c468f35d62", 0x22) r3 = getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'rfdno'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x35, 0x34, 0x66, 0x64, 0x30, 0x65], 0x2d, [0x30, 0x66, 0x38, 0x65], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq={'uid', 0x3d, r3}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) [ 989.263993] 9pnet_fd: Insufficient options for proto=fd 00:22:13 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:22:13 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="587b49a9f6ec46ba4628c7b52f2cffabb915f9a949586f26e499cf9af2c468f35d62", 0x22) r3 = getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'rfdno'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x35, 0x34, 0x66, 0x64, 0x30, 0x65], 0x2d, [0x30, 0x66, 0x38, 0x65], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq={'uid', 0x3d, r3}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) sendmsg$sock(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="5b4915d15168d57b5c65613a06b23f703a6459ab43cc7ecce308023b180907f724e81a033b4abbc43b9ec0a8cc29369d1d858fa5d64b29a48379c0ac20000157860d10cf6582839e8274d4c17a60cc204c840a12ff425123e27275fd4b49b61bafd6e6b99a3245ae4f760ea15fbbd79140726367b74d19ac70a3056e50ac5eea91095cdecef94efca24ad307a4d460cfd7e6792f2b615a17c4ac945395fa6d5ee121ae9eb76690ba0a6012345a9fe0ba12bdb00e0541e8071a0e097bf7c35f7eaf1967bd818367546dba7f0c57e5f3ff477dcb37a4064c1d5ea0eb3b981fce647081670f6670d00e2630b635310d", 0xee}, {&(0x7f0000000440)="397929a4830a6bcefbb5d6f6fa4e31c7d88f14f84691a675ad1ae16ca6b7753308ca61d4fff1811607d893fe34a93ca4116201b0f2bab4a1389ab5656df2f78734b0124f9c0fdaea2f587497d73f55735a7d8259676594d057ee6db5", 0x5c}], 0x2}, 0x24000800) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:22:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x0, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:13 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 00:22:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:22:13 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() sync() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x9, 0x2) 00:22:13 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x0, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:13 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x0, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:22:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:13 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() sync() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x9, 0x2) 00:22:14 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="587b49a9f6ec46ba4628c7b52f2cffabb915f9a949586f26e499cf9af2c468f35d62", 0x22) r3 = getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'rfdno'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x35, 0x34, 0x66, 0x64, 0x30, 0x65], 0x2d, [0x30, 0x66, 0x38, 0x65], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq={'uid', 0x3d, r3}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) sendmsg$sock(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="5b4915d15168d57b5c65613a06b23f703a6459ab43cc7ecce308023b180907f724e81a033b4abbc43b9ec0a8cc29369d1d858fa5d64b29a48379c0ac20000157860d10cf6582839e8274d4c17a60cc204c840a12ff425123e27275fd4b49b61bafd6e6b99a3245ae4f760ea15fbbd79140726367b74d19ac70a3056e50ac5eea91095cdecef94efca24ad307a4d460cfd7e6792f2b615a17c4ac945395fa6d5ee121ae9eb76690ba0a6012345a9fe0ba12bdb00e0541e8071a0e097bf7c35f7eaf1967bd818367546dba7f0c57e5f3ff477dcb37a4064c1d5ea0eb3b981fce647081670f6670d00e2630b635310d", 0xee}, {&(0x7f0000000440)="397929a4830a6bcefbb5d6f6fa4e31c7d88f14f84691a675ad1ae16ca6b7753308ca61d4fff1811607d893fe34a93ca4116201b0f2bab4a1389ab5656df2f78734b0124f9c0fdaea2f587497d73f55735a7d8259676594d057ee6db5", 0x5c}], 0x2}, 0x24000800) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1001.952644] 9pnet_fd: Insufficient options for proto=fd 00:22:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = syz_open_procfs(0x0, 0x0) fcntl$setlease(r0, 0x9, 0x2) 00:22:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x0, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:22:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:22:26 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) process_vm_readv(r0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/7, 0x7}, {&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f00000004c0)=""/102, 0x66}], 0x4, &(0x7f0000000900)=[{&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/60, 0x3c}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/250, 0xfa}], 0x5, 0x0) fcntl$setlease(r1, 0x9, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x1, 0x9, 0x3, 0x0, 0xd95, 0x80000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xef, 0x2, @perf_config_ext={0x4, 0x1ff}, 0x8504, 0x1f, 0x80000001, 0x0, 0x8, 0xfffffff7, 0x4ec, 0x0, 0x8, 0x0, 0x8}, r0, 0x8, r1, 0x8) clone3(&(0x7f0000005880)={0x71060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:22:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x0, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:26 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:22:26 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x0, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = syz_open_procfs(0x0, 0x0) fcntl$setlease(r0, 0x9, 0x2) 00:22:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:22:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:22:26 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) process_vm_readv(r0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/7, 0x7}, {&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f00000004c0)=""/102, 0x66}], 0x4, &(0x7f0000000900)=[{&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/60, 0x3c}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/250, 0xfa}], 0x5, 0x0) fcntl$setlease(r1, 0x9, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x1, 0x9, 0x3, 0x0, 0xd95, 0x80000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xef, 0x2, @perf_config_ext={0x4, 0x1ff}, 0x8504, 0x1f, 0x80000001, 0x0, 0x8, 0xfffffff7, 0x4ec, 0x0, 0x8, 0x0, 0x8}, r0, 0x8, r1, 0x8) clone3(&(0x7f0000005880)={0x71060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:22:26 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x0, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:22:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = syz_open_procfs(0x0, 0x0) fcntl$setlease(r0, 0x9, 0x2) 00:22:37 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x0, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:22:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:22:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x0, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:22:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x0, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:22:37 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) process_vm_readv(r0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/7, 0x7}, {&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f00000004c0)=""/102, 0x66}], 0x4, &(0x7f0000000900)=[{&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/60, 0x3c}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/250, 0xfa}], 0x5, 0x0) fcntl$setlease(r1, 0x9, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x1, 0x9, 0x3, 0x0, 0xd95, 0x80000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xef, 0x2, @perf_config_ext={0x4, 0x1ff}, 0x8504, 0x1f, 0x80000001, 0x0, 0x8, 0xfffffff7, 0x4ec, 0x0, 0x8, 0x0, 0x8}, r0, 0x8, r1, 0x8) clone3(&(0x7f0000005880)={0x71060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1024.994799] 9pnet_fd: Insufficient options for proto=fd 00:22:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:22:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:22:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x0, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') [ 1025.186731] 9pnet_fd: Insufficient options for proto=fd 00:22:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x0, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:22:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:22:37 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:22:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) [ 1025.416162] 9pnet_fd: Insufficient options for proto=fd [ 1025.463845] FAULT_INJECTION: forcing a failure. [ 1025.463845] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1025.464933] CPU: 0 UID: 0 PID: 56430 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1025.464950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1025.464957] Call Trace: [ 1025.464961] [ 1025.464966] dump_stack_lvl+0xfa/0x120 [ 1025.465007] should_fail_ex+0x4d7/0x5e0 [ 1025.465029] _copy_from_user+0x30/0xd0 [ 1025.465047] memdup_user+0x7e/0xe0 [ 1025.465067] strndup_user+0x78/0xe0 [ 1025.465086] __x64_sys_mount+0x136/0x300 [ 1025.465100] ? __pfx___x64_sys_mount+0x10/0x10 [ 1025.465118] do_syscall_64+0xbf/0x360 [ 1025.465140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.465154] RIP: 0033:0x7f6852067b19 [ 1025.465163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1025.465175] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1025.465187] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1025.465195] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1025.465203] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1025.465210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.465217] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1025.465234] 00:22:50 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 4) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:22:50 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x0, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:22:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 00:22:50 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:22:50 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x0, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:50 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) process_vm_readv(r0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/7, 0x7}, {&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f00000004c0)=""/102, 0x66}], 0x4, &(0x7f0000000900)=[{&(0x7f0000000580)=""/24, 0x18}, {&(0x7f00000005c0)=""/60, 0x3c}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/250, 0xfa}], 0x5, 0x0) fcntl$setlease(r1, 0x9, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x1, 0x9, 0x3, 0x0, 0xd95, 0x80000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xef, 0x2, @perf_config_ext={0x4, 0x1ff}, 0x8504, 0x1f, 0x80000001, 0x0, 0x8, 0xfffffff7, 0x4ec, 0x0, 0x8, 0x0, 0x8}, r0, 0x8, r1, 0x8) clone3(&(0x7f0000005880)={0x71060100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:22:50 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) [ 1038.640963] FAULT_INJECTION: forcing a failure. [ 1038.640963] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.643077] CPU: 0 UID: 0 PID: 56753 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1038.643111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.643133] Call Trace: [ 1038.643145] [ 1038.643160] dump_stack_lvl+0xfa/0x120 [ 1038.643222] should_fail_ex+0x4d7/0x5e0 [ 1038.643273] should_failslab+0xc2/0x120 [ 1038.643305] __kmalloc_cache_noprof+0x73/0x470 [ 1038.643337] ? __might_fault+0xe0/0x190 [ 1038.643366] ? copy_mount_options+0x55/0x180 [ 1038.643402] ? copy_mount_options+0x55/0x180 [ 1038.643427] ? memdup_user+0x95/0xe0 [ 1038.643464] copy_mount_options+0x55/0x180 [ 1038.643496] __x64_sys_mount+0x1ab/0x300 [ 1038.643521] ? __pfx___x64_sys_mount+0x10/0x10 [ 1038.643558] do_syscall_64+0xbf/0x360 [ 1038.643598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.643624] RIP: 0033:0x7f6852067b19 [ 1038.643643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.643667] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1038.643691] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1038.643708] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1038.643723] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1038.643738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.643752] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1038.643789] 00:22:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 00:22:50 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:22:50 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 5) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:22:50 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:22:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x0) 00:22:51 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:01 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) (fail_nth: 1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:23:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 00:23:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:01 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x0) 00:23:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x0, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') [ 1049.262634] FAULT_INJECTION: forcing a failure. [ 1049.262634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1049.264852] CPU: 1 UID: 0 PID: 57291 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1049.264886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1049.264898] Call Trace: [ 1049.264905] [ 1049.264914] dump_stack_lvl+0xfa/0x120 [ 1049.264952] should_fail_ex+0x4d7/0x5e0 [ 1049.264981] _copy_from_user+0x30/0xd0 [ 1049.265014] copy_mount_options+0x76/0x180 [ 1049.265051] __x64_sys_mount+0x1ab/0x300 [ 1049.265073] ? __pfx___x64_sys_mount+0x10/0x10 [ 1049.265105] do_syscall_64+0xbf/0x360 [ 1049.265140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.265163] RIP: 0033:0x7f6852067b19 [ 1049.265180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1049.265201] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1049.265222] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1049.265237] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1049.265250] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1049.265263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.265276] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1049.265308] 00:23:01 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x0, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 7) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:15 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x0, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:15 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:23:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x0) 00:23:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:23:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() fork() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) 00:23:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') [ 1063.419715] FAULT_INJECTION: forcing a failure. [ 1063.419715] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.421557] CPU: 0 UID: 0 PID: 57938 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1063.421589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1063.421602] Call Trace: [ 1063.421611] [ 1063.421620] dump_stack_lvl+0xfa/0x120 [ 1063.421662] should_fail_ex+0x4d7/0x5e0 [ 1063.421693] ? getname_flags.part.0+0x48/0x540 [ 1063.421723] should_failslab+0xc2/0x120 [ 1063.421748] kmem_cache_alloc_noprof+0x5f/0x470 [ 1063.421793] getname_flags.part.0+0x48/0x540 [ 1063.421826] getname_flags+0x95/0xe0 [ 1063.421861] user_path_at+0x27/0x90 [ 1063.421898] __x64_sys_mount+0x1e9/0x300 [ 1063.421922] ? __pfx___x64_sys_mount+0x10/0x10 [ 1063.421957] do_syscall_64+0xbf/0x360 [ 1063.421995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.422027] RIP: 0033:0x7f6852067b19 [ 1063.422045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1063.422068] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1063.422091] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1063.422108] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1063.422122] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1063.422136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.422150] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1063.422185] 00:23:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 8) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') [ 1063.781941] 9pnet_fd: Insufficient options for proto=fd 00:23:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() fork() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) 00:23:16 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:16 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x0, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:16 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) [ 1063.955725] 9pnet_fd: Insufficient options for proto=fd 00:23:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 9) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:16 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1064.047454] FAULT_INJECTION: forcing a failure. [ 1064.047454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1064.049078] CPU: 1 UID: 0 PID: 58549 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1064.049101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1064.049111] Call Trace: [ 1064.049117] [ 1064.049129] dump_stack_lvl+0xfa/0x120 [ 1064.049161] should_fail_ex+0x4d7/0x5e0 [ 1064.049186] strncpy_from_user+0x3b/0x2f0 [ 1064.049215] getname_flags.part.0+0x8d/0x540 [ 1064.049239] getname_flags+0x95/0xe0 [ 1064.049264] user_path_at+0x27/0x90 [ 1064.049290] __x64_sys_mount+0x1e9/0x300 [ 1064.049308] ? __pfx___x64_sys_mount+0x10/0x10 [ 1064.049332] do_syscall_64+0xbf/0x360 [ 1064.049362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.049381] RIP: 0033:0x7f6852067b19 [ 1064.049394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:23:16 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x0, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') [ 1064.049409] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1064.049426] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1064.049437] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1064.049447] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1064.049457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.049467] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1064.049492] 00:23:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 10) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:29 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:29 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000000c0)={{0x5, 0x4}, 0x1, 0xfffffffd, 0x8, {0x1, 0x5}, 0x7f, 0x7fff}) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000000)) fcntl$setlease(r1, 0x9, 0x2) 00:23:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x0, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:23:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() fork() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) 00:23:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() (fail_nth: 1) sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:23:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1077.223426] 9pnet_fd: Insufficient options for proto=fd [ 1077.234492] FAULT_INJECTION: forcing a failure. [ 1077.234492] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.236489] CPU: 1 UID: 0 PID: 58976 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1077.236521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.236534] Call Trace: [ 1077.236542] [ 1077.236552] dump_stack_lvl+0xfa/0x120 [ 1077.236593] should_fail_ex+0x4d7/0x5e0 [ 1077.236624] should_failslab+0xc2/0x120 [ 1077.236649] __kmalloc_cache_noprof+0x73/0x470 [ 1077.236680] ? find_held_lock+0x2b/0x80 [ 1077.236715] ? __get_fs_type+0xe6/0x160 [ 1077.236736] ? alloc_fs_context+0x58/0x9e0 [ 1077.236775] ? alloc_fs_context+0x58/0x9e0 [ 1077.236805] ? _raw_read_unlock+0x1e/0x40 [ 1077.236833] alloc_fs_context+0x58/0x9e0 [ 1077.236873] path_mount+0xab9/0x1d70 [ 1077.236896] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1077.236937] ? __pfx_path_mount+0x10/0x10 [ 1077.236959] ? kmem_cache_free+0x2a1/0x460 [ 1077.236992] ? putname.part.0+0x11b/0x160 [ 1077.237026] ? getname_flags.part.0+0x1c6/0x540 [ 1077.237058] ? putname.part.0+0x11b/0x160 [ 1077.237090] __x64_sys_mount+0x27b/0x300 [ 1077.237113] ? __pfx___x64_sys_mount+0x10/0x10 [ 1077.237147] do_syscall_64+0xbf/0x360 [ 1077.237183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.237207] RIP: 0033:0x7f6852067b19 [ 1077.237225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1077.237246] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1077.237269] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1077.237284] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1077.237298] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1077.237312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1077.237325] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1077.237359] [ 1077.284684] FAULT_INJECTION: forcing a failure. [ 1077.284684] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.287821] CPU: 1 UID: 0 PID: 58981 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1077.287853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.287866] Call Trace: [ 1077.287873] [ 1077.287882] dump_stack_lvl+0xfa/0x120 [ 1077.287920] should_fail_ex+0x4d7/0x5e0 [ 1077.287949] should_failslab+0xc2/0x120 [ 1077.287972] __kmalloc_cache_noprof+0x73/0x470 [ 1077.288001] ? bdi_split_work_to_wbs+0xe0/0xca0 [ 1077.288035] ? bdi_split_work_to_wbs+0x29f/0xca0 [ 1077.288064] ? bdi_split_work_to_wbs+0x29f/0xca0 [ 1077.288086] bdi_split_work_to_wbs+0x29f/0xca0 [ 1077.288116] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 1077.288147] ? down_write+0x119/0x1f0 [ 1077.288181] ? __pfx_down_write+0x10/0x10 [ 1077.288224] sync_inodes_sb+0x19f/0x9b0 [ 1077.288252] ? __pfx_sync_inodes_sb+0x10/0x10 [ 1077.288277] ? super_lock+0x14c/0x3e0 [ 1077.288313] ? find_held_lock+0x2b/0x80 [ 1077.288345] ? __iterate_supers+0x18d/0x340 [ 1077.288376] ? lock_release+0xc8/0x290 [ 1077.288404] sync_inodes_one_sb+0x51/0x60 [ 1077.288434] __iterate_supers+0x21a/0x340 [ 1077.288473] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 1077.288509] ksys_sync+0x89/0x150 [ 1077.288538] ? __pfx_ksys_sync+0x10/0x10 [ 1077.288565] ? __pfx_ksys_write+0x10/0x10 [ 1077.288606] ? do_syscall_64+0x85/0x360 [ 1077.288642] __do_sys_sync+0xe/0x20 [ 1077.288670] do_syscall_64+0xbf/0x360 [ 1077.288708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.288731] RIP: 0033:0x7f93b146cb19 [ 1077.288748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1077.288769] RSP: 002b:00007f93ae9e2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1077.288791] RAX: ffffffffffffffda RBX: 00007f93b157ff60 RCX: 00007f93b146cb19 [ 1077.288806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1077.288819] RBP: 00007f93ae9e21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1077.288832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.288845] R13: 00007fffc511d96f R14: 00007f93ae9e2300 R15: 0000000000022000 [ 1077.288879] 00:23:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 11) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:29 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x0, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x0, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:23:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 12) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) 00:23:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:23:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:29 executing program 2: execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000440)=[&(0x7f00000000c0)='net/arp\x00', &(0x7f0000000100)='net/arp\x00', &(0x7f0000000140)=',%+\x00'], 0x400) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) getpid() fcntl$setlease(r1, 0x9, 0x2) [ 1077.911352] FAULT_INJECTION: forcing a failure. [ 1077.911352] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.912854] CPU: 0 UID: 0 PID: 59592 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1077.912880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1077.912890] Call Trace: [ 1077.912897] [ 1077.912904] dump_stack_lvl+0xfa/0x120 [ 1077.912938] should_fail_ex+0x4d7/0x5e0 [ 1077.912964] should_failslab+0xc2/0x120 [ 1077.912985] __kmalloc_cache_noprof+0x73/0x470 [ 1077.913012] ? __kmalloc_cache_noprof+0x369/0x470 [ 1077.913041] ? legacy_init_fs_context+0x44/0xe0 [ 1077.913074] ? legacy_init_fs_context+0x44/0xe0 [ 1077.913099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1077.913120] legacy_init_fs_context+0x44/0xe0 [ 1077.913146] ? __pfx_legacy_init_fs_context+0x10/0x10 [ 1077.913172] alloc_fs_context+0x570/0x9e0 [ 1077.913205] path_mount+0xab9/0x1d70 [ 1077.913224] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1077.913257] ? __pfx_path_mount+0x10/0x10 [ 1077.913274] ? kmem_cache_free+0x2a1/0x460 [ 1077.913301] ? putname.part.0+0x11b/0x160 [ 1077.913323] ? getname_flags.part.0+0x1c6/0x540 [ 1077.913349] ? putname.part.0+0x11b/0x160 [ 1077.913375] __x64_sys_mount+0x27b/0x300 [ 1077.913393] ? __pfx___x64_sys_mount+0x10/0x10 [ 1077.913421] do_syscall_64+0xbf/0x360 [ 1077.913450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.913470] RIP: 0033:0x7f6852067b19 [ 1077.913485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1077.913502] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1077.913521] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1077.913534] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1077.913545] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1077.913556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1077.913567] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1077.913595] 00:23:43 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:43 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:23:43 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x600600, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:23:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) 00:23:43 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x0, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x0) 00:23:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 13) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:43 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 14) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:44 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x0, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:44 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r3 = fork() process_vm_readv(r3, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) getpgid(r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000840), 0x8000, 0x0) fcntl$setlease(r2, 0x400, 0x0) process_vm_readv(r0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/64, 0x40}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000440)=""/132, 0x84}, {&(0x7f0000000500)=""/78, 0x4e}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000600)=""/37, 0x25}], 0xa, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/170, 0xaa}], 0x1, 0x0) fcntl$setlease(r2, 0x9, 0x2) 00:23:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x0, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1092.072669] FAULT_INJECTION: forcing a failure. [ 1092.072669] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.074639] CPU: 1 UID: 0 PID: 60724 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1092.074669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1092.074681] Call Trace: [ 1092.074689] [ 1092.074697] dump_stack_lvl+0xfa/0x120 [ 1092.074734] should_fail_ex+0x4d7/0x5e0 [ 1092.074764] should_failslab+0xc2/0x120 [ 1092.074787] __kmalloc_cache_noprof+0x73/0x470 [ 1092.074819] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1092.074854] ? v9fs_mount+0x9d/0x9e0 [ 1092.074883] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1092.074922] ? v9fs_mount+0x9d/0x9e0 [ 1092.074950] v9fs_mount+0x9d/0x9e0 [ 1092.074978] ? __pfx_v9fs_mount+0x10/0x10 [ 1092.075009] ? cap_capable+0xdb/0x3b0 [ 1092.075054] ? __pfx_v9fs_mount+0x10/0x10 [ 1092.075082] legacy_get_tree+0x109/0x220 [ 1092.075116] vfs_get_tree+0x93/0x340 [ 1092.075145] path_mount+0x122f/0x1d70 [ 1092.075167] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1092.075205] ? __pfx_path_mount+0x10/0x10 [ 1092.075226] ? kmem_cache_free+0x2a1/0x460 [ 1092.075258] ? putname.part.0+0x11b/0x160 [ 1092.075285] ? getname_flags.part.0+0x1c6/0x540 [ 1092.075315] ? putname.part.0+0x11b/0x160 [ 1092.075344] __x64_sys_mount+0x27b/0x300 [ 1092.075366] ? __pfx___x64_sys_mount+0x10/0x10 [ 1092.075398] do_syscall_64+0xbf/0x360 [ 1092.075433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.075456] RIP: 0033:0x7f6852067b19 [ 1092.075472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1092.075493] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1092.075514] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1092.075529] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1092.075542] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1092.075555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1092.075568] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1092.075600] 00:23:44 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) 00:23:54 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x0, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:54 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:54 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 15) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:23:54 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f0000000080)=""/110, 0x6e}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = fork() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000004c0)=""/116, 0x74}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/167, 0xa7}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f0000000840)=""/13, 0xd}, {&(0x7f0000000880)=""/11, 0xb}, {&(0x7f00000008c0)=""/197, 0xc5}], 0x9, &(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18001c0000e31b8cbb0000000100009ab6d19d8e3ae4f1f5a091a7ee50410d82d7a911c6ba9c30235c424e31", @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}, 0x12002) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/sockstat6\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:23:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x0, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:54 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:23:54 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x3) fcntl$setlease(r1, 0x9, 0x2) 00:23:54 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x0, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:54 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 16) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:54 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:23:54 executing program 2: sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4840) r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xef97}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000580)={0x10001, 0xaa0, 0x8000}) r3 = fork() process_vm_readv(r3, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x9, 0x2) 00:23:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') [ 1102.780095] FAULT_INJECTION: forcing a failure. [ 1102.780095] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.782838] CPU: 0 UID: 0 PID: 61578 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1102.782855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1102.782862] Call Trace: [ 1102.782866] [ 1102.782871] dump_stack_lvl+0xfa/0x120 [ 1102.782894] should_fail_ex+0x4d7/0x5e0 [ 1102.782911] should_failslab+0xc2/0x120 [ 1102.782925] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 1102.782942] ? v9fs_mount+0x9d/0x9e0 [ 1102.782957] ? legacy_get_tree+0x109/0x220 [ 1102.782973] ? vfs_get_tree+0x93/0x340 [ 1102.782988] ? path_mount+0x122f/0x1d70 [ 1102.782998] ? __x64_sys_mount+0x27b/0x300 [ 1102.783008] ? v9fs_session_init+0xaa/0x17a0 [ 1102.783025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.783042] kstrdup+0x3e/0xc0 [ 1102.783060] v9fs_session_init+0xaa/0x17a0 [ 1102.783072] ? do_raw_spin_lock+0x123/0x260 [ 1102.783090] ? find_held_lock+0x2b/0x80 [ 1102.783107] ? __create_object+0x59/0x80 [ 1102.783122] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1102.783138] ? __pfx_v9fs_session_init+0x10/0x10 [ 1102.783151] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1102.783165] ? __create_object+0x59/0x80 [ 1102.783181] ? __kmalloc_cache_noprof+0x369/0x470 [ 1102.783197] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1102.783222] v9fs_mount+0xbc/0x9e0 [ 1102.783238] ? __pfx_v9fs_mount+0x10/0x10 [ 1102.783254] ? cap_capable+0xdb/0x3b0 [ 1102.783274] ? __pfx_v9fs_mount+0x10/0x10 [ 1102.783289] legacy_get_tree+0x109/0x220 [ 1102.783306] vfs_get_tree+0x93/0x340 [ 1102.783322] path_mount+0x122f/0x1d70 [ 1102.783333] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1102.783354] ? __pfx_path_mount+0x10/0x10 [ 1102.783365] ? kmem_cache_free+0x2a1/0x460 [ 1102.783382] ? putname.part.0+0x11b/0x160 [ 1102.783396] ? getname_flags.part.0+0x1c6/0x540 [ 1102.783412] ? putname.part.0+0x11b/0x160 [ 1102.783428] __x64_sys_mount+0x27b/0x300 [ 1102.783440] ? __pfx___x64_sys_mount+0x10/0x10 [ 1102.783457] do_syscall_64+0xbf/0x360 [ 1102.783476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.783487] RIP: 0033:0x7f6852067b19 [ 1102.783497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1102.783508] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1102.783520] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1102.783528] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1102.783535] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1102.783542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1102.783549] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1102.783566] 00:23:54 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:23:54 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x0, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:23:55 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x0, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:08 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x0, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:08 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 17) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:24:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:24:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:24:08 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180), 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000000)=""/34, 0x22}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000000c0)) 00:24:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:24:08 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000002c0)=r1) sync() r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x0, 0x4100) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000240)) pread64(r2, &(0x7f0000000200)=""/50, 0x32, 0xfffffffffffffff8) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0xa2af929c76836e2e) 00:24:08 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x0, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1116.461933] FAULT_INJECTION: forcing a failure. [ 1116.461933] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.463965] CPU: 1 UID: 0 PID: 61814 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1116.463995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1116.464007] Call Trace: [ 1116.464015] [ 1116.464029] dump_stack_lvl+0xfa/0x120 [ 1116.464067] should_fail_ex+0x4d7/0x5e0 [ 1116.464097] should_failslab+0xc2/0x120 [ 1116.464121] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 1116.464153] ? v9fs_mount+0x9d/0x9e0 [ 1116.464180] ? legacy_get_tree+0x109/0x220 [ 1116.464207] ? vfs_get_tree+0x93/0x340 [ 1116.464233] ? path_mount+0x122f/0x1d70 [ 1116.464251] ? __x64_sys_mount+0x27b/0x300 [ 1116.464270] ? v9fs_session_init+0xaa/0x17a0 [ 1116.464292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.464321] kstrdup+0x3e/0xc0 [ 1116.464354] v9fs_session_init+0xaa/0x17a0 [ 1116.464376] ? do_raw_spin_lock+0x123/0x260 [ 1116.464408] ? find_held_lock+0x2b/0x80 [ 1116.464439] ? __create_object+0x59/0x80 [ 1116.464467] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1116.464495] ? __pfx_v9fs_session_init+0x10/0x10 [ 1116.464519] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1116.464545] ? __create_object+0x59/0x80 [ 1116.464573] ? __kmalloc_cache_noprof+0x369/0x470 [ 1116.464604] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1116.464650] v9fs_mount+0xbc/0x9e0 [ 1116.464678] ? __pfx_v9fs_mount+0x10/0x10 [ 1116.464708] ? cap_capable+0xdb/0x3b0 [ 1116.464744] ? __pfx_v9fs_mount+0x10/0x10 [ 1116.464772] legacy_get_tree+0x109/0x220 [ 1116.464804] vfs_get_tree+0x93/0x340 [ 1116.464833] path_mount+0x122f/0x1d70 [ 1116.464854] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1116.464909] ? __pfx_path_mount+0x10/0x10 [ 1116.464930] ? kmem_cache_free+0x2a1/0x460 [ 1116.464961] ? putname.part.0+0x11b/0x160 [ 1116.464987] ? getname_flags.part.0+0x1c6/0x540 [ 1116.465016] ? putname.part.0+0x11b/0x160 [ 1116.465046] __x64_sys_mount+0x27b/0x300 [ 1116.465068] ? __pfx___x64_sys_mount+0x10/0x10 [ 1116.465100] do_syscall_64+0xbf/0x360 [ 1116.465134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.465155] RIP: 0033:0x7f6852067b19 [ 1116.465172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1116.465192] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1116.465214] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1116.465228] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1116.465241] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1116.465255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1116.465267] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1116.465299] 00:24:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:24:08 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 18) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:24:08 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/vc', 0x406240, 0xa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x4, 0x5e, 0x5, 0x2, 0x0, 0x7d6, 0x400, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x182a, 0x9, 0x6, 0x5, 0x6, 0x80000001, 0x2, 0x0, 0xbd2, 0x0, 0x6c}) process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) 00:24:08 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x0, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:08 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) r2 = fork() sync() process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x89, 0xeb, 0x8, 0x6, 0x0, 0x5, 0x2000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x29, 0x7fff}, 0x800, 0x7, 0x4, 0x7, 0x7f, 0x4, 0x8, 0x0, 0x4dd1, 0x0, 0x3}, r2, 0xb, r1, 0xa) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x4, 0x1f, 0x44, 0x4, 0x0, 0x7, 0x4001, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x6, 0x3}, 0xecceebc5560bf455, 0x1, 0x6, 0x4, 0x200, 0x6, 0x8001, 0x0, 0x101, 0x0, 0xff}, r2, 0x9, r0, 0x5) r3 = syz_io_uring_complete(0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x9, 0x2) ioctl$TCFLSH(r4, 0x540b, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3) 00:24:08 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x0, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1116.816136] FAULT_INJECTION: forcing a failure. [ 1116.816136] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.817087] CPU: 0 UID: 0 PID: 62423 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1116.817103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1116.817111] Call Trace: [ 1116.817116] [ 1116.817120] dump_stack_lvl+0xfa/0x120 [ 1116.817146] should_fail_ex+0x4d7/0x5e0 [ 1116.817164] should_failslab+0xc2/0x120 [ 1116.817178] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 1116.817197] ? v9fs_mount+0x9d/0x9e0 [ 1116.817213] ? legacy_get_tree+0x109/0x220 [ 1116.817230] ? vfs_get_tree+0x93/0x340 [ 1116.817245] ? __x64_sys_mount+0x220/0x300 [ 1116.817257] ? v9fs_session_init+0xeb/0x17a0 [ 1116.817273] kstrdup+0x3e/0xc0 [ 1116.817293] v9fs_session_init+0xeb/0x17a0 [ 1116.817305] ? do_raw_spin_lock+0x123/0x260 [ 1116.817323] ? find_held_lock+0x2b/0x80 [ 1116.817342] ? __create_object+0x59/0x80 [ 1116.817361] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1116.817377] ? __pfx_v9fs_session_init+0x10/0x10 [ 1116.817390] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1116.817404] ? __create_object+0x59/0x80 [ 1116.817419] ? __kmalloc_cache_noprof+0x369/0x470 [ 1116.817436] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1116.817462] v9fs_mount+0xbc/0x9e0 [ 1116.817477] ? __pfx_v9fs_mount+0x10/0x10 [ 1116.817493] ? cap_capable+0xdb/0x3b0 [ 1116.817515] ? __pfx_v9fs_mount+0x10/0x10 [ 1116.817530] legacy_get_tree+0x109/0x220 [ 1116.817547] vfs_get_tree+0x93/0x340 [ 1116.817563] path_mount+0x122f/0x1d70 [ 1116.817575] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1116.817596] ? __pfx_path_mount+0x10/0x10 [ 1116.817607] ? kmem_cache_free+0x2a1/0x460 [ 1116.817624] ? putname.part.0+0x11b/0x160 [ 1116.817639] ? getname_flags.part.0+0x1c6/0x540 [ 1116.817655] ? putname.part.0+0x11b/0x160 [ 1116.817671] __x64_sys_mount+0x27b/0x300 [ 1116.817683] ? __pfx___x64_sys_mount+0x10/0x10 [ 1116.817700] do_syscall_64+0xbf/0x360 [ 1116.817722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.817735] RIP: 0033:0x7f6852067b19 [ 1116.817745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1116.817756] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1116.817768] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1116.817777] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1116.817784] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1116.817792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1116.817799] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1116.817816] 00:24:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:24:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:24:20 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 19) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:24:20 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x0, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:20 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:24:20 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:24:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:24:20 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180), 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/35, 0x23}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) preadv2(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/191, 0xbf}, {&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000500)=""/150, 0x96}], 0x3, 0x1, 0xfffffffa, 0x12) fcntl$setlease(r1, 0x9, 0x2) r3 = fork() process_vm_readv(r3, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) fork() perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x9, 0x99, 0x6, 0x3, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000140), 0x4}, 0x8c3ac480ab80e112, 0x10000, 0x4001000, 0x0, 0xfffffffffffffff9, 0x1f1, 0x1000, 0x0, 0x9, 0x0, 0x40}, r3, 0xb, r1, 0x8) 00:24:20 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x0, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:20 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1128.876955] 9pnet_fd: Insufficient options for proto=fd 00:24:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1129.003458] 9pnet_fd: Insufficient options for proto=fd 00:24:21 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x36, 0x48, 0xc0, 0x0, 0xd2a6, 0x504, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0xc34a2655d75ab3a3, @perf_config_ext={0x3, 0xffff}, 0x0, 0x4, 0x800, 0x2, 0x9, 0x10000, 0x9, 0x0, 0x2, 0x0, 0x5}, r1, 0x10, r0, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:24:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 20) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:24:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:24:21 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x0, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1129.212439] 9pnet_fd: Insufficient options for proto=fd 00:24:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x0, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:24:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1129.298011] FAULT_INJECTION: forcing a failure. [ 1129.298011] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.299178] CPU: 1 UID: 0 PID: 63465 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1129.299214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1129.299232] Call Trace: [ 1129.299241] [ 1129.299252] dump_stack_lvl+0xfa/0x120 [ 1129.299303] should_fail_ex+0x4d7/0x5e0 [ 1129.299330] should_failslab+0xc2/0x120 [ 1129.299343] __kmalloc_cache_noprof+0x73/0x470 [ 1129.299362] ? p9_client_create+0xc0/0x11b0 [ 1129.299376] ? __pfx_perf_trace_lock+0x10/0x10 [ 1129.299394] ? p9_client_create+0xc0/0x11b0 [ 1129.299406] p9_client_create+0xc0/0x11b0 [ 1129.299420] ? __create_object+0x59/0x80 [ 1129.299437] ? __pfx_p9_client_create+0x10/0x10 [ 1129.299450] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1129.299472] ? kasan_save_track+0x14/0x30 [ 1129.299490] ? __kasan_kmalloc+0x7f/0x90 [ 1129.299506] ? trace_kmalloc+0x1f/0xb0 [ 1129.299518] ? __kmalloc_node_track_caller_noprof+0x20b/0x490 [ 1129.299535] ? v9fs_mount+0x9d/0x9e0 [ 1129.299551] ? legacy_get_tree+0x109/0x220 [ 1129.299567] ? vfs_get_tree+0x93/0x340 [ 1129.299583] ? lockdep_init_map_type+0x4b/0x240 [ 1129.299599] ? __raw_spin_lock_init+0x3a/0x110 [ 1129.299618] v9fs_session_init+0x1df/0x17a0 [ 1129.299632] ? do_raw_spin_lock+0x123/0x260 [ 1129.299648] ? find_held_lock+0x2b/0x80 [ 1129.299666] ? __create_object+0x59/0x80 [ 1129.299681] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1129.299698] ? __pfx_v9fs_session_init+0x10/0x10 [ 1129.299711] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1129.299728] ? __create_object+0x59/0x80 [ 1129.299744] ? __kmalloc_cache_noprof+0x369/0x470 [ 1129.299761] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1129.299788] v9fs_mount+0xbc/0x9e0 [ 1129.299804] ? __pfx_v9fs_mount+0x10/0x10 [ 1129.299821] ? cap_capable+0xdb/0x3b0 [ 1129.299842] ? __pfx_v9fs_mount+0x10/0x10 [ 1129.299857] legacy_get_tree+0x109/0x220 [ 1129.299875] vfs_get_tree+0x93/0x340 [ 1129.299891] path_mount+0x122f/0x1d70 [ 1129.299904] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1129.299924] ? __pfx_path_mount+0x10/0x10 [ 1129.299936] ? kmem_cache_free+0x2a1/0x460 [ 1129.299953] ? putname.part.0+0x11b/0x160 [ 1129.299967] ? getname_flags.part.0+0x1c6/0x540 [ 1129.299984] ? putname.part.0+0x11b/0x160 [ 1129.300001] __x64_sys_mount+0x27b/0x300 [ 1129.300012] ? __pfx___x64_sys_mount+0x10/0x10 [ 1129.300035] do_syscall_64+0xbf/0x360 [ 1129.300055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.300068] RIP: 0033:0x7f6852067b19 [ 1129.300078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1129.300090] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1129.300102] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1129.300110] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1129.300118] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1129.300125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1129.300133] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1129.300151] 00:24:21 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:24:21 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x0, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:21 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) [ 1129.438583] 9pnet_fd: Insufficient options for proto=fd 00:24:30 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:24:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) sync() 00:24:30 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x0, 0x8001, 0xd, 0x7, 0xac20, 0x2, 0x80000001, 0x4, 0x7, 0x3, 0x80, 0xfffffff9, 0x10000, 0xb0c5, 0x9, 0x7fffffff, 0x5, 0xffffffff, 0x4, 0x20, 0x0, 0xb2}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') process_vm_readv(r0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/235, 0xeb}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000540)=""/124, 0x7c}], 0x1, 0x0) ptrace$setsig(0x4203, 0xffffffffffffffff, 0x4, &(0x7f00000005c0)={0x39, 0x7f, 0xffffff7f}) fcntl$setlease(r1, 0x400, 0x0) creat(&(0x7f0000000640)='./file0\x00', 0x3) fcntl$setlease(r1, 0x9, 0x2) 00:24:30 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x0, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:30 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x0, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:30 executing program 0: sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:24:30 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x0, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:24:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1138.292769] 9pnet_fd: Insufficient options for proto=fd 00:24:30 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:24:30 executing program 0: sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) [ 1138.654724] 9pnet_fd: Insufficient options for proto=fd 00:24:41 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 22) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:24:41 executing program 0: sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:24:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:24:41 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x9, 0x84100) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x40, 0x4, 0x2f, 0x0, 0x2, 0x30206, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x404, 0x1, 0x56, 0xd2697efddaa62e32, 0x2, 0x3ff, 0x5, 0x0, 0x3, 0x0, 0x9b}, 0xffffffffffffffff, 0x4, r1, 0xa) sync() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') dup2(r0, r2) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) sync() 00:24:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x0, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x0, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:24:41 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x0, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:41 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xe2ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x84, 0xf7, 0x20, 0x5, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x5008c, 0x9, 0x8, 0x6, 0x4, 0xd5, 0x5, 0x0, 0x3, 0x0, 0x244}, 0x0, 0xb, r0, 0x8) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) 00:24:41 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1149.428976] FAULT_INJECTION: forcing a failure. [ 1149.428976] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.430099] CPU: 1 UID: 0 PID: 64834 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1149.430116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1149.430123] Call Trace: [ 1149.430127] [ 1149.430132] dump_stack_lvl+0xfa/0x120 [ 1149.430155] should_fail_ex+0x4d7/0x5e0 [ 1149.430172] should_failslab+0xc2/0x120 [ 1149.430185] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 1149.430205] ? p9_client_create+0x487/0x11b0 [ 1149.430220] kstrdup+0x3e/0xc0 [ 1149.430239] p9_client_create+0x487/0x11b0 [ 1149.430255] ? __pfx_p9_client_create+0x10/0x10 [ 1149.430266] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1149.430288] ? kasan_save_track+0x14/0x30 [ 1149.430300] ? __kasan_kmalloc+0x7f/0x90 [ 1149.430312] ? trace_kmalloc+0x1f/0xb0 [ 1149.430324] ? __kmalloc_node_track_caller_noprof+0x20b/0x490 [ 1149.430340] ? v9fs_mount+0x9d/0x9e0 [ 1149.430355] ? legacy_get_tree+0x109/0x220 [ 1149.430371] ? vfs_get_tree+0x93/0x340 [ 1149.430386] ? lockdep_init_map_type+0x4b/0x240 [ 1149.430402] ? __raw_spin_lock_init+0x3a/0x110 [ 1149.430420] v9fs_session_init+0x1df/0x17a0 [ 1149.430433] ? do_raw_spin_lock+0x123/0x260 [ 1149.430449] ? find_held_lock+0x2b/0x80 [ 1149.430466] ? __create_object+0x59/0x80 [ 1149.430482] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1149.430498] ? __pfx_v9fs_session_init+0x10/0x10 [ 1149.430511] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1149.430525] ? __create_object+0x59/0x80 [ 1149.430541] ? __kmalloc_cache_noprof+0x369/0x470 [ 1149.430557] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1149.430583] v9fs_mount+0xbc/0x9e0 [ 1149.430598] ? __pfx_v9fs_mount+0x10/0x10 [ 1149.430614] ? cap_capable+0xdb/0x3b0 [ 1149.430634] ? __pfx_v9fs_mount+0x10/0x10 [ 1149.430649] legacy_get_tree+0x109/0x220 [ 1149.430666] vfs_get_tree+0x93/0x340 [ 1149.430682] path_mount+0x122f/0x1d70 [ 1149.430694] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1149.430714] ? __pfx_path_mount+0x10/0x10 [ 1149.430725] ? kmem_cache_free+0x2a1/0x460 [ 1149.430741] ? putname.part.0+0x11b/0x160 [ 1149.430755] ? getname_flags.part.0+0x1c6/0x540 [ 1149.430771] ? putname.part.0+0x11b/0x160 [ 1149.430788] __x64_sys_mount+0x27b/0x300 [ 1149.430799] ? __pfx___x64_sys_mount+0x10/0x10 [ 1149.430816] do_syscall_64+0xbf/0x360 [ 1149.430835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.430848] RIP: 0033:0x7f6852067b19 [ 1149.430858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1149.430869] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1149.430880] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1149.430889] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1149.430896] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1149.430903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1149.430910] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1149.430927] 00:24:41 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 23) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:24:41 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000940)={0x53, 0xffffffffffffffff, 0xfffffffffffffe25, 0x7f, @scatter={0xe731339ef8af54c4, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)=""/177, 0xb1}, {&(0x7f0000000440)=""/116, 0x74}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000580)=""/190, 0xbe}, {&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000640)=""/76, 0x4c}, {&(0x7f00000006c0)=""/83, 0x53}]}, &(0x7f0000000840)="2cc26fdc0fc73570edaa77c715cda5f691b5ffe136ca23d23a0688b1d67df40a7de82e096ac92546d7e7d9b014c70619c07a9e962680e69e5beaf69ddf66c849556591878f54eacb56494d3d0a109e40461570f63542921f550df66ce410476c7dd4a2599b1ac2491d63da102fc9689607c60a1f70b294fb998b8532948f11c0bcebcc7688b8694ab6534adddb2c1b9341c8fb40a439da43f4585de2ca3687167fc0e3caa409e83a1816f414bd9f53b4dbd0b741108b67756d7204251327b828095c1b073bf9c251b2a1968c7519f26876e62899747761", &(0x7f0000000a40)=""/131, 0xd75, 0x20, 0xffffffffffffffff, &(0x7f0000000140)}) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) r2 = fork() process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) perf_event_open(&(0x7f00000009c0)={0x4, 0x80, 0x8, 0x3, 0xfc, 0x1, 0x0, 0x101, 0x4000, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0x53, 0x6}, 0x3840, 0x8, 0x4, 0x7, 0x6, 0x800, 0x0, 0x0, 0x81, 0x0, 0xe429}, r2, 0x10, 0xffffffffffffffff, 0x0) 00:24:41 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:24:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x0, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:41 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:41 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r0, &(0x7f0000000080)='net/route\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:24:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:24:42 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:24:52 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:24:52 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x0, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:52 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:24:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:52 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace(0x8, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) 00:24:52 executing program 1: symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x40, 0x1, 0x3, 0x4, 0x0, 0x0, 0x11609, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5c85, 0x1, @perf_bp={&(0x7f0000000080), 0x3}, 0x100, 0x9, 0x5, 0x1, 0x9, 0x8000, 0x7, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) sync() r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x8) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000240)={{r2}, "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"}) 00:24:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 24) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:24:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x0, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') [ 1160.631414] FAULT_INJECTION: forcing a failure. [ 1160.631414] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.632790] CPU: 1 UID: 0 PID: 65878 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1160.632809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1160.632817] Call Trace: [ 1160.632822] [ 1160.632827] dump_stack_lvl+0xfa/0x120 [ 1160.632854] should_fail_ex+0x4d7/0x5e0 [ 1160.632873] should_failslab+0xc2/0x120 [ 1160.632887] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 1160.632910] ? __pfx_match_token+0x10/0x10 [ 1160.632928] ? p9_client_create+0x588/0x11b0 [ 1160.632946] kmemdup_nul+0x3b/0xa0 [ 1160.632967] p9_client_create+0x588/0x11b0 [ 1160.632986] ? __pfx_p9_client_create+0x10/0x10 [ 1160.632999] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1160.633028] ? kasan_save_track+0x14/0x30 [ 1160.633043] ? __kasan_kmalloc+0x7f/0x90 [ 1160.633057] ? trace_kmalloc+0x1f/0xb0 [ 1160.633071] ? legacy_get_tree+0x109/0x220 [ 1160.633088] ? vfs_get_tree+0x93/0x340 [ 1160.633106] ? lockdep_init_map_type+0x4b/0x240 [ 1160.633124] ? __raw_spin_lock_init+0x3a/0x110 [ 1160.633145] v9fs_session_init+0x1df/0x17a0 [ 1160.633161] ? do_raw_spin_lock+0x123/0x260 [ 1160.633179] ? find_held_lock+0x2b/0x80 [ 1160.633199] ? __create_object+0x59/0x80 [ 1160.633217] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1160.633235] ? __pfx_v9fs_session_init+0x10/0x10 [ 1160.633250] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1160.633266] ? __create_object+0x59/0x80 [ 1160.633283] ? __kmalloc_cache_noprof+0x369/0x470 [ 1160.633302] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1160.633331] v9fs_mount+0xbc/0x9e0 [ 1160.633349] ? __pfx_v9fs_mount+0x10/0x10 [ 1160.633368] ? cap_capable+0xdb/0x3b0 [ 1160.633403] ? __pfx_v9fs_mount+0x10/0x10 [ 1160.633420] legacy_get_tree+0x109/0x220 [ 1160.633440] vfs_get_tree+0x93/0x340 [ 1160.633458] path_mount+0x122f/0x1d70 [ 1160.633471] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1160.633494] ? __pfx_path_mount+0x10/0x10 [ 1160.633507] ? kmem_cache_free+0x2a1/0x460 [ 1160.633526] ? putname.part.0+0x11b/0x160 [ 1160.633542] ? getname_flags.part.0+0x1c6/0x540 [ 1160.633561] ? putname.part.0+0x11b/0x160 [ 1160.633579] __x64_sys_mount+0x27b/0x300 [ 1160.633592] ? __pfx___x64_sys_mount+0x10/0x10 [ 1160.633612] do_syscall_64+0xbf/0x360 [ 1160.633633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.633648] RIP: 0033:0x7f6852067b19 [ 1160.633659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1160.633672] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1160.633685] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1160.633694] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1160.633702] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1160.633711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1160.633718] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1160.633738] 00:24:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 25) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:24:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:52 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:24:53 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x42) dup2(r3, r0) fcntl$setlease(r2, 0x9, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x9, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x1, 0x58, 0x1f, 0x0, 0x5d57, 0x4000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0xffffffff, 0x80000001}, 0x208, 0x8, 0x4, 0x2, 0x9, 0xc2, 0x3f, 0x0, 0x8001, 0x0, 0x2}, r4, 0x1, r5, 0x1) 00:24:53 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:53 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x0, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:53 executing program 1: ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:24:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x0, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:24:53 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x0, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:24:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 26) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1161.256945] FAULT_INJECTION: forcing a failure. [ 1161.256945] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.259093] CPU: 0 UID: 0 PID: 66700 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1161.259127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1161.259140] Call Trace: [ 1161.259147] [ 1161.259156] dump_stack_lvl+0xfa/0x120 [ 1161.259206] should_fail_ex+0x4d7/0x5e0 [ 1161.259236] should_failslab+0xc2/0x120 [ 1161.259259] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 1161.259306] ? __pfx_match_token+0x10/0x10 [ 1161.259335] ? p9_client_create+0x588/0x11b0 [ 1161.259364] kmemdup_nul+0x3b/0xa0 [ 1161.259408] p9_client_create+0x588/0x11b0 [ 1161.259439] ? __pfx_p9_client_create+0x10/0x10 [ 1161.259461] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1161.259512] ? kasan_save_track+0x14/0x30 [ 1161.259538] ? __kasan_kmalloc+0x7f/0x90 [ 1161.259565] ? trace_kmalloc+0x1f/0xb0 [ 1161.259597] ? legacy_get_tree+0x109/0x220 [ 1161.259628] ? vfs_get_tree+0x93/0x340 [ 1161.259661] ? lockdep_init_map_type+0x4b/0x240 [ 1161.259699] ? __raw_spin_lock_init+0x3a/0x110 [ 1161.259735] v9fs_session_init+0x1df/0x17a0 [ 1161.259760] ? do_raw_spin_lock+0x123/0x260 [ 1161.259800] ? find_held_lock+0x2b/0x80 [ 1161.259833] ? __create_object+0x59/0x80 [ 1161.259861] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1161.259900] ? __pfx_v9fs_session_init+0x10/0x10 [ 1161.259924] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1161.259951] ? __create_object+0x59/0x80 [ 1161.259987] ? __kmalloc_cache_noprof+0x369/0x470 [ 1161.260030] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1161.260082] v9fs_mount+0xbc/0x9e0 [ 1161.260117] ? __pfx_v9fs_mount+0x10/0x10 [ 1161.260148] ? cap_capable+0xdb/0x3b0 [ 1161.260195] ? __pfx_v9fs_mount+0x10/0x10 [ 1161.260223] legacy_get_tree+0x109/0x220 [ 1161.260255] vfs_get_tree+0x93/0x340 [ 1161.260295] path_mount+0x122f/0x1d70 [ 1161.260317] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1161.260354] ? __pfx_path_mount+0x10/0x10 [ 1161.260383] ? kmem_cache_free+0x2a1/0x460 [ 1161.260418] ? putname.part.0+0x11b/0x160 [ 1161.260444] ? getname_flags.part.0+0x1c6/0x540 [ 1161.260481] ? putname.part.0+0x11b/0x160 [ 1161.260511] __x64_sys_mount+0x27b/0x300 [ 1161.260532] ? __pfx___x64_sys_mount+0x10/0x10 [ 1161.260571] do_syscall_64+0xbf/0x360 [ 1161.260606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.260633] RIP: 0033:0x7f6852067b19 [ 1161.260656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1161.260677] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1161.260699] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1161.260714] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1161.260731] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1161.260749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.260765] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1161.260797] 00:25:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x9, 0x2) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x98, 0xb, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x98}}, 0x20000080) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:25:02 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x0, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:25:02 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:25:02 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x400000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000004c0)={0x4, 0x80, 0x80, 0x2, 0x75, 0x1, 0x0, 0x1, 0x40000, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x8000, 0x8db}, 0x419, 0x0, 0x2, 0x3, 0x7ff, 0x5e40, 0x7fff, 0x0, 0x0, 0x0, 0x9}) r2 = fork() r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x2d) process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f00000011c0)=""/4084, 0xff4}], 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x3, 0x2, 0x1c, 0x81, 0x0, 0x6728, 0x28000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x4000, 0xfffffffffffffffa, 0x8, 0x1, 0x1a8, 0x4, 0x5, 0x0, 0x2, 0x0, 0x8}, r2, 0x7, r0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r5 = signalfd4(r3, &(0x7f0000000540)={[0x2]}, 0x8, 0x80800) fcntl$setlease(r5, 0x400, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x3f) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r6}], 0x1, 0x8) r7 = fork() process_vm_readv(r7, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000440)={0x2, r7}) fcntl$setlease(r4, 0x9, 0x2) 00:25:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 27) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:02 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:25:02 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/71, 0x47}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/130, 0x82}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000000100)=""/73, 0x49}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x6, 0x0) process_vm_readv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)=""/3, 0x3}, {&(0x7f0000000840)=""/51, 0x33}], 0x3, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/254, 0xfe}, {&(0x7f00000009c0)=""/185, 0xb9}], 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getpgid(r1) r4 = accept$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000780)=0x14) r5 = getpid() process_vm_readv(r5, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/23, 0x17}, {&(0x7f0000000ac0)=""/59, 0x3b}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/107, 0x6b}, {&(0x7f0000000bc0)=""/236, 0xec}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d00)=""/38, 0x26}], 0x4, 0x0) kcmp(r1, 0x0, 0x5, r4, r0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) 00:25:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:02 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:02 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 28) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:02 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') sync() ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:25:02 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1170.918788] FAULT_INJECTION: forcing a failure. [ 1170.918788] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.919809] CPU: 1 UID: 0 PID: 67499 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1170.919825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1170.919832] Call Trace: [ 1170.919837] [ 1170.919841] dump_stack_lvl+0xfa/0x120 [ 1170.919864] should_fail_ex+0x4d7/0x5e0 [ 1170.919882] should_failslab+0xc2/0x120 [ 1170.919895] __kmalloc_cache_noprof+0x73/0x470 [ 1170.919913] ? p9_fd_create+0x17e/0x530 [ 1170.919932] ? p9_fd_create+0x17e/0x530 [ 1170.919947] p9_fd_create+0x17e/0x530 [ 1170.919962] ? __pfx_p9_fd_create+0x10/0x10 [ 1170.919977] ? irq_entries_start+0x4/0xcb0 [ 1170.919990] ? p9_client_create+0x784/0x11b0 [ 1170.920005] p9_client_create+0x7eb/0x11b0 [ 1170.920025] ? __pfx_p9_client_create+0x10/0x10 [ 1170.920037] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1170.920059] ? kasan_save_track+0x14/0x30 [ 1170.920072] ? __kasan_kmalloc+0x7f/0x90 [ 1170.920084] ? trace_kmalloc+0x1f/0xb0 [ 1170.920096] ? legacy_get_tree+0x109/0x220 [ 1170.920112] ? vfs_get_tree+0x93/0x340 [ 1170.920127] ? lockdep_init_map_type+0x4b/0x240 [ 1170.920143] ? __raw_spin_lock_init+0x3a/0x110 [ 1170.920161] v9fs_session_init+0x1df/0x17a0 [ 1170.920175] ? do_raw_spin_lock+0x123/0x260 [ 1170.920191] ? find_held_lock+0x2b/0x80 [ 1170.920208] ? __create_object+0x59/0x80 [ 1170.920224] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1170.920240] ? __pfx_v9fs_session_init+0x10/0x10 [ 1170.920254] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1170.920268] ? __create_object+0x59/0x80 [ 1170.920283] ? __kmalloc_cache_noprof+0x369/0x470 [ 1170.920306] v9fs_mount+0xbc/0x9e0 [ 1170.920322] ? __pfx_v9fs_mount+0x10/0x10 [ 1170.920338] ? cap_capable+0xdb/0x3b0 [ 1170.920358] ? __pfx_v9fs_mount+0x10/0x10 [ 1170.920373] legacy_get_tree+0x109/0x220 [ 1170.920391] vfs_get_tree+0x93/0x340 [ 1170.920406] path_mount+0x122f/0x1d70 [ 1170.920418] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1170.920438] ? __pfx_path_mount+0x10/0x10 [ 1170.920449] ? kmem_cache_free+0x2a1/0x460 [ 1170.920466] ? putname.part.0+0x11b/0x160 [ 1170.920480] ? getname_flags.part.0+0x1c6/0x540 [ 1170.920496] ? putname.part.0+0x11b/0x160 [ 1170.920512] __x64_sys_mount+0x27b/0x300 [ 1170.920524] ? __pfx___x64_sys_mount+0x10/0x10 [ 1170.920541] do_syscall_64+0xbf/0x360 [ 1170.920560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.920572] RIP: 0033:0x7f6852067b19 [ 1170.920581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1170.920593] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1170.920604] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1170.920613] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1170.920620] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1170.920627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1170.920634] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1170.920651] 00:25:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x0, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:25:12 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x9, 0x2) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x210, 0x1, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9e3}, @CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x42}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, @CTA_EXPECT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_EXPECT_MASTER={0xb8, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) dup2(r3, r4) 00:25:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 29) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:12 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:12 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) sync() sync() fstat(r0, &(0x7f0000000080)) 00:25:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x0, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:25:12 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) [ 1180.725708] FAULT_INJECTION: forcing a failure. [ 1180.725708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.727479] CPU: 1 UID: 0 PID: 67775 Comm: syz-executor.4 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1180.727509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1180.727529] Call Trace: [ 1180.727540] [ 1180.727554] dump_stack_lvl+0xfa/0x120 [ 1180.727613] should_fail_ex+0x4d7/0x5e0 [ 1180.727661] _copy_from_user+0x30/0xd0 [ 1180.727701] memdup_user+0x7e/0xe0 [ 1180.727736] strndup_user+0x78/0xe0 [ 1180.727771] __x64_sys_mount+0x136/0x300 [ 1180.727795] ? __pfx___x64_sys_mount+0x10/0x10 [ 1180.727828] do_syscall_64+0xbf/0x360 [ 1180.727862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.727886] RIP: 0033:0x7f550382db19 [ 1180.727903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1180.727923] RSP: 002b:00007f5500da3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1180.727945] RAX: ffffffffffffffda RBX: 00007f5503940f60 RCX: 00007f550382db19 [ 1180.727960] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1180.727974] RBP: 00007f5500da31d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1180.727987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.728000] R13: 00007ffe0e64948f R14: 00007f5500da3300 R15: 0000000000022000 [ 1180.728039] 00:25:12 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:13 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:13 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x1, 0xf2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="df523f3f9c8ac61608c6661959faa8d70d830cb1c96552f148bfbd98e5a4", @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x100, 0x32}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x80}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040044}, 0x81) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1bc, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6f34}, @NL80211_ATTR_VENDOR_DATA={0xf8, 0xc5, "8bd9dbc33edc339c60a7b6daa171b15c40f102244aae6be2a0de2dc17b965b563615e49008aa9818e4709c4e65300d8930ebf4673bb22734b1a346bb0d503793f5c6aedc920145f8ebc9987b3174200329c8f316603cdb511958b8ce85ad714c4fcfff17dacc12c024d19edb806291b609d72d6aab3efdac641ff71865ce3e09d9ddaa88f297e1c384bad43b6ed47efc56c915d6ea8eb99781c8728ad69eb8b8b3dccebe2549a851e93bdcff93264c085f1d07b70c249f909c1543e5ad53ab972828aa056333ecdad504f8a1ee35022319dbe961d959bb0d6aef74e9830486a51ba28d08c3e6e1eab72cd0cc58b1a5643100b8ba"}, @NL80211_ATTR_VENDOR_DATA={0x7c, 0xc5, "7a8a5cafcef1306c0cb4c98bc52ba0c3d52cd8f2d2e5ae10741a562ec27ea34a37801032d2baf81b65b4278a816a2ddf792a104495ffdf1540935f9044a4befa1937ed836632a95f3432804ec5bc7fcba087855d5bfcabbea19f001ef863ee5c795b8e40e80175ee940b374e14c1a04f7d3bdd6c75ecb906"}, @NL80211_ATTR_VENDOR_DATA={0x23, 0xc5, "00390c12c99dc4ca8b99e46d999ba261f9abef8f8033f5f757246d6b12426a"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x28000004}, 0x20000000) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:25:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 30) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1181.045883] 9pnet_fd: Insufficient options for proto=fd 00:25:13 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) [ 1181.261544] FAULT_INJECTION: forcing a failure. [ 1181.261544] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.263408] CPU: 1 UID: 0 PID: 68292 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1181.263459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1181.263481] Call Trace: [ 1181.263492] [ 1181.263506] dump_stack_lvl+0xfa/0x120 [ 1181.263565] should_fail_ex+0x4d7/0x5e0 [ 1181.263593] ? p9_tag_alloc+0x9b/0x820 [ 1181.263613] should_failslab+0xc2/0x120 [ 1181.263636] kmem_cache_alloc_noprof+0x5f/0x470 [ 1181.263667] ? register_lock_class+0x41/0x560 [ 1181.263701] p9_tag_alloc+0x9b/0x820 [ 1181.263725] ? __pfx_p9_tag_alloc+0x10/0x10 [ 1181.263748] ? perf_trace_lock+0xb5/0x5d0 [ 1181.263772] ? v9fs_session_init+0x1df/0x17a0 [ 1181.263807] p9_client_prepare_req+0x17f/0x460 [ 1181.263831] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1181.263857] ? p9_pollwait+0x1ab/0x210 [ 1181.263887] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1181.263920] p9_client_rpc+0x1a0/0xba0 [ 1181.263947] ? __pfx_p9_client_rpc+0x10/0x10 [ 1181.263966] ? __pfx_p9_pollwait+0x10/0x10 [ 1181.263992] ? __pfx_pipe_poll+0x10/0x10 [ 1181.264036] ? p9_fd_poll+0x1e0/0x2c0 [ 1181.264070] ? p9_fd_create+0x34e/0x530 [ 1181.264098] ? __pfx_p9_fd_create+0x10/0x10 [ 1181.264129] ? p9_client_create+0x784/0x11b0 [ 1181.264157] p9_client_create+0xbd1/0x11b0 [ 1181.264187] ? __pfx_p9_client_create+0x10/0x10 [ 1181.264209] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1181.264249] ? kasan_save_track+0x14/0x30 [ 1181.264272] ? __kasan_kmalloc+0x7f/0x90 [ 1181.264294] ? trace_kmalloc+0x1f/0xb0 [ 1181.264318] ? legacy_get_tree+0x109/0x220 [ 1181.264345] ? vfs_get_tree+0x93/0x340 [ 1181.264372] ? lockdep_init_map_type+0x4b/0x240 [ 1181.264399] ? __raw_spin_lock_init+0x3a/0x110 [ 1181.264433] v9fs_session_init+0x1df/0x17a0 [ 1181.264456] ? do_raw_spin_lock+0x123/0x260 [ 1181.264486] ? find_held_lock+0x2b/0x80 [ 1181.264517] ? __create_object+0x59/0x80 [ 1181.264545] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1181.264572] ? __pfx_v9fs_session_init+0x10/0x10 [ 1181.264596] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1181.264623] ? __create_object+0x59/0x80 [ 1181.264652] ? __kmalloc_cache_noprof+0x369/0x470 [ 1181.264683] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1181.264731] v9fs_mount+0xbc/0x9e0 [ 1181.264763] ? __pfx_v9fs_mount+0x10/0x10 [ 1181.264793] ? cap_capable+0xdb/0x3b0 [ 1181.264830] ? __pfx_v9fs_mount+0x10/0x10 [ 1181.264858] legacy_get_tree+0x109/0x220 [ 1181.264890] vfs_get_tree+0x93/0x340 [ 1181.264918] path_mount+0x122f/0x1d70 [ 1181.264940] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1181.264977] ? __pfx_path_mount+0x10/0x10 [ 1181.264998] ? kmem_cache_free+0x2a1/0x460 [ 1181.265029] ? putname.part.0+0x11b/0x160 [ 1181.265055] ? getname_flags.part.0+0x1c6/0x540 [ 1181.265085] ? putname.part.0+0x11b/0x160 [ 1181.265115] __x64_sys_mount+0x27b/0x300 [ 1181.265137] ? __pfx___x64_sys_mount+0x10/0x10 [ 1181.265169] do_syscall_64+0xbf/0x360 [ 1181.265204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.265227] RIP: 0033:0x7f6852067b19 [ 1181.265245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1181.265265] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1181.265287] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1181.265302] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1181.265315] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1181.265329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1181.265341] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1181.265373] 00:25:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) syz_open_procfs(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') futimesat(r2, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000040), &(0x7f0000000140), 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:26 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:26 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:25:26 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x0, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:25:26 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) process_vm_readv(r1, &(0x7f0000000800)=[{}, {&(0x7f0000000080)=""/56, 0x38}, {&(0x7f00000000c0)=""/94, 0x5e}, {&(0x7f0000000440)=""/215, 0xd7}, {&(0x7f0000000540)=""/134, 0x86}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000600)=""/98, 0x62}, {&(0x7f0000000680)=""/210, 0xd2}, {&(0x7f0000000780)=""/108, 0x6c}], 0x9, &(0x7f0000000b00)=[{&(0x7f00000008c0)}, {&(0x7f0000000900)=""/223, 0xdf}, {&(0x7f0000000a00)=""/39, 0x27}, {&(0x7f0000000a40)=""/175, 0xaf}], 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) 00:25:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 31) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xfffffffffffffff8) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) [ 1194.780426] 9pnet_fd: Insufficient options for proto=fd 00:25:26 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1194.857115] audit: type=1400 audit(1752539127.006:10): avc: denied { write } for pid=68610 comm="syz-executor.4" name="fd" dev="proc" ino=22169 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 00:25:27 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 00:25:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) [ 1194.973859] 9pnet_fd: Insufficient options for proto=fd 00:25:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1195.090353] 9pnet_fd: Insufficient options for proto=fd 00:25:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 32) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x0, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:25:27 executing program 1: r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, r0, 0xe, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) fcntl$setlease(r1, 0x400, 0x2) [ 1195.235465] FAULT_INJECTION: forcing a failure. [ 1195.235465] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.237747] CPU: 1 UID: 0 PID: 69277 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1195.237833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1195.237866] Call Trace: [ 1195.237882] [ 1195.237899] dump_stack_lvl+0xfa/0x120 [ 1195.237957] should_fail_ex+0x4d7/0x5e0 [ 1195.237991] ? p9_fcall_init+0x97/0x290 [ 1195.238038] should_failslab+0xc2/0x120 [ 1195.238065] __kmalloc_noprof+0xb4/0x4b0 [ 1195.238100] ? __create_object+0x59/0x80 [ 1195.238141] p9_fcall_init+0x97/0x290 [ 1195.238185] p9_tag_alloc+0x169/0x820 [ 1195.238213] ? __pfx_p9_tag_alloc+0x10/0x10 [ 1195.238240] ? perf_trace_lock+0xb5/0x5d0 [ 1195.238269] ? v9fs_session_init+0x1df/0x17a0 [ 1195.238310] p9_client_prepare_req+0x17f/0x460 [ 1195.238339] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1195.238369] ? p9_pollwait+0x1ab/0x210 [ 1195.238404] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1195.238442] p9_client_rpc+0x1a0/0xba0 [ 1195.238474] ? __pfx_p9_client_rpc+0x10/0x10 [ 1195.238497] ? __pfx_p9_pollwait+0x10/0x10 [ 1195.238527] ? __pfx_pipe_poll+0x10/0x10 [ 1195.238570] ? p9_fd_poll+0x1e0/0x2c0 [ 1195.238609] ? p9_fd_create+0x34e/0x530 [ 1195.238643] ? __pfx_p9_fd_create+0x10/0x10 [ 1195.238680] ? p9_client_create+0x784/0x11b0 [ 1195.238712] p9_client_create+0xbd1/0x11b0 [ 1195.238748] ? __pfx_p9_client_create+0x10/0x10 [ 1195.238773] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1195.238819] ? kasan_save_track+0x14/0x30 [ 1195.238847] ? __kasan_kmalloc+0x7f/0x90 [ 1195.238874] ? trace_kmalloc+0x1f/0xb0 [ 1195.238902] ? legacy_get_tree+0x109/0x220 [ 1195.238935] ? vfs_get_tree+0x93/0x340 [ 1195.238968] ? lockdep_init_map_type+0x4b/0x240 [ 1195.239000] ? __raw_spin_lock_init+0x3a/0x110 [ 1195.239041] v9fs_session_init+0x1df/0x17a0 [ 1195.239068] ? do_raw_spin_lock+0x123/0x260 [ 1195.239103] ? find_held_lock+0x2b/0x80 [ 1195.239140] ? __create_object+0x59/0x80 [ 1195.239172] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1195.239204] ? __pfx_v9fs_session_init+0x10/0x10 [ 1195.239232] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1195.239263] ? __create_object+0x59/0x80 [ 1195.239297] ? __kmalloc_cache_noprof+0x369/0x470 [ 1195.239333] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1195.239388] v9fs_mount+0xbc/0x9e0 [ 1195.239422] ? __pfx_v9fs_mount+0x10/0x10 [ 1195.239458] ? cap_capable+0xdb/0x3b0 [ 1195.239501] ? __pfx_v9fs_mount+0x10/0x10 [ 1195.239535] legacy_get_tree+0x109/0x220 [ 1195.239572] vfs_get_tree+0x93/0x340 [ 1195.239606] path_mount+0x122f/0x1d70 [ 1195.239632] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1195.239676] ? __pfx_path_mount+0x10/0x10 [ 1195.239700] ? kmem_cache_free+0x2a1/0x460 [ 1195.239737] ? putname.part.0+0x11b/0x160 [ 1195.239767] ? getname_flags.part.0+0x1c6/0x540 [ 1195.239803] ? putname.part.0+0x11b/0x160 [ 1195.239839] __x64_sys_mount+0x27b/0x300 [ 1195.239864] ? __pfx___x64_sys_mount+0x10/0x10 [ 1195.239902] do_syscall_64+0xbf/0x360 [ 1195.239943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.239969] RIP: 0033:0x7f6852067b19 [ 1195.239990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1195.240013] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1195.240039] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1195.240056] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1195.240072] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1195.240088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1195.240103] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1195.240141] [ 1195.259252] 9pnet_fd: Insufficient options for proto=fd 00:25:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:27 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f017e8d06bc4fa587d7b4ddd71484c5224b0c43fffd6274855f22ec329074b3cc3d98f3eb4d70cbd9e6699538fc808da89f7e3f870f1876ce558f0af7315e52c061d8d059b3eebff01f9f38678773e0c3dd622b348714d0c56d2e789c4c1dbbb857473673eee178c24cbb71d98321859c23a77b3a9f86acbee4f63e65bef6f96ebe8f874db145b4f2107bcdc6c24b7b", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x22) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:27 executing program 2: perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) fork() ptrace$peekuser(0x3, r0, 0x3a8a) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) [ 1195.412465] 9pnet_fd: Insufficient options for proto=fd 00:25:38 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:38 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = fork() process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02000066696c65300000d7c200000000"]) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x5, 0x7e, 0x1, 0x0, 0x8, 0x80210, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000000), 0x15}, 0x1800, 0x80000001, 0xaa8, 0x1, 0x4dfad6fb, 0x9, 0x9f, 0x0, 0x372b4e64, 0x0, 0xbb5}, r2, 0xb, r3, 0x9) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x9, 0x2) 00:25:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) sync() 00:25:38 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:38 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x8001, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@cache_loose}, {@cache_none}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@version_u}, {@cache_none}, {@cache_fscache}], [{@euid_gt={'euid>', r3}}]}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x0, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:25:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 33) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:38 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) [ 1206.735347] 9pnet_fd: Insufficient options for proto=fd 00:25:38 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:49 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x9, 0x40, 0x5, 0x0, 0x1, 0x40, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0xaab2, 0x398, 0x8, 0x10000, 0xa, 0x9, 0x0, 0x4, 0x0, 0xa445}, 0x0, 0xa, 0xffffffffffffffff, 0x3) r0 = fork() process_vm_readv(r0, &(0x7f0000000180), 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') gettid() fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:25:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x0, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:25:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 34) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2800a63cdf9d9cbc63fb7e8ec9ab2c877964c8aadd97be19de11402fffa5eec99cc21e02290df52e4f28b4245259ea64013340f33189d5fc8718907b4fce0fbccd391a02c5eca36a86898bf8a241c8bb77d841082ef18b"]) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:49 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x0, 0xfd, 0x1, 0x6, 0x0, 0x1, 0x218, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xd73, 0x4}, 0x0, 0x4, 0x8000, 0x4, 0x8001, 0x100, 0x1, 0x0, 0x3, 0x0, 0x101}) sync() sync() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') sync() fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) sync() ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000001c0)={{0x0, 0xab70, 0x4, 0x80, 0x8, 0x6, 0x0, 0x81, 0x9, 0x8, 0x8, 0x5b8, 0x7ff, 0xfffffffffffffff7, 0x20}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) fcntl$setownex(r2, 0xf, &(0x7f0000000180)={0x3}) r3 = dup3(r0, r1, 0x80000) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000), 0x10) 00:25:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) [ 1217.559923] 9pnet_fd: Insufficient options for proto=fd [ 1217.560597] 9pnet_fd: Insufficient options for proto=fd [ 1217.565378] FAULT_INJECTION: forcing a failure. [ 1217.565378] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.566433] CPU: 0 UID: 0 PID: 70396 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1217.566451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1217.566459] Call Trace: [ 1217.566464] [ 1217.566469] dump_stack_lvl+0xfa/0x120 [ 1217.566495] should_fail_ex+0x4d7/0x5e0 [ 1217.566513] ? p9_fcall_init+0x97/0x290 [ 1217.566534] should_failslab+0xc2/0x120 [ 1217.566549] __kmalloc_noprof+0xb4/0x4b0 [ 1217.566567] ? __create_object+0x59/0x80 [ 1217.566589] p9_fcall_init+0x97/0x290 [ 1217.566623] p9_tag_alloc+0x20a/0x820 [ 1217.566640] ? __pfx_p9_tag_alloc+0x10/0x10 [ 1217.566653] ? perf_trace_lock+0xb5/0x5d0 [ 1217.566670] ? v9fs_session_init+0x1df/0x17a0 [ 1217.566691] p9_client_prepare_req+0x17f/0x460 [ 1217.566705] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1217.566720] ? p9_pollwait+0x1ab/0x210 [ 1217.566738] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1217.566757] p9_client_rpc+0x1a0/0xba0 [ 1217.566773] ? __pfx_p9_client_rpc+0x10/0x10 [ 1217.566785] ? __pfx_p9_pollwait+0x10/0x10 [ 1217.566800] ? __pfx_pipe_poll+0x10/0x10 [ 1217.566821] ? p9_fd_poll+0x1e0/0x2c0 [ 1217.566840] ? p9_fd_create+0x34e/0x530 [ 1217.566857] ? __pfx_p9_fd_create+0x10/0x10 [ 1217.566875] ? p9_client_create+0x784/0x11b0 [ 1217.566891] p9_client_create+0xbd1/0x11b0 [ 1217.566909] ? __pfx_p9_client_create+0x10/0x10 [ 1217.566921] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1217.566944] ? kasan_save_track+0x14/0x30 [ 1217.566959] ? __kasan_kmalloc+0x7f/0x90 [ 1217.566972] ? trace_kmalloc+0x1f/0xb0 [ 1217.566986] ? legacy_get_tree+0x109/0x220 [ 1217.567003] ? vfs_get_tree+0x93/0x340 [ 1217.567024] ? lockdep_init_map_type+0x4b/0x240 [ 1217.567040] ? __raw_spin_lock_init+0x3a/0x110 [ 1217.567060] v9fs_session_init+0x1df/0x17a0 [ 1217.567073] ? do_raw_spin_lock+0x123/0x260 [ 1217.567091] ? find_held_lock+0x2b/0x80 [ 1217.567109] ? __create_object+0x59/0x80 [ 1217.567125] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1217.567140] ? __pfx_v9fs_session_init+0x10/0x10 [ 1217.567154] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1217.567170] ? __create_object+0x59/0x80 [ 1217.567186] ? __kmalloc_cache_noprof+0x369/0x470 [ 1217.567204] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1217.567231] v9fs_mount+0xbc/0x9e0 [ 1217.567249] ? __pfx_v9fs_mount+0x10/0x10 [ 1217.567266] ? cap_capable+0xdb/0x3b0 [ 1217.567288] ? __pfx_v9fs_mount+0x10/0x10 [ 1217.567305] legacy_get_tree+0x109/0x220 [ 1217.567323] vfs_get_tree+0x93/0x340 [ 1217.567340] path_mount+0x122f/0x1d70 [ 1217.567353] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1217.567374] ? __pfx_path_mount+0x10/0x10 [ 1217.567386] ? kmem_cache_free+0x2a1/0x460 [ 1217.567404] ? putname.part.0+0x11b/0x160 [ 1217.567420] ? getname_flags.part.0+0x1c6/0x540 [ 1217.567437] ? putname.part.0+0x11b/0x160 [ 1217.567455] __x64_sys_mount+0x27b/0x300 [ 1217.567467] ? __pfx___x64_sys_mount+0x10/0x10 [ 1217.567486] do_syscall_64+0xbf/0x360 [ 1217.567508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.567522] RIP: 0033:0x7f6852067b19 [ 1217.567532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.567544] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1217.567557] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1217.567566] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1217.567574] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1217.567581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1217.567589] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1217.567608] [ 1217.581144] 9pnet_fd: Insufficient options for proto=fd 00:25:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 35) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1217.757882] 9pnet_fd: Insufficient options for proto=fd 00:25:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x2) sync() sync() syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:25:50 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:50 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x7, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() fork() process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) [ 1217.910183] 9pnet_fd: Insufficient options for proto=fd 00:25:50 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:25:50 executing program 2: setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @timestamp, @mss={0x2, 0x2d00}], 0x3) r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() close_range(r0, r0, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000008000)=[{{&(0x7f0000000b00), 0x6e, &(0x7f00000051c0)=[{&(0x7f0000000b80)=""/182, 0xb6}, {&(0x7f0000000c40)=""/184, 0xb8}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/217, 0xd9}, {&(0x7f0000000e40)=""/224, 0xe0}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/210, 0xd2}, {&(0x7f0000001040)}, {&(0x7f0000001080)=""/174, 0xae}], 0xa, &(0x7f0000005280)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000001140), 0x6e, &(0x7f00000054c0)=[{&(0x7f0000005340)=""/101, 0x65}, {&(0x7f00000053c0)=""/118, 0x76}, {&(0x7f0000005440)=""/100, 0x64}], 0x3, &(0x7f0000005500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{0x0, 0x0, &(0x7f0000005580), 0x0, &(0x7f00000055c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000005600), 0x6e, &(0x7f0000005940)=[{&(0x7f0000005680)=""/60, 0x3c}, {&(0x7f00000056c0)=""/89, 0x59}, {&(0x7f0000005740)=""/63, 0x3f}, {&(0x7f0000005780)=""/189, 0xbd}, {&(0x7f0000005840)=""/21, 0x15}, {&(0x7f0000005880)=""/124, 0x7c}, {&(0x7f0000005900)=""/10, 0xa}], 0x7, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000974b9aa3ed9df0d63e75772d9a4c2caf5d94c7c015294fd3a42d1599b62edcf8772b1f", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x138}}, {{&(0x7f0000005b00)=@abs, 0x6e, &(0x7f0000005d80)=[{&(0x7f0000005b80)=""/53, 0x35}, {&(0x7f0000005bc0)=""/218, 0xda}, {&(0x7f0000005cc0)=""/73, 0x49}, {&(0x7f0000005d40)=""/57, 0x39}], 0x4, &(0x7f0000005dc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000005e40)=@abs, 0x6e, &(0x7f0000006140)=[{&(0x7f0000005ec0)=""/2, 0x2}, {&(0x7f0000005f00)}, {&(0x7f0000005f40)=""/36, 0x24}, {&(0x7f0000005f80)=""/159, 0x9f}, {&(0x7f0000006040)=""/195, 0xc3}], 0x5}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006480)=[{&(0x7f0000006240)=""/95, 0x5f}, {&(0x7f00000062c0)=""/25, 0x19}, {&(0x7f0000006300)=""/195, 0xc3}, {&(0x7f0000006400)=""/97, 0x61}], 0x4, &(0x7f00000064c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000007880)=[{&(0x7f00000065c0)=""/13, 0xd}, {&(0x7f0000006600)=""/4096, 0x1000}, {&(0x7f0000007600)=""/175, 0xaf}, {&(0x7f00000076c0)=""/129, 0x81}, {&(0x7f0000007780)=""/144, 0x90}, {&(0x7f0000007840)=""/34, 0x22}], 0x6, &(0x7f0000007900)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, &(0x7f0000007e40)=[{&(0x7f00000079c0)=""/209, 0xd1}, {&(0x7f0000007ac0)=""/169, 0xa9}, {&(0x7f0000007b80)=""/202, 0xca}, {&(0x7f0000007c80)=""/255, 0xff}, {&(0x7f0000007d80)=""/148, 0x94}], 0x5, &(0x7f0000007ec0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}], 0x9, 0x40018060, &(0x7f0000008240)={0x77359400}) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x5, 0x80, 0x45, 0x53, 0x0, 0x6953630c, 0x4100, 0xcad31a678f4116ba, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0xc}, 0x42, 0x7, 0x8, 0x4, 0x0, 0x8, 0x3000, 0x0, 0xc637, 0x0, 0x401}, r8, 0x9, 0xffffffffffffffff, 0xa) r17 = epoll_create(0x0) r18 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r18}], 0x1, 0x8) r19 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r19}], 0x1, 0x8) sendmmsg$unix(r13, &(0x7f0000000880)=[{{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000540)="b5badb4d47ce817156947e6462c46231cc9f374d1cb8e113ee5bf18852696932108455effff5bd7b2b652e105eedc67ff24dfebd", 0x34}, {&(0x7f0000000580)="38d66818e33f57a34e02003851691ec0e0fde5be3b003ce1363f97f1491157e4d31ad910edea60e3ce3b7dead35c93746a070220c395f67c378b9147143ee9621777143a82fb0bdba9576b001c04bed3f1ebeeda8a7850f97ce78e7662195b632caca780ed4ffb5b6f164fb1e97377bb936c2bc5ac194d6103bb06a6dd6a", 0x7e}], 0x2, &(0x7f00000007c0)=[@rights={{0x2c, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11, r14]}}, @rights={{0x28, 0x1, 0x1, [r7, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r10, r5, r16, r15, 0xffffffffffffffff, r9, r12, r17, r4]}}, @rights={{0x1c, 0x1, 0x1, [r2, r18, r19]}}], 0xb0, 0x24040040}}], 0x1, 0x0) fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000000c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/97, 0x61}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f00000011c0)=""/4096, 0xfffffffffffffcc9}], 0x3, 0x0) r20 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) fcntl$getflags(r20, 0xb) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x1d, 0x1, 0x7, 0x9, 0x0, 0xfffffffffffffff7, 0x128, 0x19, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff4, 0x2, @perf_config_ext={0x4, 0x4}, 0x10000, 0x7, 0x1, 0x9, 0x7fff, 0xbdc1, 0x3, 0x0, 0x48da, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r21 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r21, 0x400, 0x0) fcntl$setlease(r21, 0x9, 0x2) 00:25:50 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:50 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 36) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:25:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1ffffffffc, 0x24101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x568f11b58e7e06c9, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) [ 1218.332762] 9pnet_fd: Insufficient options for proto=fd 00:25:50 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:25:50 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, 0x0) openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:25:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() fork() process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) 00:26:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() fork() process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) 00:26:01 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='&\x00') syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4202, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x6}, 0x4) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:26:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 37) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, 0x0) openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:26:01 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x8000, 0x9}) [ 1229.166628] 9pnet_fd: Insufficient options for proto=fd 00:26:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:01 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0, 0x0, 0x2000, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x3d4) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x5, 0x3, 0x0, 0x5, 0x0, 0x1}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80400) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRESHEX=r4, @ANYRESOCT=r0]) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1229.318725] 9pnet_fd: Insufficient options for proto=fd 00:26:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') [ 1229.367335] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1229.368203] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1229.368749] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1229.369314] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 1229.369928] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 1229.372436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.372946] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1229.373761] Buffer I/O error on dev sr0, logical block 0, async page read [ 1229.380220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.380669] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1229.381349] Buffer I/O error on dev sr0, logical block 1, async page read [ 1229.387134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.387598] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1229.388270] Buffer I/O error on dev sr0, logical block 2, async page read [ 1229.394764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.395243] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1229.395905] Buffer I/O error on dev sr0, logical block 3, async page read [ 1229.405163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.405632] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1229.406485] Buffer I/O error on dev sr0, logical block 4, async page read [ 1229.417275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.417745] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1229.418425] Buffer I/O error on dev sr0, logical block 5, async page read 00:26:01 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xa9f, 0x1, 0x4008002, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xffffffff7fffffff) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x2, 0x4, 0x0, 0x8, 0xffffffffffffffff}) sync() getsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) [ 1229.432121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.432569] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1229.433281] Buffer I/O error on dev sr0, logical block 6, async page read [ 1229.439376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.439842] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1229.440522] Buffer I/O error on dev sr0, logical block 7, async page read [ 1229.452600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.453160] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1229.453816] Buffer I/O error on dev sr0, logical block 0, async page read 00:26:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1229.477177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.477652] Buffer I/O error on dev sr0, logical block 1, async page read [ 1229.483631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.491601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.495974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.501193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.509738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1229.516514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 00:26:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 38) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:01 executing program 4: ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0xca6fad58129a15c2, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:26:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:26:11 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:26:11 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000}, 0x0, 0xb, 0xffffffffffffffff, 0x0) sync() sync() sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:26:11 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:11 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, 0x0) openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:26:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x9, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x8) fremovexattr(r1, &(0x7f0000000200)=@random={'user.', ',~-,>\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c429721509b9fabb9a9e9d700"]) syz_open_procfs(0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f00000001c0)=0x1) openat(0xffffffffffffffff, 0x0, 0x0, 0x12) 00:26:11 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 39) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:26:11 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 40) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:22 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, 0x0) openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:26:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x10000, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000240)={{0x0, 0x7, 0x6c, 0xfffffffffffffffb, 0x9, 0x4, 0x1, 0x3, 0x342a, 0x2, 0x80, 0x81, 0x8, 0x3, 0x100000000}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000140)=""/115, &(0x7f0000000200)=0x73) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:22 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x30, 0x0, 0x4, 0x400, 0x4, [{0x1, 0x100000001, 0x8, '\x00', 0x1000}, {0x0, 0x0, 0x8000, '\x00', 0x2}, {0x3f, 0x81, 0xf0, '\x00', 0xd06}, {0x200, 0x2, 0x7, '\x00', 0x1}]}) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) r3 = fork() process_vm_readv(r3, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) write$P9_ROPEN(r2, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x4e, 0x4}, 0x200}}, 0x18) poll(&(0x7f0000000300)=[{r4}], 0x1, 0x8) kcmp(r1, r3, 0x3, r0, r4) fcntl$setlease(r2, 0x9, 0x2) 00:26:22 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffdfffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffbffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:26:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:26:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:26:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:26:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 41) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:26:22 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, 0x0) openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:22 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() sync() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') fcntl$setlease(r0, 0x9, 0x2) sync() 00:26:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:26:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002440)='./file0\x00', 0x2a80, 0xc0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = memfd_create(&(0x7f0000000140)='*%@[/%$!{-\x00', 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x9890, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@dont_measure}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, '*#'}}, {@uid_gt={'uid>', r3}}, {@euid_gt={'euid>', r5}}, {@obj_role={'obj_role', 0x3d, ',$,'}}]}}) syz_open_procfs(0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="6dcf55828e33d0bb92013c5370b584c066f7a45e7e0b40e52a09f09f2d2e37948a5c82994150e891ee6be51a25b6505fcfdc8132ea088866a595d8a5cf8a23320a8c018f7627c1f954c125cc478b8afa27bea8bc4cf63952062f2d02f8eb8c97fbd57fe1b8737958ac3d774138c99965865f9feef4cc6e40def9c584fc0d3def5380b1d167e7ef67b3a90341202ab8a57e46cbb989a61aa361eadf25142bad12fde854c83673a6563e01d0f0c1b4f958b3e4b539ec867ff0a7d5fe35256ff8c4dd09fac5e3cdc457742bfb98291fcc37e87aa1c2ffe03ff445cc79a7606c55dd4d7126b85af82c4d41449d14a49a0366ab5b36c2", 0xf4}], 0x1, &(0x7f0000000400)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1e42}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}], 0xd8}}, {{&(0x7f0000000500)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000580)="0a7d83fbdd7e64dae0d257bdbdb9c934d9dcd35bf7a01ad1508e7f6aa0537a482516795fa11252ef477b6a1012035d621f6de525cae3a40960ce8f10f651292f0d5fe5a25dd5c882", 0x48}, {&(0x7f0000000600)="7c7322cd8702d533aa3dbe6c3ee32788af40a9f5e6011245f82855ca3ffc3950d24021612495cd7023033fd28fb55054cb29ad9048041045eef6ccbbcb69a338ee9eab91369996c259c733c4b2228c5703633eb66c93f84c44cf905dd0daf625f520260f15e4e8e0435065b8c1ccb6455644d89cce81a87a359df58446896b2e387a5df80684573b731802", 0x8b}, {&(0x7f00000006c0)="c9f55905896d4a0feea6ccb6c8101ec50b4dbeefe5865e4edf3b2b3f02dc0f8d376a9b55bc1b8190360a348ef51c93aa2a26038cde8e2a882b65635f848c1f2742abbc7e70d3986b70338550656f6f54dec24f263355b79c96cbfe1f0809f64dc686aaf63d0d4d024c9c1db9544026a3a21f77a1e4bc0f49321535012cb24ab4a2bf13e318b7a62dd15f57dc474b6dcd5a4f4aa8956a1ab3489dcff24f1473fc482f8a2546508e268eb8fcbaff1552706ec3ce23d5ea088a3cdadf537c2c5aba5e6fa62e7da456bb96a3ff491ab376838a74476b16e8b9adb32305e94ed62889649d3f998111ef3bf9148d554d4d0d8a0329ecac", 0xf4}, {&(0x7f00000007c0)="bf435d738d51da3a8076f1ad292133f73caac73338f60cf83dd797bab179b469e2390d72049f42b1e1c5ec8cb235b1ff05af4c91098d7302c8e72f97e99700b99634d10e9a3a505255999ab4bfc801d67a1c365d3916b4f475d15a517e61c7c8e496a6c7b5e8c5cb4fc4f3b6", 0x6c}, {&(0x7f0000000840)="3c59dc647e67f35795292da765e269fdb939138fd62b4240fd8644a9fb03f72cc78dcc2ef2b46507931d0c5f7ccdac4d9183012d57f7f6199bfc4dc4ef9d22de90312da73fe1443e5bee6658428e83a970fb0cb382", 0x55}], 0x5, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}], 0x30}}, {{&(0x7f0000000940)=@rc={0x1f, @any, 0x8}, 0x80, &(0x7f0000000d80)=[{&(0x7f00000009c0)="ee40e0beb559979d0c39b5f060fde9ccf3ab4b5ab48ed361da37dd61faa5a6bcac1c17cd28dc035ddece529a", 0x2c}, {&(0x7f0000000a00)="7c05325340491d43ddb8649059bb58cd8dfe048e67fca82e8595dbfaf867e548612f7ddd03616f1da806ba0cb3c24a96e8e6f29cf6c14e40b90e3d746f85658262106a6e041f80dabe84d21512b8cf862db6904f60388fa8be6b2b5fdaecabd7b78b635d90c5068bd79d82e39b40a5a31c9508a4804303e4cd94c9fc21feea8def44471dcb47d5ea27ad4835d99122b4f2f2308d7741852ed5c8c8deeda144b902b6867ebd66666d7abe9deb23f2da7a26fc2bc747eb3b8b2275114e7f9bd0abbd98296dd72185ac184176209edc5d4e2a7da6e1646767b385d159bffb", 0xdd}, {&(0x7f0000000b00)="788b451c280a2227f1ec57e14a5b7bb0326ac39e9a6e278a1b91645c23b188cc3475a9d617e37b4c7220adf2278545571a57", 0x32}, {&(0x7f0000000b40)="6ca3d7a24d5f920dfd11136330fe4da91a732cb8f9dc4611e02193fb8434672cd98af8814546548dc4b1868ffc7448e944ced843e2fbeaf849f124c6bf84f8c0de5a0150b032fc3645af0b31f4e9c8456c31cd805525ddd98f558e10c5fd68fcd277e750c32a34184c40ab5369261131f446cbcbfd2bb39322b880c2c053e2581c992b84c26107fedb689dd128506aa42b35fb002f1a473fb569294fa87e3c668232b6316e745732782f33578b7b93ba9f8165b9c9daf4b77d540abe4c6e55af171f0bf1c13c7a17caa3ea1b596f5b47", 0xd0}, {&(0x7f0000000c40)="c0e54e276b49112533a6e33c1341a61e75b6dcf40429ebaddedaa9a5e3d9ca16f174d4f2dfcc2284d9e8f8893520599c4cf1dacc3f2c7dadc8fa8e9aa2cf4fb51d7d30288f12a43d02a311bd0203b21139f1afcda70ec9ee87a7cf8f1bbbadecd3b922a74e336b6e32ac144171c6482bb712359527c5276e2af813c441dd2237b9b4408b", 0x84}, {&(0x7f0000000d00)="3c0a358351c5ed9bb7625c4f1d45bfd7b6bd", 0x12}, {&(0x7f0000000d40)="ca", 0x1}], 0x7, &(0x7f0000000e00)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xdcc}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x18000000000}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000ec0)="20b5b2050e026c0e0953b4510f97d81c4cc8602ffcd6bd834ef982c6fcf3a20a444f066a399c850247b839f7150c397f95dc4be6e79ccc9acf4d88c33bc8b00214dcba24a0a37aae20dd12a200e7dea312aa09a1f1911e64ed8c03c3548eb078df1d0355d0abbacd71ddc31178a99d7aa82a6fdbf2010983d586763c2ca831441dc947c039c7252aa4fd90d3fa", 0x8d}, {&(0x7f0000000f80)="fc594b466afd4345c97e37164659d700a0e3db822c25ec12ba4c65045c1b6d1d41c50f7ee330e4b5c48518474e89c9a2756d09822d6b391a54b03fa361fe6652d33bf2f5cfda54647265345f5da2a8e87325068eef62a15879e2d5f36be42a1e6ada1524ef355cda4708e2530eb96fd9938a3d2abd1dd40155498b096984887a9ee5b31a02e17a545fcd7de8695cd8846fb5ef7161f01d884f4b24365a1eac23cd04a3e8c25636b1860a1a41f5f074d650be2cb68b12d2c79bff67cf02f132", 0xbf}, {&(0x7f0000001040)="5af68a23d631e08e516ad4781711fb9d259c5b9012831db667f77bd1e2bb362c8b5805e7cac6bf331a3d28434c8895019aca225efc8e43bad49ea875ba5777c3ad84d47a6d449f5bda85d72313d09dd602f02943c859373e532af5137b5cd988dc65b84d7e895fac26324488981ae53b54a920b2809ad242b541d6602e07a4197fc685301e4a5345600c4b6fc855da7a0b81118a8841372b88dbae910e161b1f3a48ffb5aacd108b176a1b300b994863edd965cd589393fc496d0b9d", 0xbc}, {&(0x7f0000001100)="c80e8ef0abb98c64b199a94e285b3f382c88b4e46dd19a426a9d5bdfcc3f0016b5bb0d44e1261d6258bec06f53c3c7b5f934faea9b4d8e61dde18e00c2520a29b236dd5abfe7c62ec78f5c03ee7e538f05c269f8f631e08494e06001ad9463da5bcd21731814617ca07c63eb1edc260b3d96c5f48be9127ff82a2f4962c2e265e1e88167eff8ccdbcb7e10665978ce3431e74e274f298e21b2fdda6db6c7257aa777f48147a8b5e63a01a7b8a68b5b79dcdeac10721af06622bd9fdbe2024144541746ab2a355620497fe1ea08a54bd1ecdab88eaa5ac248e4195a356e2fc4ae25c0767f", 0xe4}, {&(0x7f0000001200)="c06f41ce348691aefaf6a2666decc8651a75907486884d4d5f58e1d00a4a821d18ac4498f7d43f4119ed4b3bfa29c50d3ca355faa7b57b2e7b2a21588f39d143ff77cafafe87b5b2261c44aa6fe63aa0ff", 0x51}, {&(0x7f0000001280)="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", 0x1000}], 0x6, &(0x7f0000002300)=[@txtime={{0x18}}], 0x18}}], 0x4, 0x800) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:22 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x3, 0xa, 0x5, 0x70bd26, 0x25dfdbfc, {0x5, 0x0, 0x5}, [@typed={0x8, 0x2e, 0x0, 0x0, @pid=r0}, @typed={0xc, 0x36, 0x0, 0x0, @u64}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4091) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000740)={0x108, 0x0, &(0x7f0000000ac0)=[@decrefs, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000a00)={@ptr={0x70742a85, 0x0, &(0x7f0000000880)=""/196, 0xc4, 0x1, 0x1d}, @ptr={0x70742a85, 0x1, &(0x7f0000000980)=""/69, 0x45, 0x0, 0x3c}, @flat=@binder={0x73622a85, 0x101, 0x2}}, &(0x7f0000000a80)={0x0, 0x28, 0x50}}, 0x400}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x1, 0x2, 0x1d}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/162, 0xa2, 0x1, 0x3c}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}, @increfs_done={0x40106308, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@flat=@binder={0x73622a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/142, 0x8e, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f00000021c0)=""/4096, 0x1000, 0x2, 0x38}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x25, 0x0, &(0x7f0000000700)="723e429fdf8a5f7c17930ade071be89924643414d7fc5a7631a82c99733f2a203c94c63d88"}) fcntl$setlease(r1, 0x9, 0x2) [ 1250.564925] 9pnet_fd: Insufficient options for proto=fd 00:26:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:26:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:26:22 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x5) r2 = signalfd4(r0, &(0x7f0000000000)={[0x100000001]}, 0x8, 0x800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:26:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 42) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1250.770502] 9pnet_fd: Insufficient options for proto=fd 00:26:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') [ 1250.894368] 9pnet_fd: Insufficient options for proto=fd [ 1250.970338] FAULT_INJECTION: forcing a failure. [ 1250.970338] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.971324] CPU: 1 UID: 0 PID: 74664 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1250.971340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1250.971348] Call Trace: [ 1250.971352] [ 1250.971356] dump_stack_lvl+0xfa/0x120 [ 1250.971380] should_fail_ex+0x4d7/0x5e0 [ 1250.971399] ? p9pdu_readf+0xb28/0x1d90 [ 1250.971415] should_failslab+0xc2/0x120 [ 1250.971428] __kmalloc_noprof+0xb4/0x4b0 [ 1250.971445] ? __asan_memcpy+0x3d/0x60 [ 1250.971468] p9pdu_readf+0xb28/0x1d90 [ 1250.971491] ? __pfx_p9pdu_readf+0x10/0x10 [ 1250.971507] ? p9_fd_poll+0x1e0/0x2c0 [ 1250.971527] ? p9_fd_create+0x34e/0x530 [ 1250.971542] ? __pfx_p9_fd_create+0x10/0x10 [ 1250.971565] p9_client_create+0xc49/0x11b0 [ 1250.971581] ? __pfx_p9_client_create+0x10/0x10 [ 1250.971598] ? kasan_save_track+0x14/0x30 [ 1250.971612] ? __kasan_kmalloc+0x7f/0x90 [ 1250.971626] ? trace_kmalloc+0x1f/0xb0 [ 1250.971640] ? legacy_get_tree+0x109/0x220 [ 1250.971655] ? vfs_get_tree+0x93/0x340 [ 1250.971671] ? lockdep_init_map_type+0x4b/0x240 [ 1250.971687] ? __raw_spin_lock_init+0x3a/0x110 [ 1250.971707] v9fs_session_init+0x1df/0x17a0 [ 1250.971721] ? do_raw_spin_lock+0x123/0x260 [ 1250.971737] ? find_held_lock+0x2b/0x80 [ 1250.971755] ? __create_object+0x59/0x80 [ 1250.971771] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1250.971787] ? __pfx_v9fs_session_init+0x10/0x10 [ 1250.971800] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1250.971815] ? __create_object+0x59/0x80 [ 1250.971830] ? __kmalloc_cache_noprof+0x369/0x470 [ 1250.971847] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1250.971872] v9fs_mount+0xbc/0x9e0 [ 1250.971888] ? __pfx_v9fs_mount+0x10/0x10 [ 1250.971904] ? cap_capable+0xdb/0x3b0 [ 1250.971925] ? __pfx_v9fs_mount+0x10/0x10 [ 1250.971940] legacy_get_tree+0x109/0x220 [ 1250.971957] vfs_get_tree+0x93/0x340 [ 1250.971973] path_mount+0x122f/0x1d70 [ 1250.971985] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1250.972006] ? __pfx_path_mount+0x10/0x10 [ 1250.972022] ? kmem_cache_free+0x2a1/0x460 [ 1250.972038] ? putname.part.0+0x11b/0x160 [ 1250.972052] ? getname_flags.part.0+0x1c6/0x540 [ 1250.972069] ? putname.part.0+0x11b/0x160 [ 1250.972085] __x64_sys_mount+0x27b/0x300 [ 1250.972097] ? __pfx___x64_sys_mount+0x10/0x10 [ 1250.972114] do_syscall_64+0xbf/0x360 [ 1250.972133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.972145] RIP: 0033:0x7f6852067b19 [ 1250.972155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1250.972166] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1250.972178] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1250.972186] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1250.972193] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1250.972200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1250.972207] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1250.972224] 00:26:35 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, 0x0) openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:35 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:35 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) sync() r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x8) r2 = dup2(r1, r0) sync() syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) fcntl$getownex(r2, 0x10, &(0x7f0000000680)={0x0, 0x0}) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x5, 0x2, 0x9, 0x80, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000005c0), 0x2}, 0x200, 0xd6, 0x9f, 0x1, 0x2, 0x1ff, 0x2, 0x0, 0x40, 0x0, 0x24}, r4, 0x3, r3, 0xb) sync() sync() r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x9, 0x2) recvmsg$unix(r2, &(0x7f0000000480)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/141, 0x8d}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000340)=""/111, 0x6f}], 0x4, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x20043) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x4e24, 0x0, 0x4e22, 0x400, 0x2, 0x20, 0x0, 0x88, 0x0, r6}, {0x9, 0x0, 0xfff, 0x7fffffff, 0x20, 0xa6e3, 0x8, 0x5}, {0x3, 0x0, 0x40, 0x7}, 0x81, 0x6e6bb9, 0x0, 0x1, 0x0, 0x1}, {{@in=@local, 0x4d3, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x3501, 0x3, 0x1, 0x0, 0x8, 0x401}}, 0xe8) 00:26:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 43) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:26:35 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x2) fcntl$setlease(r3, 0x9, 0x2) 00:26:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB="746bcce6d0402dcdcd72616e733d66", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x4021, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c616669643d3078303030303030304817ef303030302c63617574653d6c6f6f7365ffffff7f00000000673d7472616e859387294f2567733d53642c2c00"]) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x80000001, 0x5, &(0x7f0000000600)=[{&(0x7f0000000340)="e2781fb03645676128a73d2b78054b2c804d060c6e64d61e671478fedc35653788253e690f86e207015798c5295c5e3df39b0d6f2f17a55778aa2fbaa1909d9879378d289cc70b7f68e3bc3f2b80c2b0ccdd5d0837fcc3fb6ca0e820e97b46b01ca6dee7a4a4d348f34b1e4b7749912d0b6a13283109ccff886712a8ca648ba08ee220d53241dadef51563f8ec4b9dd4491aafa8f3af848d03bfd819c0db4892959183e18ea3ff3695264a1d7e3fada2a9edf34aff4dd619119c928cdedebb4111080eab6b5e0daf4bddf80d2066c00c318ff1bd6b8ae2930ec1d15dcd15697f94e05fd6cc431bd69c43ee155f79a09c0b1303", 0xf3, 0x6}, {&(0x7f0000000440)="9fe370c951c95218cef4b35d5285e28d02610dd2db0a6d8f6be5cbf8ef1c58a8f8f885a9bda362860168aee077f919fcb687e06197f37817c221967b75fc7069555bb1a24029429a25b211b7e2c9b1d9a7bbf493b728a7e29d7f5992816782722bffc84a5f25cdbe6f2213f89d21001871d7a2734a31cb752a2c3eff452ecab4a3d789d269683ea4ed60bdbbbbf452d12d90cb681f6a1a17376c8ff16443fe3bf866db68ce782bdb56dbcfa6e52581a195cd6a3ca31a22b3c8f425c0e1d71bac873dadbdcc7d", 0xc6, 0x7}, {&(0x7f0000000540)="ab83dcf0", 0x4, 0xfc}, {&(0x7f0000000580)="2186eff26a7a7bd55a9161ff780aab3533c9e1d767", 0x15, 0x3ff}, {&(0x7f00000005c0)="9c610c164a5ef83a52386e0f241568ae295c562e", 0x14, 0x3}], 0x400, &(0x7f0000000680)={[{@norecovery}, {@debug}, {@noquota}, {@grpid}], [{@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffff}}]}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) [ 1263.404259] loop4: detected capacity change from 0 to 264192 [ 1263.412432] ext3: Unknown parameter 'fsmagic' [ 1263.412547] 9pnet_fd: Insufficient options for proto=fd 00:26:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') [ 1263.790260] 9pnet_fd: Insufficient options for proto=fd 00:26:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:26:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:46 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f0000000540)=""/210, 0xd2}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/256, 0x100}, {&(0x7f0000000040)=""/123, 0x7b}], 0x2, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='oom_score_adj\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) 00:26:46 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) statx(r1, &(0x7f0000000040)='./file1\x00', 0x6000, 0x7ff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c99a0c793d3c5c0646f6e745f6d6506007572652c657569643d", @ANYRESDEC=r3, @ANYBLOB=',\x00']) symlinkat(&(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file1\x00') syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, 0x0, 0x0, 0x2) 00:26:46 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:26:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 44) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x8) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000180)=""/120) sync() r3 = open_tree(r0, &(0x7f0000000440)='./file0\x00', 0x1) statx(r3, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4e20, 0x101, 0x4e20, 0x0, 0xa, 0xa0, 0xa0, 0x1d, 0x0, r4}, {0x1, 0xff, 0x11, 0x147, 0x8, 0x7, 0x9, 0x8}, {0xf01, 0x7fff, 0x0, 0x9}, 0x7fff, 0x6e6bbe, 0x1, 0x0, 0x1}, {{@in6=@local, 0x4d3, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x34ff, 0x2, 0x0, 0x0, 0x1, 0x7320, 0x8}}, 0xe8) read(r1, &(0x7f0000000000)=""/49, 0x31) [ 1274.379907] 9pnet_fd: Insufficient options for proto=fd 00:26:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, 0x0, 0x0, 0x2) 00:26:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:26:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:26:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 45) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:26:46 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) r2 = fork() process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) waitid(0x2, r2, 0x0, 0x40000000, &(0x7f0000000080)) 00:26:46 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {0x0}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:26:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, 0x0, 0x0, 0x2) 00:26:57 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x110) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x200000) pread64(r1, &(0x7f0000000200)=""/82, 0x52, 0x1000) 00:26:57 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x1f, 0x5, 0x1, 0x1e, 0x0, 0x6, 0x1202, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x82, 0x1, 0x7, 0x8, 0x5, 0x5, 0x6, 0x0, 0x2, 0x0, 0x7}, r1, 0x7, r0, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) sync() sync() 00:26:57 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {0x0}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:26:57 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() mq_open(&(0x7f00000000c0)='.:--\xce@\x00', 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) fsetxattr$security_evm(r1, &(0x7f0000000000), &(0x7f0000000080)=@v1={0x2, "ec"}, 0x2, 0x1) 00:26:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:26:57 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, 0x0, 0x0, 0x2) 00:26:57 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) 00:26:57 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 46) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1285.478286] FAULT_INJECTION: forcing a failure. [ 1285.478286] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.479289] CPU: 1 UID: 0 PID: 76457 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1285.479306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1285.479313] Call Trace: [ 1285.479317] [ 1285.479322] dump_stack_lvl+0xfa/0x120 [ 1285.479346] should_fail_ex+0x4d7/0x5e0 [ 1285.479364] should_failslab+0xc2/0x120 [ 1285.479378] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 1285.479398] ? kasprintf+0xbe/0x100 [ 1285.479415] ? lock_acquire+0x15e/0x2f0 [ 1285.479432] kvasprintf+0xbd/0x160 [ 1285.479448] ? __pfx_kvasprintf+0x10/0x10 [ 1285.479473] kasprintf+0xbe/0x100 [ 1285.479489] ? __pfx_kasprintf+0x10/0x10 [ 1285.479506] ? kmem_cache_free+0x158/0x460 [ 1285.479523] ? p9_req_put+0x1cc/0x240 [ 1285.479537] ? p9_client_create+0xd52/0x11b0 [ 1285.479551] p9_client_create+0xd73/0x11b0 [ 1285.479567] ? __pfx_p9_client_create+0x10/0x10 [ 1285.479582] ? kasan_save_track+0x14/0x30 [ 1285.479594] ? __kasan_kmalloc+0x7f/0x90 [ 1285.479607] ? trace_kmalloc+0x1f/0xb0 [ 1285.479620] ? legacy_get_tree+0x109/0x220 [ 1285.479636] ? vfs_get_tree+0x93/0x340 [ 1285.479652] ? lockdep_init_map_type+0x4b/0x240 [ 1285.479667] ? __raw_spin_lock_init+0x3a/0x110 [ 1285.479685] v9fs_session_init+0x1df/0x17a0 [ 1285.479699] ? do_raw_spin_lock+0x123/0x260 [ 1285.479715] ? find_held_lock+0x2b/0x80 [ 1285.479733] ? __create_object+0x59/0x80 [ 1285.479749] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1285.479764] ? __pfx_v9fs_session_init+0x10/0x10 [ 1285.479777] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1285.479792] ? __create_object+0x59/0x80 [ 1285.479807] ? __kmalloc_cache_noprof+0x369/0x470 [ 1285.479824] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1285.479849] v9fs_mount+0xbc/0x9e0 [ 1285.479865] ? __pfx_v9fs_mount+0x10/0x10 [ 1285.479882] ? cap_capable+0xdb/0x3b0 [ 1285.479902] ? __pfx_v9fs_mount+0x10/0x10 [ 1285.479917] legacy_get_tree+0x109/0x220 [ 1285.479934] vfs_get_tree+0x93/0x340 [ 1285.479950] path_mount+0x122f/0x1d70 [ 1285.479962] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1285.479984] ? __pfx_path_mount+0x10/0x10 [ 1285.479995] ? kmem_cache_free+0x2a1/0x460 [ 1285.480016] ? putname.part.0+0x11b/0x160 [ 1285.480030] ? getname_flags.part.0+0x1c6/0x540 [ 1285.480047] ? putname.part.0+0x11b/0x160 [ 1285.480063] __x64_sys_mount+0x27b/0x300 [ 1285.480074] ? __pfx___x64_sys_mount+0x10/0x10 [ 1285.480092] do_syscall_64+0xbf/0x360 [ 1285.480111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.480124] RIP: 0033:0x7f6852067b19 [ 1285.480133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1285.480144] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1285.480156] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1285.480164] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1285.480171] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1285.480179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1285.480185] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1285.480202] 00:26:57 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 47) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:26:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:26:57 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {0x0}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:26:57 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x13, r2, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x3d4) syz_io_uring_setup(0x20001099, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x244}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1091}}, 0x2) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x468ad, 0x0, 0x0, 0x0, {0x0, r6}}, 0x9) 00:26:57 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x50440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:26:57 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) 00:26:57 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:systemd_logind_sessions_t:s0\x00', 0x2f, 0x2) syz_open_procfs(0x0, 0x0) 00:26:58 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, 0x0, 0x0, 0x2) 00:26:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 48) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1285.962254] SELinux: Context system_u:object_r:systemd_logind_sessions_t:s0 is not valid (left unmapped). 00:26:58 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, 0x0, 0x0, 0x2) [ 1286.091353] FAULT_INJECTION: forcing a failure. [ 1286.091353] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.092425] CPU: 0 UID: 0 PID: 77663 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1286.092441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1286.092448] Call Trace: [ 1286.092453] [ 1286.092458] dump_stack_lvl+0xfa/0x120 [ 1286.092484] should_fail_ex+0x4d7/0x5e0 [ 1286.092502] should_failslab+0xc2/0x120 [ 1286.092515] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 1286.092536] ? kstrdup_const+0x57/0x80 [ 1286.092554] ? trace_contention_end+0x28/0x110 [ 1286.092573] kstrdup+0x3e/0xc0 [ 1286.092590] kstrdup_const+0x57/0x80 [ 1286.092608] __kmem_cache_create_args+0x179/0x360 [ 1286.092621] ? p9_client_create+0xd52/0x11b0 [ 1286.092636] p9_client_create+0xdfc/0x11b0 [ 1286.092653] ? __pfx_p9_client_create+0x10/0x10 [ 1286.092670] ? trace_kmalloc+0x1f/0xb0 [ 1286.092683] ? legacy_get_tree+0x109/0x220 [ 1286.092700] ? vfs_get_tree+0x93/0x340 [ 1286.092716] ? lockdep_init_map_type+0x4b/0x240 [ 1286.092732] ? __raw_spin_lock_init+0x3a/0x110 [ 1286.092750] v9fs_session_init+0x1df/0x17a0 [ 1286.092765] ? do_raw_spin_lock+0x123/0x260 [ 1286.092781] ? find_held_lock+0x2b/0x80 [ 1286.092798] ? __create_object+0x59/0x80 [ 1286.092814] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1286.092830] ? __pfx_v9fs_session_init+0x10/0x10 [ 1286.092843] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1286.092857] ? __create_object+0x59/0x80 [ 1286.092873] ? __kmalloc_cache_noprof+0x369/0x470 [ 1286.092890] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1286.092915] v9fs_mount+0xbc/0x9e0 [ 1286.092931] ? __pfx_v9fs_mount+0x10/0x10 [ 1286.092948] ? cap_capable+0xdb/0x3b0 [ 1286.092968] ? __pfx_v9fs_mount+0x10/0x10 [ 1286.092983] legacy_get_tree+0x109/0x220 [ 1286.093001] vfs_get_tree+0x93/0x340 [ 1286.093021] path_mount+0x122f/0x1d70 [ 1286.093034] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1286.093056] ? __pfx_path_mount+0x10/0x10 [ 1286.093067] ? kmem_cache_free+0x2a1/0x460 [ 1286.093084] ? putname.part.0+0x11b/0x160 [ 1286.093099] ? getname_flags.part.0+0x1c6/0x540 [ 1286.093115] ? putname.part.0+0x11b/0x160 [ 1286.093132] __x64_sys_mount+0x27b/0x300 [ 1286.093143] ? __pfx___x64_sys_mount+0x10/0x10 [ 1286.093161] do_syscall_64+0xbf/0x360 [ 1286.093183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.093196] RIP: 0033:0x7f6852067b19 [ 1286.093206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1286.093217] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1286.093229] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1286.093237] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1286.093245] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1286.093252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1286.093259] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1286.093277] [ 1286.114257] __kmem_cache_create_args(9p-fcall-cache-496) failed with error -12 [ 1286.114809] CPU: 0 UID: 0 PID: 77663 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1286.114825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1286.114832] Call Trace: [ 1286.114836] [ 1286.114841] dump_stack_lvl+0xfa/0x120 [ 1286.114858] __kmem_cache_create_args+0x156/0x360 [ 1286.114871] ? p9_client_create+0xd52/0x11b0 [ 1286.114885] p9_client_create+0xdfc/0x11b0 [ 1286.114902] ? __pfx_p9_client_create+0x10/0x10 [ 1286.114919] ? trace_kmalloc+0x1f/0xb0 [ 1286.114932] ? legacy_get_tree+0x109/0x220 [ 1286.114947] ? vfs_get_tree+0x93/0x340 [ 1286.114961] ? lockdep_init_map_type+0x4b/0x240 [ 1286.114976] ? __raw_spin_lock_init+0x3a/0x110 [ 1286.114995] v9fs_session_init+0x1df/0x17a0 [ 1286.115011] ? do_raw_spin_lock+0x123/0x260 [ 1286.115028] ? find_held_lock+0x2b/0x80 [ 1286.115044] ? __create_object+0x59/0x80 [ 1286.115059] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1286.115074] ? __pfx_v9fs_session_init+0x10/0x10 [ 1286.115088] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1286.115102] ? __create_object+0x59/0x80 [ 1286.115117] ? __kmalloc_cache_noprof+0x369/0x470 [ 1286.115135] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1286.115158] v9fs_mount+0xbc/0x9e0 [ 1286.115174] ? __pfx_v9fs_mount+0x10/0x10 [ 1286.115191] ? cap_capable+0xdb/0x3b0 [ 1286.115210] ? __pfx_v9fs_mount+0x10/0x10 [ 1286.115225] legacy_get_tree+0x109/0x220 [ 1286.115243] vfs_get_tree+0x93/0x340 [ 1286.115259] path_mount+0x122f/0x1d70 [ 1286.115270] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1286.115290] ? __pfx_path_mount+0x10/0x10 [ 1286.115301] ? kmem_cache_free+0x2a1/0x460 [ 1286.115318] ? putname.part.0+0x11b/0x160 [ 1286.115332] ? getname_flags.part.0+0x1c6/0x540 [ 1286.115348] ? putname.part.0+0x11b/0x160 [ 1286.115365] __x64_sys_mount+0x27b/0x300 [ 1286.115376] ? __pfx___x64_sys_mount+0x10/0x10 [ 1286.115393] do_syscall_64+0xbf/0x360 [ 1286.115412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.115423] RIP: 0033:0x7f6852067b19 [ 1286.115432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1286.115443] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1286.115454] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1286.115462] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1286.115469] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1286.115476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1286.115483] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1286.115500] 00:26:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/96, 0x60}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:27:11 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x7f, 0x2, 0x2, 0x9, 0x0, 0x8001, 0x4204, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x6ca724136b15a0d2}, 0x1406, 0x5, 0x3, 0x9, 0x100000001, 0x0, 0x401, 0x0, 0x38f, 0x0, 0x81}, r1, 0x6, r0, 0x8) r2 = fork() process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r4}], 0x1, 0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) lseek(r5, 0x3ff, 0x2) fcntl$setlease(r3, 0x9, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x9, 0x2) 00:27:11 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x5e}, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x7, 0xffffffffffffffff, 0x3) sync() ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000540)={0x2, 0x80, 0x6, 0x80, 0x6, 0x2, 0x0, 0x8, 0x14, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xffff, 0x8}, 0x44085, 0xba, 0x8, 0x2, 0x4, 0xfffffff9, 0xf30, 0x0, 0x8, 0x0, 0x1}) sync() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) poll(&(0x7f0000000400)=[{r2, 0x34}, {0xffffffffffffffff, 0x40}], 0x2, 0x2b240ed0) r3 = getpid() r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000000c0)) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r5}], 0x1, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="0100e46a9e282cec2e71d6003e14eb4b0575a201ecbbb6e5395bcc22204f143f174ed2eb0fcc7f0b05b5a8d15e880cfc3f6e117b85a30a846367b362fbeb5fc1b195399b65c8856469c13c4b93819a51b69c2ba7b4612464ee717d5998dbbf076607e28964110e0623ccffff0000000000008e628124f1396bb4dbf178fd65416e01b0349c7d63f90b6c19ef8a7dbf372f97ea61ed3c13c0d626832c3847c0078af8b603fc990d70", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f668100653000"]) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="7001000041a47a0e2fce74eba55367cf9912a7c86b6d8a8a414fe1f73d0feec148475e4a47147e5b31a7c213f5173135838bd4ea4528b4dc102eea6507002e37bbb083b5527fa6cde6eced84fcb797c9fdf68013ff44690cca086bf798b4918a7ac11c82e2b870843ff3d7e55cd675a260954f9c8105edb7df95fc2487e9da1445b4c033af53f920ee6f61cc00000000000000f1171b9a1ec5197b84f6a72b69d90c272f747d0c056ca7f2277c0000005619cf177523d52ce355fdab6b6de67d7bf19eec0f75cddd55fa8a0b74c957f12c4ff22f85102e43de48ca54a76e6c833ec0063ee98ad45752f0c93f31e5aeb4467c14c6deb09a38dc08d6d22cb8518e7c2319e9f4d492c2fdbed2793dd3aada0814ff14e6a7054177aa4f9f212ac1a40c98189a300c14b6a9e2de136d805ff17ce0843195b0aa37d9dbd5de65c2069e721e40f2453d2f26d7ff1a8a52cf7f9991641b60ffd0874c1979f1ecacc83970949d5c9e046d149677f68c851ee2a518d607000000f36bee6fea476d1740bcb98ebc1370b035fe57d187ee3617fbde777c6619bc5de87dcd26524c", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdbdf250d0000002c000380080003000800000008000300040000000800030002000000080001000600000008000200040800004000078008000100ff00000008000100ff0700000c0004000800000000000000080001004c5900000c00040081000000000000000c0003000000000001000000040003801c0007800c00030022080000000000000c0004004000000000000000380007800c000400ff2c00000000000008000200060000000c000400090000000000000008000200d00000000c00040001f8ffffffffffff840004800900010073797a31000000001300010062726f6164636173742d6c696e6b00000900010073797a31000000001300010062726f6164636173742d6c696e6b00000900010073797a31000000001300010062726f6164636173742d6c696e6b000014000780080003004000000008000400730000000900010073797a3100000000140005800c00028008000400ff7f000004000280"], 0x170}, 0x1, 0x0, 0x0, 0x4980}, 0x4000000) fcntl$setown(r1, 0x8, r3) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r7, 0x9, 0x2) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={r3, 0xee00}, 0xc) 00:27:11 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) 00:27:11 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) 00:27:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:11 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 49) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/96, 0x60}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:27:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, 0x0) 00:27:11 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0xfe3) fcntl$setlease(r1, 0x9, 0x2) 00:27:11 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 50) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:11 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x4, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:27:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, 0x0) 00:27:11 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) 00:27:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/96, 0x60}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:27:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="74aa2d47025953e81aca72616e733d66642c7266646e6f3d9ee5b757e5973f3493d11550eb5b45e9eb17b69e", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:12 executing program 7: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f0000000540)=""/210, 0xd2}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/256, 0x100}, {&(0x7f0000000040)=""/123, 0x7b}], 0x2, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='oom_score_adj\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) 00:27:23 executing program 7: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f0000000540)=""/210, 0xd2}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/256, 0x100}, {&(0x7f0000000040)=""/123, 0x7b}], 0x2, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='oom_score_adj\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) 00:27:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 51) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x40, 0xc4, 0x81, 0x40, 0x0, 0x9, 0x1400, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x8000, 0x7, 0x400, 0x9, 0x2, 0xa3, 0x4000, 0x0, 0x5, 0x0, 0xce}, 0x0, 0x4, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:27:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, 0x0) 00:27:23 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:27:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0x2, 0x0) splice(r3, &(0x7f0000000140), r2, &(0x7f0000000180)=0x3, 0x8, 0x7) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x9, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x9, 0x2) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r6, 0x21, 0x70bd2a, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000011) name_to_handle_at(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x7f, 0x7, 0xff, 0x800, 0x48ef}}, &(0x7f0000000280), 0x1400) 00:27:23 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) 00:27:23 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:27:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 52) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:27:24 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@fscache}]}}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockname(r2, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:24 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000880), 0x8000, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x7, 0x80, 0x46, 0xe8, 0x0, 0x1, 0x10406, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffff7, 0x1, @perf_bp={&(0x7f00000007c0), 0x8}, 0xa04, 0x1, 0x0, 0x3, 0x8, 0x7, 0x8dba, 0x0, 0x2f, 0x0, 0x80000001}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r4}], 0x1, 0x8) recvmsg(r2, &(0x7f0000000f80)={&(0x7f0000000900)=@x25={0x9, @remote}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000980)=""/98, 0x62}, {&(0x7f0000000a00)=""/180, 0xb4}, {&(0x7f0000000ac0)=""/206, 0xce}, {&(0x7f0000000bc0)=""/166, 0xa6}, {&(0x7f0000000c80)=""/35, 0x23}, {&(0x7f0000000cc0)=""/73, 0x49}, {&(0x7f0000000d40)=""/233, 0xe9}], 0x7, &(0x7f0000000ec0)=""/140, 0x8c}, 0x4000a002) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000008c0)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r5, 0x25, &(0x7f0000000180)) recvmmsg(r2, &(0x7f0000005280)=[{{&(0x7f0000000fc0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001040)=""/191, 0xbf}], 0x1, &(0x7f0000001140)}, 0x891}, {{&(0x7f00000041c0), 0x80, &(0x7f0000004300)=[{&(0x7f0000001180)=""/10, 0xa}, {&(0x7f0000004240)=""/33, 0x21}, {&(0x7f0000004280)=""/98, 0x62}], 0x3, &(0x7f0000004340)=""/160, 0xa0}, 0x29}, {{&(0x7f0000004400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004480)=""/47, 0x2f}, {&(0x7f00000044c0)=""/42, 0x2a}, {&(0x7f0000004500)=""/190, 0xbe}, {&(0x7f00000045c0)=""/202, 0xca}], 0x4}, 0x3829}, {{&(0x7f0000004700)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000004840)=[{&(0x7f0000004780)=""/154, 0x9a}], 0x1, &(0x7f0000004880)=""/72, 0x48}, 0x8}, {{&(0x7f0000004900)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004980)=""/144, 0x90}, {&(0x7f0000004a40)=""/97, 0x61}, {&(0x7f0000004ac0)=""/230, 0xe6}, {&(0x7f0000004bc0)=""/209, 0xd1}, {&(0x7f0000004cc0)=""/139, 0x8b}, {&(0x7f0000004d80)=""/147, 0x93}, {&(0x7f0000004e40)=""/59, 0x3b}, {&(0x7f0000004e80)=""/116, 0x74}], 0x8, &(0x7f0000004f80)=""/76, 0x4c}, 0x400000}, {{&(0x7f0000005000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005240)=[{&(0x7f0000005080)=""/115, 0x73}, {&(0x7f0000005100)=""/131, 0x83}, {&(0x7f00000051c0)=""/124, 0x7c}], 0x3}, 0x3ff}], 0x6, 0x2, &(0x7f0000005400)) setsockopt$inet6_buf(r6, 0x29, 0x2f, &(0x7f0000005440)="21ac832faa418c6c01", 0x9) flock(r5, 0xc) r7 = fcntl$getown(r0, 0x9) process_vm_readv(r7, &(0x7f0000000000)=[{&(0x7f0000000080)=""/150, 0x96}], 0x1, &(0x7f0000000740)=[{&(0x7f0000000440)=""/87, 0x57}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/132, 0x84}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000580)=""/90, 0x5a}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/93, 0x5d}, {&(0x7f0000000680)=""/154, 0x9a}], 0x8, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) 00:27:24 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0xff, 0x0, 0x0, 0x0, 0x0, 0x34710, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:27:24 executing program 7: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f0000000540)=""/210, 0xd2}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/256, 0x100}, {&(0x7f0000000040)=""/123, 0x7b}], 0x2, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='oom_score_adj\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) 00:27:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 53) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:27:24 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() fork() process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) 00:27:24 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x1000000, [{0x9a81, 0xffff}]}, 0xc, 0x1) 00:27:35 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) syz_open_procfs(r0, &(0x7f0000000000)='net/snmp\x00') 00:27:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:27:35 executing program 7: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/71, 0x47}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/130, 0x82}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000000100)=""/73, 0x49}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x6, 0x0) process_vm_readv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)=""/3, 0x3}, {&(0x7f0000000840)=""/51, 0x33}], 0x3, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/254, 0xfe}, {&(0x7f00000009c0)=""/185, 0xb9}], 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getpgid(r1) r4 = accept$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000780)=0x14) r5 = getpid() process_vm_readv(r5, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/23, 0x17}, {&(0x7f0000000ac0)=""/59, 0x3b}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/107, 0x6b}, {&(0x7f0000000bc0)=""/236, 0xec}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d00)=""/38, 0x26}], 0x4, 0x0) kcmp(r1, 0x0, 0x5, r4, r0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) 00:27:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') sync() sync() fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:27:35 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() fork() process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) 00:27:35 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x1, 0xf2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="df523f3f9c8ac61608c6661959faa8d70d830cb1c96552f148bfbd98e5a4", @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x100, 0x32}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x80}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040044}, 0x81) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1bc, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6f34}, @NL80211_ATTR_VENDOR_DATA={0xf8, 0xc5, "8bd9dbc33edc339c60a7b6daa171b15c40f102244aae6be2a0de2dc17b965b563615e49008aa9818e4709c4e65300d8930ebf4673bb22734b1a346bb0d503793f5c6aedc920145f8ebc9987b3174200329c8f316603cdb511958b8ce85ad714c4fcfff17dacc12c024d19edb806291b609d72d6aab3efdac641ff71865ce3e09d9ddaa88f297e1c384bad43b6ed47efc56c915d6ea8eb99781c8728ad69eb8b8b3dccebe2549a851e93bdcff93264c085f1d07b70c249f909c1543e5ad53ab972828aa056333ecdad504f8a1ee35022319dbe961d959bb0d6aef74e9830486a51ba28d08c3e6e1eab72cd0cc58b1a5643100b8ba"}, @NL80211_ATTR_VENDOR_DATA={0x7c, 0xc5, "7a8a5cafcef1306c0cb4c98bc52ba0c3d52cd8f2d2e5ae10741a562ec27ea34a37801032d2baf81b65b4278a816a2ddf792a104495ffdf1540935f9044a4befa1937ed836632a95f3432804ec5bc7fcba087855d5bfcabbea19f001ef863ee5c795b8e40e80175ee940b374e14c1a04f7d3bdd6c75ecb906"}, @NL80211_ATTR_VENDOR_DATA={0x23, 0xc5, "00390c12c99dc4ca8b99e46d999ba261f9abef8f8033f5f757246d6b12426a"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x28000004}, 0x20000000) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:27:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 54) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r7, r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}], [{@seclabel}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="00bb252dde77ad016cc4db8a62a08c8e9a9506bf2b396217101f9735ec4fb1f73f2d63ab21975c92a783db28e9236dee633b3e46a5bd4790a23a18ba8ec05c6de8bf7726d7fc36e9d2ca1937f7c0ff7d7ce1a2c209378975124b941bb3169380da619330c3206df0315f13ee301360bb879cdb72013c6c8307a7c59140b8cdac32487c3fafefdea7db73c663dd4f0e19f7afa79e42b3e3d330"]) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1323.589517] FAULT_INJECTION: forcing a failure. [ 1323.589517] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.591209] CPU: 1 UID: 0 PID: 80913 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1323.591238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1323.591250] Call Trace: [ 1323.591258] [ 1323.591267] dump_stack_lvl+0xfa/0x120 [ 1323.591305] should_fail_ex+0x4d7/0x5e0 [ 1323.591335] should_failslab+0xc2/0x120 [ 1323.591358] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 1323.591395] ? kstrdup_const+0x57/0x80 [ 1323.591434] kstrdup+0x3e/0xc0 [ 1323.591466] kstrdup_const+0x57/0x80 [ 1323.591499] kvasprintf_const+0x110/0x1a0 [ 1323.591533] kobject_set_name_vargs+0x5a/0x150 [ 1323.591558] kobject_init_and_add+0xcc/0x170 [ 1323.591584] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1323.591616] ? up_write+0x195/0x520 [ 1323.591654] sysfs_slab_add+0x172/0x210 [ 1323.591688] do_kmem_cache_create+0x235/0x5a0 [ 1323.591727] __kmem_cache_create_args+0x20f/0x360 [ 1323.591750] ? p9_client_create+0xd52/0x11b0 [ 1323.591776] p9_client_create+0xdfc/0x11b0 [ 1323.591807] ? __pfx_p9_client_create+0x10/0x10 [ 1323.591839] ? trace_kmalloc+0x1f/0xb0 [ 1323.591862] ? legacy_get_tree+0x109/0x220 [ 1323.591890] ? vfs_get_tree+0x93/0x340 [ 1323.591918] ? lockdep_init_map_type+0x4b/0x240 [ 1323.591945] ? __raw_spin_lock_init+0x3a/0x110 [ 1323.591979] v9fs_session_init+0x1df/0x17a0 [ 1323.592003] ? do_raw_spin_lock+0x123/0x260 [ 1323.592040] ? find_held_lock+0x2b/0x80 [ 1323.592071] ? __create_object+0x59/0x80 [ 1323.592099] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1323.592127] ? __pfx_v9fs_session_init+0x10/0x10 [ 1323.592152] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1323.592178] ? __create_object+0x59/0x80 [ 1323.592207] ? __kmalloc_cache_noprof+0x369/0x470 [ 1323.592238] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1323.592284] v9fs_mount+0xbc/0x9e0 [ 1323.592312] ? __pfx_v9fs_mount+0x10/0x10 [ 1323.592343] ? cap_capable+0xdb/0x3b0 [ 1323.592380] ? __pfx_v9fs_mount+0x10/0x10 [ 1323.592408] legacy_get_tree+0x109/0x220 [ 1323.592440] vfs_get_tree+0x93/0x340 [ 1323.592469] path_mount+0x122f/0x1d70 [ 1323.592491] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1323.592529] ? __pfx_path_mount+0x10/0x10 [ 1323.592550] ? kmem_cache_free+0x2a1/0x460 [ 1323.592581] ? putname.part.0+0x11b/0x160 [ 1323.592607] ? getname_flags.part.0+0x1c6/0x540 [ 1323.592637] ? putname.part.0+0x11b/0x160 [ 1323.592668] __x64_sys_mount+0x27b/0x300 [ 1323.592689] ? __pfx___x64_sys_mount+0x10/0x10 [ 1323.592722] do_syscall_64+0xbf/0x360 [ 1323.592757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.592779] RIP: 0033:0x7f6852067b19 [ 1323.592796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1323.592817] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1323.592838] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1323.592853] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1323.592866] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1323.592879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1323.592892] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1323.592924] [ 1323.636519] kobject: can not set name properly! [ 1323.637438] SLUB: Unable to add cache 9p-fcall-cache-513 to sysfs 00:27:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 55) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:36 executing program 6: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() fork() process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) 00:27:36 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:27:36 executing program 1: r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1c}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x9, 0xd, 0x0, 0x8, 0x0, 0x9, 0x40042, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000000), 0x14}, 0x208, 0xdf7, 0xb0a, 0x3, 0x0, 0x1, 0x1f, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0xf, r1, 0x8) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:27:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 1) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:27:45 executing program 7: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/71, 0x47}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/130, 0x82}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000000100)=""/73, 0x49}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x6, 0x0) process_vm_readv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)=""/3, 0x3}, {&(0x7f0000000840)=""/51, 0x33}], 0x3, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/254, 0xfe}, {&(0x7f00000009c0)=""/185, 0xb9}], 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getpgid(r1) r4 = accept$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000780)=0x14) r5 = getpid() process_vm_readv(r5, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/23, 0x17}, {&(0x7f0000000ac0)=""/59, 0x3b}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/107, 0x6b}, {&(0x7f0000000bc0)=""/236, 0xec}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d00)=""/38, 0x26}], 0x4, 0x0) kcmp(r1, 0x0, 0x5, r4, r0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) 00:27:45 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:27:45 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:27:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 56) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 2) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:27:45 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:27:45 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') gettid() fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:27:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7c726108003de6642c7266646e6f3d6b831fd30f61e132e06fa027795d6b6a22f10505a4f34805a14b3dcb791147ef3e33b5679200986255fb9dbe3744ae26c1a2c23b62bd40f95c9afcf4544251b0a348a90e02003fb7c0eac96e37e10e491dc27bb2e3586571579f7c8534ae3f91a0b4e573315c22efa7d0a3eab0af167307e1e198de5221db7e73cea3aeeb5692834d1ce0a3b5690589d9d7a05e3a74832133c82641ba8ce35200acbdc4bc3228865b0bc0f521bc68f5097cace5dadb0116dbdf231bc1e6335b5a282c105e12c466229900"/221, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) syz_open_procfs(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) openat(r2, 0x0, 0x200000, 0x66) [ 1333.187855] FAULT_INJECTION: forcing a failure. [ 1333.187855] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.188978] CPU: 0 UID: 0 PID: 81945 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1333.189021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1333.189038] Call Trace: [ 1333.189047] [ 1333.189058] dump_stack_lvl+0xfa/0x120 [ 1333.189092] should_fail_ex+0x4d7/0x5e0 [ 1333.189110] should_failslab+0xc2/0x120 [ 1333.189125] __kmalloc_node_track_caller_noprof+0xb8/0x490 [ 1333.189148] ? kstrdup_const+0x57/0x80 [ 1333.189165] ? kasan_save_stack+0x24/0x50 [ 1333.189177] ? __kasan_kmalloc+0x7f/0x90 [ 1333.189191] kstrdup+0x3e/0xc0 [ 1333.189208] kstrdup_const+0x57/0x80 [ 1333.189226] __kernfs_new_node+0x9c/0x870 [ 1333.189242] ? __pfx___kernfs_new_node+0x10/0x10 [ 1333.189256] ? lock_acquire+0x15e/0x2f0 [ 1333.189271] ? kernfs_root+0x23/0x2a0 [ 1333.189282] ? find_held_lock+0x2b/0x80 [ 1333.189299] ? kernfs_root+0xee/0x2a0 [ 1333.189310] ? lock_release+0xc8/0x290 [ 1333.189322] ? lock_is_held_type+0x9e/0x120 [ 1333.189343] kernfs_new_node+0x13c/0x1e0 [ 1333.189360] kernfs_create_dir_ns+0x4d/0x1a0 [ 1333.189376] sysfs_create_dir_ns+0x12a/0x2a0 [ 1333.189389] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1333.189400] ? find_held_lock+0x2b/0x80 [ 1333.189418] ? lock_release+0xc8/0x290 [ 1333.189431] ? do_raw_spin_unlock+0x53/0x220 [ 1333.189448] kobject_add_internal+0x24c/0x9a0 [ 1333.189463] kobject_init_and_add+0x100/0x170 [ 1333.189477] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1333.189495] ? up_write+0x195/0x520 [ 1333.189514] sysfs_slab_add+0x172/0x210 [ 1333.189532] do_kmem_cache_create+0x235/0x5a0 [ 1333.189553] __kmem_cache_create_args+0x20f/0x360 [ 1333.189566] ? p9_client_create+0xd52/0x11b0 [ 1333.189580] p9_client_create+0xdfc/0x11b0 [ 1333.189596] ? __pfx_p9_client_create+0x10/0x10 [ 1333.189614] ? trace_kmalloc+0x1f/0xb0 [ 1333.189626] ? legacy_get_tree+0x109/0x220 [ 1333.189642] ? vfs_get_tree+0x93/0x340 [ 1333.189657] ? lockdep_init_map_type+0x4b/0x240 [ 1333.189671] ? __raw_spin_lock_init+0x3a/0x110 [ 1333.189690] v9fs_session_init+0x1df/0x17a0 [ 1333.189704] ? do_raw_spin_lock+0x123/0x260 [ 1333.189720] ? find_held_lock+0x2b/0x80 [ 1333.189736] ? __create_object+0x59/0x80 [ 1333.189752] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1333.189768] ? __pfx_v9fs_session_init+0x10/0x10 [ 1333.189781] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1333.189795] ? __create_object+0x59/0x80 [ 1333.189810] ? __kmalloc_cache_noprof+0x369/0x470 [ 1333.189827] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1333.189853] v9fs_mount+0xbc/0x9e0 [ 1333.189868] ? __pfx_v9fs_mount+0x10/0x10 [ 1333.189885] ? cap_capable+0xdb/0x3b0 [ 1333.189905] ? __pfx_v9fs_mount+0x10/0x10 [ 1333.189920] legacy_get_tree+0x109/0x220 [ 1333.189938] vfs_get_tree+0x93/0x340 [ 1333.189953] path_mount+0x122f/0x1d70 [ 1333.189966] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1333.189987] ? __pfx_path_mount+0x10/0x10 [ 1333.189998] ? kmem_cache_free+0x2a1/0x460 [ 1333.190015] ? putname.part.0+0x11b/0x160 [ 1333.190030] ? getname_flags.part.0+0x1c6/0x540 [ 1333.190046] ? putname.part.0+0x11b/0x160 [ 1333.190062] __x64_sys_mount+0x27b/0x300 [ 1333.190074] ? __pfx___x64_sys_mount+0x10/0x10 [ 1333.190091] do_syscall_64+0xbf/0x360 [ 1333.190110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.190123] RIP: 0033:0x7f6852067b19 [ 1333.190133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1333.190144] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1333.190156] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1333.190164] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1333.190171] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1333.190178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1333.190185] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1333.190203] [ 1333.219629] kobject: kobject_add_internal failed for 9p-fcall-cache-516 (error: -12 parent: slab) [ 1333.220508] SLUB: Unable to add cache 9p-fcall-cache-516 to sysfs 00:27:45 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:27:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 57) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:45 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 3) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1333.425138] FAULT_INJECTION: forcing a failure. [ 1333.425138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1333.426266] CPU: 0 UID: 0 PID: 82393 Comm: syz-executor.6 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1333.426282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1333.426289] Call Trace: [ 1333.426293] [ 1333.426298] dump_stack_lvl+0xfa/0x120 [ 1333.426321] should_fail_ex+0x4d7/0x5e0 [ 1333.426338] _copy_from_user+0x30/0xd0 [ 1333.426355] memdup_user+0x7e/0xe0 [ 1333.426375] strndup_user+0x78/0xe0 [ 1333.426394] __x64_sys_mount+0x136/0x300 [ 1333.426407] ? __pfx___x64_sys_mount+0x10/0x10 [ 1333.426424] do_syscall_64+0xbf/0x360 [ 1333.426443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.426456] RIP: 0033:0x7fa4b50c1b19 [ 1333.426465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1333.426476] RSP: 002b:00007fa4b2637188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1333.426488] RAX: ffffffffffffffda RBX: 00007fa4b51d4f60 RCX: 00007fa4b50c1b19 [ 1333.426497] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1333.426504] RBP: 00007fa4b26371d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1333.426511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.426518] R13: 00007ffd6dcd9bdf R14: 00007fa4b2637300 R15: 0000000000022000 [ 1333.426535] 00:27:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 58) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:55 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:27:55 executing program 1: socketpair(0x21, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa47}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:27:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:27:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000200)="cc948a13ee81b9f2be29adf8964d00f310dfa49b6cabb651cfb4d52b1e83e65c5771afe40efc4a6839c6c2dbb8f075182870ca6529ffd0577cdb4f8d48bf91492a77ef33b89566fd9e102e7ea5327fcdb7ea8b7c4a7f9d3e4deefd0260e4fdbf53e56a76dde924a0de0e38ea5f9a13bafda436b8d7f82c25c0cf3ece35b635bc005b8608054dd448e873fb88d621e59553b2d7d17963d014370fcb9a51f3ccbf815e0800ddeb4d", 0xa7, 0xa2}, {&(0x7f00000002c0)="e182d83067cb81c6eb36195305b69068b5fece21b33b9e44cb52bd9bc101c775a83903b557841ed50ff5c3470d63daa4f7ee3766bae5926d285f7163b688127dccad6c2945d520f7aceff55c1be5be9b919a62467dc362df2829f2cd1a97a7eaebd247d727d97f01e1e6c03164a2ec6e3f6462c93a8978e515f46325c50a39f6a3a2a2cfbee0e5fcb1ff5c4d16d9eb4927fa6fc7b95c717ca318479e863a0c1dd4034180e974b3d65f6fee4789016fd7aa3b65c7bbc6eb205d20fe5ee492c56d5f7a5ec8e2480b15a6e3b32b33643c5ef8c91d47ffc6365fda27623f67980b305abe92cbb72b0f770b24d5b9c8cf7d7f", 0xf0, 0x2}], 0x800, &(0x7f00000003c0)={[{@commit={'commit', 0x3d, 0x817}}, {@oldalloc}, {@resgid}, {@grpjquota_path={'grpjquota', 0x3d, './file0/file0'}}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) unlinkat(r2, &(0x7f0000000440)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:27:55 executing program 7: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/71, 0x47}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/130, 0x82}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000000100)=""/73, 0x49}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x6, 0x0) process_vm_readv(r2, &(0x7f0000000880)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)=""/3, 0x3}, {&(0x7f0000000840)=""/51, 0x33}], 0x3, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/254, 0xfe}, {&(0x7f00000009c0)=""/185, 0xb9}], 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getpgid(r1) r4 = accept$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000780)=0x14) r5 = getpid() process_vm_readv(r5, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/23, 0x17}, {&(0x7f0000000ac0)=""/59, 0x3b}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/107, 0x6b}, {&(0x7f0000000bc0)=""/236, 0xec}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d00)=""/38, 0x26}], 0x4, 0x0) kcmp(r1, 0x0, 0x5, r4, r0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) 00:27:55 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000067c0), 0x80000, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000006900)={&(0x7f0000006800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000068c0)={&(0x7f0000006840)={0x64, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x80}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) fcntl$setlease(r3, 0x9, 0x2) recvmmsg$unix(r2, &(0x7f0000000780)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/13, 0xd}], 0x6, &(0x7f0000000700)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x1, 0x1, &(0x7f00000007c0)={0x0, 0x989680}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x5e, 0x40, 0x6, 0x81, 0x0, 0xc5, 0x2000, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xf16, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0xfffffffffffffffd, 0x10000, 0x6, 0x5, 0x7, 0x2, 0x0, 0x3, 0x0, 0x400}, r5, 0x9, 0xffffffffffffffff, 0x9) [ 1343.479770] FAULT_INJECTION: forcing a failure. [ 1343.479770] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.481676] CPU: 0 UID: 0 PID: 82576 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1343.481705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1343.481717] Call Trace: [ 1343.481725] [ 1343.481734] dump_stack_lvl+0xfa/0x120 [ 1343.481773] should_fail_ex+0x4d7/0x5e0 [ 1343.481802] ? __kernfs_new_node+0xd3/0x870 [ 1343.481824] should_failslab+0xc2/0x120 [ 1343.481847] kmem_cache_alloc_noprof+0x5f/0x470 [ 1343.481879] ? __asan_memcpy+0x3d/0x60 [ 1343.481920] __kernfs_new_node+0xd3/0x870 [ 1343.481947] ? __pfx___kernfs_new_node+0x10/0x10 [ 1343.481974] ? lock_acquire+0x15e/0x2f0 [ 1343.481999] ? kernfs_root+0x23/0x2a0 [ 1343.482027] ? find_held_lock+0x2b/0x80 [ 1343.482059] ? kernfs_root+0xee/0x2a0 [ 1343.482079] ? lock_release+0xc8/0x290 [ 1343.482101] ? lock_is_held_type+0x9e/0x120 [ 1343.482138] kernfs_new_node+0x13c/0x1e0 [ 1343.482169] kernfs_create_dir_ns+0x4d/0x1a0 [ 1343.482200] sysfs_create_dir_ns+0x12a/0x2a0 [ 1343.482223] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1343.482242] ? find_held_lock+0x2b/0x80 [ 1343.482276] ? lock_release+0xc8/0x290 [ 1343.482305] ? do_raw_spin_unlock+0x53/0x220 [ 1343.482337] kobject_add_internal+0x24c/0x9a0 [ 1343.482366] kobject_init_and_add+0x100/0x170 [ 1343.482391] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1343.482424] ? up_write+0x195/0x520 [ 1343.482459] sysfs_slab_add+0x172/0x210 [ 1343.482494] do_kmem_cache_create+0x235/0x5a0 [ 1343.482532] __kmem_cache_create_args+0x20f/0x360 [ 1343.482555] ? p9_client_create+0xd52/0x11b0 [ 1343.482581] p9_client_create+0xdfc/0x11b0 [ 1343.482612] ? __pfx_p9_client_create+0x10/0x10 [ 1343.482645] ? trace_kmalloc+0x1f/0xb0 [ 1343.482668] ? legacy_get_tree+0x109/0x220 [ 1343.482695] ? vfs_get_tree+0x93/0x340 [ 1343.482723] ? lockdep_init_map_type+0x4b/0x240 [ 1343.482750] ? __raw_spin_lock_init+0x3a/0x110 [ 1343.482784] v9fs_session_init+0x1df/0x17a0 [ 1343.482808] ? do_raw_spin_lock+0x123/0x260 [ 1343.482838] ? find_held_lock+0x2b/0x80 [ 1343.482868] ? __create_object+0x59/0x80 [ 1343.482897] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1343.482924] ? __pfx_v9fs_session_init+0x10/0x10 [ 1343.482948] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1343.482975] ? __create_object+0x59/0x80 [ 1343.483003] ? __kmalloc_cache_noprof+0x369/0x470 [ 1343.483034] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1343.483080] v9fs_mount+0xbc/0x9e0 [ 1343.483109] ? __pfx_v9fs_mount+0x10/0x10 [ 1343.483140] ? cap_capable+0xdb/0x3b0 [ 1343.483176] ? __pfx_v9fs_mount+0x10/0x10 [ 1343.483204] legacy_get_tree+0x109/0x220 [ 1343.483236] vfs_get_tree+0x93/0x340 [ 1343.483265] path_mount+0x122f/0x1d70 [ 1343.483287] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1343.483326] ? __pfx_path_mount+0x10/0x10 [ 1343.483347] ? kmem_cache_free+0x2a1/0x460 [ 1343.483378] ? putname.part.0+0x11b/0x160 [ 1343.483418] ? getname_flags.part.0+0x1c6/0x540 [ 1343.483449] ? putname.part.0+0x11b/0x160 [ 1343.483480] __x64_sys_mount+0x27b/0x300 [ 1343.483501] ? __pfx___x64_sys_mount+0x10/0x10 [ 1343.483534] do_syscall_64+0xbf/0x360 [ 1343.483568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.483591] RIP: 0033:0x7f6852067b19 [ 1343.483608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1343.483628] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1343.483649] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1343.483664] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1343.483677] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1343.483690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1343.483703] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1343.483736] [ 1343.538721] kobject: kobject_add_internal failed for 9p-fcall-cache-520 (error: -12 parent: slab) [ 1343.541644] SLUB: Unable to add cache 9p-fcall-cache-520 to sysfs 00:27:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:27:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 59) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='net/arp\x00') process_vm_readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/188, 0xbc}, {&(0x7f0000000440)=""/87, 0x57}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000500)=""/237, 0xed}], 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:27:56 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getuid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) statx(r0, &(0x7f0000000480)='./file0\x00', 0x100, 0x40, &(0x7f00000004c0)) setuid(r3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r1, r4}}, './file0\x00'}) lsetxattr$security_selinux(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x4010, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'net/arp\x00'}}, {@access_user}, {@version_u}, {@msize={'msize', 0x3d, 0x1000}}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@version_L}], [{@subj_user={'subj_user', 0x3d, '9p\x00'}}, {@uid_gt={'uid>', r1}}, {@smackfsdef={'smackfsdef', 0x3d, 'access=user'}}, {@uid_gt={'uid>', r1}}, {@fowner_gt={'fowner>', r3}}]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c6673400c036a3d00000034006400002d000000002d366461002d333561372d39646231363837642c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="00003905ebe1c6aa908f44f58ed966520b822fd9b85b10259cc05e7400", @ANYRESHEX=r7, @ANYBLOB=',noextend,\x00']) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:27:56 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:27:56 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) 00:27:56 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:27:56 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="68849489f47f"}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="5e6dc42cb045"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x4084) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x8000, 0x5) 00:27:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) [ 1344.201580] audit: type=1400 audit(1752539276.351:11): avc: denied { write } for pid=83469 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 00:27:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 60) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:56 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) (fail_nth: 2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:27:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:27:56 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000000500)=""/133, 0x85}, {&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f00000005c0)=""/115, 0x73}, {&(0x7f0000000640)=""/176, 0xb0}, {&(0x7f0000000700)=""/19, 0x13}], 0x8, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}, 0x1) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x20, 0x7, 0xff, 0xf7, 0x0, 0x101, 0x4000, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x50cd9cb, 0x0, @perf_config_ext={0x9, 0x7}, 0x1480, 0x5, 0x3ff, 0x3, 0x1, 0x77f, 0x6, 0x0, 0x6, 0x0, 0x10001}, 0x0, 0x5, r0, 0x8) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) 00:27:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 61) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = geteuid() syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x9, 0x6, &(0x7f0000000680)=[{&(0x7f0000000300)="d64ee836e4c5adbd033f7baf4a5f68b4d80b85964437ce38a39e55d270647430be1c893cd54c0752a600c9236a19b0abd7c9174b1ca90bef1b0af38f994efdc64b2676c0acfc67138465e4083ab15a8b9274c7d16da954be7a0d22f9203adad2f6b066bd92faf1aeaba6932b5a681e2b5a76cd1a2fbb8f95549cd94305bddfd745bad27a0d1fbdbd89d77af5f496de9ec258a7efa9a60073d6efc2d6f179297d078a20b59ba3c3f657add6298b1e32e938ccd7ce87b55c9ca281b40259d518ec33957fbdcf9ae17c456efdafe34c", 0xce, 0x3}, {&(0x7f0000000800)="6c6294957dff740da3fac7327ffd05915c54ba13d337e42949d02e43ba2f71872a0015d9cc2f4d2dfb9225209c6290ece4d0eb19b903c755adb778332ccde747f337", 0x42, 0x3}, {&(0x7f0000000480)="9a03afa2af01", 0x6, 0x6295}, {&(0x7f00000004c0)="fd237eed1332855d28afc0154e4ac973e3d61ebb885cf1583af35014f7ec5ed1412e09691c50a8e784faefc98de4f35067a7f5c68739df4f9ed4848531a041f626041684d033dc46", 0x48, 0x9}, {&(0x7f0000000540)="d6d2bc64d14d35bbbed66d092b132b9d03a6bc1626fc3b0a6b9aa239607c2ec623dd622d8566ebc0b8b7a660416d5ebc84c45c0323a0c7cf7804a7bfd738c93628a19c3821317ffdd73edf32b93c1c25c962a3aae894b9cbeaabbc45b88ee0177d60bd8c1a3fb3814b0148132eeadeb019b58a9b3e616745660feac1f8c9b9f07ce3d72f4d732fef6272157ffc6e62c644912ebd7d559085027773d73263", 0x9e, 0x4}, {&(0x7f0000000600)="e3e8dea2dd7ee5019065a6e00156bb24dfdb2616f0b39b1e737332425de9cd0e7c57271307ae341b705a33fc6f3c58172486bc57ad92a8866f2d172da78f17404ee1fd65eac3759f14ec4da829732c8b0bbe0717f23c2957f5961572b4428e52591d3a2fed51", 0x66, 0x3}], 0x2004084, &(0x7f0000000740)={[{@huge_within_size}, {@size={'size', 0x3d, [0x30, 0x65]}}, {@huge_within_size}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '[-&*-!$#b#'}}, {@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@fsname={'fsname', 0x3d, 'uid'}}, {@permit_directio}, {@dont_appraise}, {@fowner_lt={'fowner<', r2}}]}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:28:08 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 62) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="de7b29455fa21f8eaf875d277e9b1e2c041c210c303434fcb839eee0016a2e80352efbf8826a07048fbf8094483bb78a2ea2ab1e3a5fdc8dffd93a61e8c5dc6261d1ac8c005af9939fe082b36f8fd51089f88aabb77e1bcd311d32478f5bb28b6f"]) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x9, 0x2) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="4a1e6ebb62d4481115e1470735696c7c695c0baab2febf5e9a89ee6fa1c35a0ae7d37d03cc09e4126644b2dd1981226422f1b40053cea82e13e7d8e5", 0x3c}, {&(0x7f0000000180)="fc9f37230a218a8472278f24f5f9329dcaa140868a893a0b0cfb7e65dafd432e2e688676737b6f47aee25c01757dcf65b877eb8d045f41b4fc5a1df16228102f1773897f7a79502da271d587ecdb2d13132533222533d1deadf28ba5fb8feee7b084f82e76cc79a53bdec4ffa1153002b5ba4b9795e58a8fdce91a3863a5996aa87308f99c86d15d6640010e32201a886248c3a4f44322", 0x97}, {&(0x7f0000000080)="c25e0c0b672f5eefecbee76fdbf25c9a40be51ed7e8da6f14257bd6a9f5345b68fcc30f2e91b000a5c923d9c480174ca6686af4039e0eb8af57c88ea971840919b6519abd4bba260dc8fb97284b2398369b91ef30d71b4a25b3341a010ecd70fe2f419d8f8cadee9ae", 0x69}, {&(0x7f0000000240)="9ce8a5595ede47ad3af9b477a85fa20915e916883c8d1930cd789905173903bc5662fb42e85dd22ec554323897ff699412e63e55451400", 0x37}, {&(0x7f0000000280)="dab06faa330ac143b0ed6298ad56ee7749a3947ed1c9feb2", 0x18}], 0x5, &(0x7f0000000340)=[@dstopts={{0x230, 0x29, 0x37, {0x73, 0x43, '\x00', [@generic={0xff, 0xff, "4bc7c6b347ffb11ef21a6883ec6f74680004d25ca7b54c26711dc21919f9dd79c0b044f13faf2e68156a0e1dd587648e25ac44034e2371177edb5d5dde15bbd9d0ade7c62534107073d8b06b655f02a608a2bb4a47c2e49bee971af42160903f2c6b09768852780e77d822d0fdb02129e327a481b3da56e714408804c0c6ca1c326f31062284ac2fd536947b193a2a42c635fa7ba800f2f1b1cc2c2f2c80960d81d8fae7befa6434eca6bc450be7c1526b4f4d847744d3e563c1765226fff7cf43c3829c4ae2f610c2ec027bb5fc853157fe9588d03c05b69acc7279254d8207222d82d7ac3acb646ffd02b2f05698c6482c7deeea1781c79f9f5c4e71da76"}, @generic={0x81, 0xf2, "030fb259e34ec09fda480bf5e2b08528926d89b031cfcc75dd7ed437141fa1d92bd05f76167417cedce8c07408b339ade28fbb3bc0475dec7a00d958167356943cb1ad3b0ad0a060d4609bcf76a92d3ee73f5256a6432401481dd2beff010e7b30d321aad00b7bc9a2d105741efc5a72abfdaa7f373db2305c03412ce3fc9dfadb5762ecf2298928283dd6606511706a16441187d7b47be994b4b387229a434aaf1b6c7f75e20f633d74c215e7c856f67189eebeb9d54e4702ab882d700139506d4e598e92b79a5de8ee973e3faabe85c93570b4b539663e4f4b0b073d739839f83adc5f50352f7620fb264db696e9f709a7"}, @pad1, @padn={0x1, 0x1, [0x0]}, @pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x66, 0x96a, [0xc9, 0x3]}}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x16, 0x10, 0x2, 0x0, 0x0, [@rand_addr=' \x01\x00', @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @empty, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}]}}}], 0x2c8}}], 0x1, 0x58003) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) sync() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') sync() r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) sync() poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x8) fcntl$setlease(r1, 0x9, 0x2) 00:28:08 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:28:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:28:08 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:28:08 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = syz_open_dev$evdev(&(0x7f0000004b80), 0x0, 0x100) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r6}], 0x1, 0x8) r7 = openat2(r2, &(0x7f0000004bc0)='./file0\x00', &(0x7f0000004c00)={0x40, 0x21, 0x9}, 0x18) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x20000) poll(&(0x7f0000000300)=[{r8}], 0x1, 0x8) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r9}], 0x1, 0x8) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000005040), 0x1, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r11}], 0x1, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005100)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000440)="0871c97e84897859ef1a0c08775655b82b4344be06860d77a4d494a4505c7e7536696a292f02f93b85d5e227375d28652a603dbf8a9e592f9ea0cd8723fb63f9e912ee525b37cb0267e504c2d289d0d539e90e3d32c9132c73a2069a282eab9e2c81e240a7234a5d0983775a3be6b4c6c4bd6d0908c114ab7e440546c38b76dcd6c81fbea15154f15e654adeacd96d4b0e4f2edb43fd9b13da16ac8b08105ad4c845cf5a4a6590694df63411f12d4eefe56d76851b93683e959b6b2105554ae0e1b427131e36d5cac4550e4e3d3856a93274bdb93f4c8887beca5eb03dfecb15f92100a9", 0xe4}, {}, {&(0x7f0000000540)="4750e240aab274f021f9371a96c7768a879badc285779e803a5cff83fbf7301babf2b38e352486aa522a1ea6b07c29959a457905a5413d2933f1f453b543e8350964248b464fc598ca828f99f25b06e392cdba9eed102a55ea2c705d79e4d1b13a0861b13388b531e3c0eb106f124096ff8de29f4ec841001e580cd01d671a09b93523b1144e9b9192026cfb24fe759bc59224af099ae4fda9bbedbd2b2e99630b743974b78091723d2d663f5023fe052b18a337f3aa9007d37b5f6a3957", 0xbe}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f00000031c0)="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", 0x1000}], 0x5, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r2, r2, r0, 0xffffffffffffffff, r0]}}], 0x120, 0x8000}}, {{&(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000940)="aa0d699e7612ba676e1ce0fff8f9dcea50865bf9e5a7138494b7fa8aaf8195e0fc585ae5368b0985847d60230c377c0caf569443a3c8a294c5f19d06fe215f21ae5a48b11e281a44b6ad3229c4f5582871d4212b221689ace294304fd50ba8f5d86bd60ac68b1994fabe1172370146b4f5ddd9325bcb696e88", 0x79}, {&(0x7f00000009c0)="c888d7ac0af9b80a96890863be9adab779d84819a7e226ac53e9b2f099c43ea06a6aead7ee0baf7b83d81c2e31e5a04010588d902b78873a310202e7615955c645", 0x41}, {&(0x7f0000000a40)="b0b1d13b61c7bb768fcd4178e484a038823bf96dd7e6c8efb293c2ce0cfb5616aa3fa7d07682f3fa3f052decb29db656ccc315eb8dfc162d599bd3079e82a3915297bf8f52a44e158e042a98b31c0e23073588076d22533b2a2631f5e5f3fc1cdf49618ad2712d0e7da751642d86279fb47b205b7abe07dc169fdaf50bd39d369b0f6e5ebbaaa7d548408ae7e2b4807a9448f1bc54f7dbf88270706b0679f566aac7226ad785b3ebcd17d5", 0xab}, {&(0x7f0000000b00)="7834e9810ba4832b14ace9f15d9a50c904b028319782accabb3ab428aec89810c364f612ba4f22568238a23bdc662a4c3b56739af4e27196772711fd4931fd9b03708b47e844bf316f09cfcd5bfe0bf970e62591f1f975c8331e5bce5309", 0x5e}], 0x4, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x20, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8, 0x28008010}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000cc0)="47bbeb69e1ec3763e903e39d1491db71153285e47f122af9cb2beb59eab6f38ee230d404b49ce98cf5541680612c32026fabb4fe825155c0e7bc41a8a0cfb4fdc6a4d7fe055089d5a8e9c583c816bb871ab39e63a762a54ef71dda743bca550c9c10b47ced2a9e93b0c479cae2011a3a3c214f23cf481e40f2ec76ca5575948d0663231fda0264003c8fbe54d5b552db5cca90a8ad3782b87ffb290f5ed2a21523859c62d3c939808db3dd2b90eb9fd5c17deb7677", 0xb5}, {&(0x7f0000000d80)="8faa874c11073c824b43ef1e01cb36519a654e71f057124503e00bcd6624540bccff0f8271663c6d8979a76b2e30e78ef5d0d49cc848cfef04aa341729ca096c1fd57ad7a1d987a6d1a80cfa2596b9315b5d7c619c71307f2e865f73c34da63b5ae16ac7f83ad255e199366e677181d19ffe89f419133810d66694", 0x7b}, {&(0x7f0000000e00)="68d37f13af238ef98d952c2483f0ef13c70294a2842c21033a89cb55eb6b94614497c60aa54b41d064cf866d84ca02d3c30c1c512989272957e4d1ad4062a00e04dd65f860bc1c402ef5343164912b5f5e9300caa173df0489ef8f0d017222064de65d2673ae73fb85c075bab639e8daefec5444c648", 0x76}, {&(0x7f0000000e80)="830d53504f75a1879063bdf84410eae7ad42879679c65f302926978007692be41d4d41d5692eec436fd2c7bdcf5e04e819b7544865f9343cdd266c643dd4a53f549ff451c675430d19f8b7ccd8953b7a462a82bb04edf9922c942cdd8e026aecc8", 0x61}, {&(0x7f0000000f00)="b5d9312fb8ef4a4035eb2d51305569b707c9167d769fb327f7140d51034f544615b9c18c91911cec6cd0c7d391ab1d8f31ebafd2e1baf7690c3b90b75fa4f993bf3c42886315b101558833b98144b7bfcc57ccc42d9aaaa8badd1d417a010b5203dd2ccd8e3708ab133f1bb83a15a5b1f4ff899af9317b79c2e94e439da1e82fe6e2802046504173414393024f94670b07c3acdbf5d022a93bc52e82a074131d5d9c8d28e6092eb801129f9efe93c1cf3d7914353755dc87da452a2524cf91ab66c1e4a023169c61d67dfdb9", 0xcc}, {&(0x7f0000001000)="60b06b93ed80fe911b9384b1df45e348fdf69d7cedbcd94f7bc30f77bb63d93c572490afc49bccd5e35cc334113bc416f9338de67522d61c78ef953fec380b6a85cd811083c91d3dbb318cfe72551160361e2b1d224976af36995e507bda7cf6c07546a04f826166b8b4b4a0b6d83ce0", 0x70}], 0x6, &(0x7f0000004240)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x80, 0x40000}}, {{&(0x7f00000042c0)=@file={0x0, '.\x00'}, 0x6e, &(0x7f0000004580)=[{&(0x7f0000004340)="5cf603673e7c8668590398a9a81291efafaabd7e5484269f36d9a1514710163a813e4b1d8f507497419bec672e6bc05ab04f36878cef9573e880323e691e005d36a2710fcd575b", 0x47}, {&(0x7f00000043c0)="1dd40a3273e3a6255700ac4d186ae60a81120b796e9f01a9d00acd4a3b188a504114739dcaa6595982700bfa923e6dcbe02cc565d02eccba7f061c545ad438febbd21b16948cbe9422b42583ccf9e2e8c09029772a03ab9aafc6e21ee8be3a7fc54b0e87c3db0dbcadbbfd2695d27a23553f152a7c64ac8b5936c5af6dcdaf5477d5d7ceaf9dfbf13d5d9b85c71f308e21fce2e5ca0a2a7f6b8231dc4c531c58d1f4562007c452b85d47d71b7f5cf14e53ff73b64ff6880798050129db2ae4660246fb53690563f58affa046978e8bc812a58aab", 0xd4}, {&(0x7f00000044c0)="2a723813aafc46c10feae39829277e18a7fea6b62fac1909b3774075f057a648b684e30d035af7f805e178a3369e32aaa9d9bab79aab913f8082059f0d63e585251f9c91d9031128d0248caa381d2ccd491a6ba1bc6e1522ccd0ff4a89de027b4c57e2fbe27bb184248622031310da3da4228f74a876d13f750b188db61b142a0af6ea89d5f6a62a3fe4dd", 0x8b}], 0x3, &(0x7f0000004780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f00000047c0)="23a92c4e933efc4fcf24252a4850e335df0d4aee809131dc8d3409940a0ab252954e93931492c8816e7f2fe8dd7c429fbba6f48dc861873327c9e442b261e2ecf1cd687330d1144b988523decdbb8a705d0c739f921f620784015a381b15d6aedbec5c30a2c7d03f580550092ec1f4af6de8cc34894ae3e8eecd4d20917dfb28ad1017373e030594d7292b1830fd139042a37320b8783aebc9226b9dc1739e6b1966a9bb1654b0b10f34ff6a0ae48f51b1d3e4d191556332b662ef400471477caeb3f0e6cf4240a65d49164a0099c13a810ba338a240dcb1ac51ef5702781600f73135be18d5aac3cda4ccf4c0ad0a2408e6c780d5", 0xf5}, {&(0x7f00000048c0)="2f5462298315de83e9fe53bdae884ec6e4a1", 0x12}, {&(0x7f0000004900)="b4cf4217d8cfaf1a8d21e50f604e9c554bfc7de5a5ef68d63fccb0a1d9439157e5186fff504bba28e60debd7ae945a654229cdf9f16ba4fb9611dbabfda0b3f24f5cd32a4e69ee3b5001a36c946809a8d7e50adcdf3e50ebe63bbbd978577a40df688f0c23c378b0feb91e92577807592549fc4873e9f610b32e49ea", 0x7c}, {&(0x7f0000004980)="8a97e0f0b2adb05dcecd8ecda67db4d77af8893e027bb71e1cff3a49d5adbb95c5408b466abf1dd9672f5e63284faaefc2b12c45d694e1e72c884e69132e0626de361bf056696b8a926082c02962e923aee51ee7591d9c7c3bb468add538fc28742f465f1a63d3f22c2ef87694ccee55d3c229567cebe1a9fc87415098515875395e5282a57872fb3480c8c4d2fc2e101891dfd9380262a5a5c0b760c9edf428", 0xa0}, {&(0x7f0000004a40)="23e55982ac8849ca5c09f8cf4942226c8e2a8693ca786f3635879a617a6c2eac210462461fbac3bfe01b91e5c8c3a044807d569cfd2c389fd1c892bfb1598c0dc51727cdbfe21dc2c9f0e20c6185f332fddda0b6d80b7880279ec24056849bc505a33c00b25897e75612ce777b016c84d1be1b", 0x73}, {&(0x7f0000004ac0)="e3182653ca5b81920569e64a751a4a3e7e07be4a30e5d6ab9bee6732c6f0c0a1376eb6687959d8b1b7609a2ea2c96a", 0x2f}], 0x6, &(0x7f0000004c40)=[@rights={{0x20, 0x1, 0x1, [r2, r2, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x34, 0x1, 0x1, [r0, r9, r0, r4, r5, r6, r2, r7, r8]}}], 0x90}}, {{&(0x7f0000004d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000004d80)}, {&(0x7f0000004dc0)="c97381e15f779555a2d059fb2672282fd7bf05cd31c94f06f2df95221f392d1b3c838570a029e81dc4d19575440946b0317d6494dc7ca0b9c24e7f020684826a47926f0516f813b5da253e10f8cfadd4e1bd4e92326bd5f6af9be8c0fe74cbd7e3474c98edc827296087acf07ec4fae600", 0x71}, {&(0x7f0000004e40)="10a018f6abac95aaf8da6262b9fa601453d34af2e928b981e393bc2caa18c912c1996851734953cff3c8e1d56abced31bbade2c32e8ff06da8b39fb01a9045e5b4be49e4be7b5a873d9210530d8502cb57ae47caf3506d35e13a3693d16eee189d35dc27be8446de792c4be3dda7e2dcc8edc14aa29f16e91812fc86bad9c1efb2f29fa19235c11ca9df2e6e7706217db2b5faa3781051e54efe01e4916a46d760af424b85ab71c86c03d4a4c5644c01802593d745639f1495ab0843196e7a577c29ce7be4da0a37842c5bb39df93d491c63f669a3f0a604eb5f", 0xda}, {&(0x7f0000000000)='\'', 0x1}, {&(0x7f0000004f80)="fff6eab38eafda432a5f236ac4", 0xd}], 0x5, &(0x7f0000005080)=[@rights={{0x24, 0x1, 0x1, [r2, r0, r0, r2, r9]}}, @rights={{0x2c, 0x1, 0x1, [r0, r10, r2, r11, r2, r2, r2]}}, @rights={{0x10}}], 0x68, 0x8000}}], 0x6, 0x48840) fcntl$setlease(r2, 0x9, 0x2) [ 1356.203143] loop5: detected capacity change from 0 to 98 [ 1356.206400] tmpfs: Unsupported parameter 'huge' [ 1356.209281] FAULT_INJECTION: forcing a failure. [ 1356.209281] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.211153] CPU: 1 UID: 0 PID: 84339 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1356.211185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1356.211198] Call Trace: [ 1356.211206] [ 1356.211215] dump_stack_lvl+0xfa/0x120 [ 1356.211256] should_fail_ex+0x4d7/0x5e0 [ 1356.211288] ? __kernfs_new_node+0xd3/0x870 [ 1356.211311] should_failslab+0xc2/0x120 [ 1356.211335] kmem_cache_alloc_noprof+0x5f/0x470 [ 1356.211371] ? __pfx_perf_trace_lock+0x10/0x10 [ 1356.211407] __kernfs_new_node+0xd3/0x870 [ 1356.211436] ? __pfx___kernfs_new_node+0x10/0x10 [ 1356.211468] ? lock_acquire+0x15e/0x2f0 [ 1356.211493] ? kernfs_root+0x23/0x2a0 [ 1356.211515] ? find_held_lock+0x2b/0x80 [ 1356.211561] ? kernfs_root+0xee/0x2a0 [ 1356.211583] ? lock_release+0xc8/0x290 [ 1356.211606] ? lock_is_held_type+0x9e/0x120 [ 1356.211646] kernfs_new_node+0x13c/0x1e0 [ 1356.211680] __kernfs_create_file+0x55/0x360 [ 1356.211717] sysfs_add_file_mode_ns+0x21c/0x440 [ 1356.211760] ? __pfx_slab_attr_store+0x10/0x10 [ 1356.211800] internal_create_group+0x571/0xeb0 [ 1356.211836] ? __pfx_internal_create_group+0x10/0x10 [ 1356.211878] sysfs_slab_add+0x188/0x210 [ 1356.211914] do_kmem_cache_create+0x235/0x5a0 [ 1356.211955] __kmem_cache_create_args+0x20f/0x360 [ 1356.211980] ? p9_client_create+0xd52/0x11b0 [ 1356.212014] p9_client_create+0xdfc/0x11b0 [ 1356.212047] ? __pfx_p9_client_create+0x10/0x10 [ 1356.212083] ? trace_kmalloc+0x1f/0xb0 [ 1356.212107] ? legacy_get_tree+0x109/0x220 [ 1356.212137] ? vfs_get_tree+0x93/0x340 [ 1356.212166] ? lockdep_init_map_type+0x4b/0x240 [ 1356.212194] ? __raw_spin_lock_init+0x3a/0x110 [ 1356.212231] v9fs_session_init+0x1df/0x17a0 [ 1356.212257] ? do_raw_spin_lock+0x1dc/0x260 [ 1356.212289] ? find_held_lock+0x2b/0x80 [ 1356.212322] ? __create_object+0x59/0x80 [ 1356.212353] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1356.212382] ? __pfx_v9fs_session_init+0x10/0x10 [ 1356.212408] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1356.212437] ? __create_object+0x59/0x80 [ 1356.212467] ? __kmalloc_cache_noprof+0x369/0x470 [ 1356.212500] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1356.212549] v9fs_mount+0xbc/0x9e0 [ 1356.212581] ? __pfx_v9fs_mount+0x10/0x10 [ 1356.212614] ? cap_capable+0xdb/0x3b0 [ 1356.212653] ? __pfx_v9fs_mount+0x10/0x10 [ 1356.212683] legacy_get_tree+0x109/0x220 [ 1356.212717] vfs_get_tree+0x93/0x340 [ 1356.212748] path_mount+0x122f/0x1d70 [ 1356.212772] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1356.212813] ? __pfx_path_mount+0x10/0x10 [ 1356.212835] ? kmem_cache_free+0x2a1/0x460 [ 1356.212869] ? putname.part.0+0x11b/0x160 [ 1356.212897] ? getname_flags.part.0+0x1c6/0x540 [ 1356.212929] ? putname.part.0+0x11b/0x160 [ 1356.212962] __x64_sys_mount+0x27b/0x300 [ 1356.212985] ? __pfx___x64_sys_mount+0x10/0x10 [ 1356.213020] do_syscall_64+0xbf/0x360 [ 1356.213057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.213081] RIP: 0033:0x7f6852067b19 [ 1356.213100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1356.213122] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1356.213145] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1356.213160] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1356.213174] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1356.213189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1356.213202] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1356.213237] [ 1356.273927] 9pnet_fd: Insufficient options for proto=fd [ 1356.342529] SLUB: Unable to add cache 9p-fcall-cache-528 to sysfs 00:28:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {0x0}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:28:08 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40000}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180), 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000018, 0x2010, r2, 0xea19b000) 00:28:08 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 63) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x1000000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}, {@cache_fscache}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@appraise_type}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:28:08 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 64) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) r5 = syz_mount_image$nfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1, 0x5, &(0x7f0000000580)=[{&(0x7f00000002c0)="b6af952d2d661ee3698685fbc1c9384dced8257b2bb99b6929a2b36d951871148427d35cba06d8c28e1b56eb457c79bd085919c140ec01e6ac55ac9473cf701dac2065bc8fa86d3ab22f3b95ac8beb2e13c769897844c82f5c6f588880449ab527a31a349acaa747d0399ad3407d9e6667c7b5ec4736e1cdf0f4a8f16dce5ff2b0a95b27ad77aa46a11dcd9bbbcc2609f34070fc7eb08c676d07bf5b8e1d01ffdd20513a5b91773f3e6bad91f79a763dce3100dcb1f33466c9b6de898c96d204669f885f34d04b6785ed259a36254dc4882a5682983d776a80e0d5e116c10f4f0c6166f0a6adc13c846f0e4f571a5b83b6ea9b47f2", 0xf5, 0x7}, {&(0x7f00000003c0)="f101710366fe7dcbfe5da3039801fa0c6e0ffbacb2ef75afb9496f1ff5e103d076f77826b4f66eeb94bd89a5960e10b456254ba1cc080658", 0x38, 0x3}, {&(0x7f0000000400)="0a5c083dab1b2dfb1ccb5f589da4ccc50dd6046e91bd989979f6e6a79da026203f366d45f05e039a5c5a25b92547", 0x2e}, {&(0x7f0000000440)="02383f44861d94d7fd6e3e93fee7c962d99b1f91dbe11dbaebdfcca0c2e8e6a33865a483181a72a0073e5b8ad6902e5baea011be7595dc82785a76d259d0b22007e6962fe9672d163b792281a15fa87dd94158676fd3654f14230e78a9aeb305f1c00e62ab6be8dbf54d779e27355c551b116865ed3a9639787f68fcd0f044fd0fdf7adaf918aaf471f96c6e2a8f7bd9635681f39efadce2874eb0781530b276988008992b68c58ba5531507247372e1b373683a6a35ace1ce12c86a432bef3b0ce881ba821af40d26386a72a9", 0xcd, 0x100}, {&(0x7f0000000540), 0x0, 0x7}], 0x9, &(0x7f0000000600)={[{'-\xfa/){'}, {'^'}, {'wfdno'}, {'\\'}, {','}, {'rfdno'}, {}, {'#'}, {'-,^.^},^'}, {'wfdno'}], [{@appraise_type}, {@appraise_type}, {@euid_lt={'euid<', r2}}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x71dbb5bdd5f59a01, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}], [{@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@fowner_lt={'fowner<', r2}}, {@obj_user={'obj_user', 0x3d, 'wfdno'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'access=any'}}, {@seclabel}, {@subj_type={'subj_type', 0x3d, 'wfdno'}}]}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:08 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x20010, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid}, {@cachetag={'cachetag', 0x3d, '\\^:'}}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@uname={'uname', 0x3d, 'rfdno'}}], [{@audit}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noexvend,\x00']) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:28:08 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f0000000180)=0x5, 0x4) 00:28:08 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) pread64(r0, &(0x7f0000000080)=""/46, 0x2e, 0x3) [ 1356.759284] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 00:28:08 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 65) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {0x0}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:28:18 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(r0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x8, &(0x7f0000000200)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_open_procfs(0x0, 0x0) removexattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)=@known='user.syz\x00') openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:18 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/198, 0xc6}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/141, 0x8d}], 0x1, 0x0) ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000440)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) process_vm_readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/160, 0xa0}, {&(0x7f0000000540)=""/179, 0xb3}, {&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000740)=""/79, 0x4f}, {&(0x7f00000007c0)=""/233, 0xe9}], 0x6, &(0x7f0000000d80)=[{&(0x7f0000000940)=""/219, 0xdb}, {&(0x7f0000000a40)=""/238, 0xee}, {&(0x7f0000000b40)=""/35, 0x23}, {&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/245, 0xf5}], 0x5, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:28:18 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {0x0}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:28:18 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000002c0)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x63, 0x61], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x32, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r10, r8) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x4}, [{0x2, 0x0, r4}, {0x2, 0x4, r6}, {0x2, 0x2, 0xee00}], {0x4, 0x2}, [{0x8, 0x0, 0xee01}, {0x8, 0xb, 0xee01}, {0x8, 0x5, r10}], {0x10, 0x3}, {0x20, 0x2}}, 0x54, 0x1) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r11, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:28:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) fcntl$notify(r1, 0x402, 0x80000001) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:28:18 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) rt_sigaction(0x31, 0x0, 0x0, 0x8, &(0x7f00000003c0)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x800, 0x103) r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = mmap$IORING_OFF_SQES(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x8, 0x1010, r1, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r1, &(0x7f0000000080)={0x4000, 0x1a2, 0x4}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x100000000, 0x55f080) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) dup3(r3, r4, 0x0) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) fcntl$setlease(r1, 0x400, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c651e4cba70d200"/30]) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x204c02) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ppoll(&(0x7f0000000280)=[{r5, 0x2482}, {r6, 0x1}, {r7, 0x9131}, {r0, 0x1118}, {r0, 0x30}, {r1, 0x1}, {r0, 0xc061}, {r0, 0xc}], 0x8, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0x7]}, 0x8) 00:28:18 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) readlinkat(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/193, 0xc1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:28:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 66) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1366.215302] FAULT_INJECTION: forcing a failure. [ 1366.215302] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.216318] CPU: 0 UID: 0 PID: 85889 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1366.216333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1366.216340] Call Trace: [ 1366.216344] [ 1366.216349] dump_stack_lvl+0xfa/0x120 [ 1366.216370] should_fail_ex+0x4d7/0x5e0 [ 1366.216386] ? __kernfs_new_node+0xd3/0x870 [ 1366.216398] should_failslab+0xc2/0x120 [ 1366.216410] kmem_cache_alloc_noprof+0x5f/0x470 [ 1366.216433] __kernfs_new_node+0xd3/0x870 [ 1366.216448] ? __pfx___kernfs_new_node+0x10/0x10 [ 1366.216463] ? lock_acquire+0x15e/0x2f0 [ 1366.216476] ? kernfs_root+0x23/0x2a0 [ 1366.216487] ? find_held_lock+0x2b/0x80 [ 1366.216504] ? kernfs_root+0xee/0x2a0 [ 1366.216515] ? lock_release+0xc8/0x290 [ 1366.216527] ? lock_is_held_type+0x9e/0x120 [ 1366.216547] kernfs_new_node+0x13c/0x1e0 [ 1366.216564] __kernfs_create_file+0x55/0x360 [ 1366.216583] sysfs_add_file_mode_ns+0x21c/0x440 [ 1366.216604] ? __pfx_slab_attr_store+0x10/0x10 [ 1366.216624] internal_create_group+0x571/0xeb0 [ 1366.216643] ? __pfx_internal_create_group+0x10/0x10 [ 1366.216663] sysfs_slab_add+0x188/0x210 [ 1366.216682] do_kmem_cache_create+0x235/0x5a0 [ 1366.216702] __kmem_cache_create_args+0x20f/0x360 [ 1366.216715] ? p9_client_create+0xd52/0x11b0 [ 1366.216729] p9_client_create+0xdfc/0x11b0 [ 1366.216746] ? __pfx_p9_client_create+0x10/0x10 [ 1366.216764] ? trace_kmalloc+0x1f/0xb0 [ 1366.216776] ? legacy_get_tree+0x109/0x220 [ 1366.216791] ? vfs_get_tree+0x93/0x340 [ 1366.216806] ? lockdep_init_map_type+0x4b/0x240 [ 1366.216820] ? __raw_spin_lock_init+0x3a/0x110 [ 1366.216839] v9fs_session_init+0x1df/0x17a0 [ 1366.216852] ? do_raw_spin_lock+0x123/0x260 [ 1366.216868] ? find_held_lock+0x2b/0x80 [ 1366.216885] ? __create_object+0x59/0x80 [ 1366.216900] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1366.216915] ? __pfx_v9fs_session_init+0x10/0x10 [ 1366.216928] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1366.216942] ? __create_object+0x59/0x80 [ 1366.216957] ? __kmalloc_cache_noprof+0x369/0x470 [ 1366.216974] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1366.216999] v9fs_mount+0xbc/0x9e0 [ 1366.217019] ? __pfx_v9fs_mount+0x10/0x10 [ 1366.217035] ? cap_capable+0xdb/0x3b0 [ 1366.217058] ? __pfx_v9fs_mount+0x10/0x10 [ 1366.217073] legacy_get_tree+0x109/0x220 [ 1366.217091] vfs_get_tree+0x93/0x340 [ 1366.217106] path_mount+0x122f/0x1d70 [ 1366.217118] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1366.217139] ? __pfx_path_mount+0x10/0x10 [ 1366.217150] ? kmem_cache_free+0x2a1/0x460 [ 1366.217166] ? putname.part.0+0x11b/0x160 [ 1366.217180] ? getname_flags.part.0+0x1c6/0x540 [ 1366.217196] ? putname.part.0+0x11b/0x160 [ 1366.217213] __x64_sys_mount+0x27b/0x300 [ 1366.217224] ? __pfx___x64_sys_mount+0x10/0x10 [ 1366.217242] do_syscall_64+0xbf/0x360 [ 1366.217260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.217273] RIP: 0033:0x7f6852067b19 [ 1366.217282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1366.217293] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1366.217305] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1366.217313] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1366.217320] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1366.217327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1366.217334] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1366.217351] [ 1366.294917] SLUB: Unable to add cache 9p-fcall-cache-538 to sysfs 00:28:18 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000140)=@v3, 0x18, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) 00:28:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 67) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:18 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:28:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) renameat2(r2, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000002c0)='./file1\x00', 0x4) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:28:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="92546f40000000002c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x8) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000580)={{r0}, "4b56bae36d8c65542ca1805b60b89f5555ba29961cff563ef91bc81f7c1b9abb5ec121bb4ec6161ee4d0cadae9e222948f2fd97297dc21a180af35e95c92ecf9d7ba9b584c5f056371154ac17c2ae747bceedba55140887ae10efac17a73961101b274a3220e371805fce7174c6ea3e73335fe40493cff178e6a02f44f075ffa5e93f48c3554bfe8da145b82502a86bdb53ccb35117918ae9ef859d54397b1ae07b5a5b7669b8c55d95fda66aecd70889a5d256f4db314fb363bd1fb9a1b34407d047f9e0edd0b1636a430898ba13f35cfebe0bc6ff9a863149bf0ec2ae449165a731c67459f5cb1301a3f7c786a3b698aa685c2c84f7f0c3239ac3fab213d6ab4ba3f41d15579e7584ca743a9479275f7ff10cc592d2a70b8ed486d678b4a9659f0142b322e19a5a1c0faaddfca3a0ebcfff3914598147d26a3b07e9b5d199802a9b40427ba3682447e5b548e50604c304ed11db07e11a2344380232f06421241f17c1547a469878bf3e8f217c5aba6db7da5bb646be11d437eb117a2584b441f260a7c0f09b3bdd594c3cb5b8d6aa525f99424a2d4fe260fbc0a05704faef459525d6b1fb61002ed9c7b945d480b7dbe04ad651f94df7b15e4bcbc30c058a511afeaeb96f2efbfd2c3561a0140c584f1a68ad81d6fde89db7764a1f4b804a503ac6dcda5510c5f8abe8517071b74352f72e57c166e14f3fa9ec0c23bbdf8e9b28b1c17f646024362d6470b486d5f44e6088f9a81f552160f84987a308c3d8d55f6590d05033e9cb55ab08ac7b41fae90069dd70767a7efcdb504d175294b4af6738fc705870439ab40c027a2d86fe03c0d380f37a96e318c7821885dfa8baca3ea323faa16d23d44b49fe1dccf5c98cc6a8899149ee262a25312650db2810a67fc38f4827a89c6ee0d599bf9c4edda73f998a25830ab336c0a7d205e47864260c052e084a7386f3c597e863057976ae335f7aeaca731f110e75ef507f3590c2f33a8d07457ace578fcfb082bd3a78cdb10f0332795097d29d5b8a621603a2417e532bf2ddc57b99e36fab4cb7b76bae1cfe17e46be00aa58e394c8aeb9c97cead4294b18a3c4ed53d4046f8fab469347d7fb69ca0b42387e33d2e2267daddd4966a69e778c0c89bb3f0d241c70c20d7836b2c906ad675237a547da6f11ca7922ad6de3776419d8090d327c3cb192d6f17c35571685933773577f6c48e043239b7b4e0965b191c77d33bccbcfef6f83abb3b78c6cd4868b2b8d22076c2766b588e096bbc72e4483239d00f13048c03e0a5a8e7d8d96f8b06a9e8bf4f8125cef8428fdc05c8fb2f0b2c85f0c71bf94b69131de025f964a6cb3bc7cad8d726ad85c5f4a3f52152fbce4f9da75bab3993589d5ee0c3b5575ef6329139d607717c6b2e68cff3ddb53df11eda013338b055f1dab0ad5932c026675a83c6b047970d00d3e3b013557c1ee47d377f111b9378781983949dff71fd9d10f91342fe851584331c3915cbaca14fcd54dd322ec019e83d33fc30d5616e7011fe002dd2115c5bae503581b130df111bdbd4ff6e446f9ec072984518b571376cacf6e3a359b44620d932c9e19c9f60eba63c8d9a825292c2a15cfffb8c7a04b16aeed580d7cc47905c1bd8fab703ce5db18eabb8cd5f6bb26b89e226f1d1239286f761a7c93b7b19921940592d0a3f02ac62ecc67f399fcbc383569cbc03e69d351bc07fc6b38a1c371881932d38f21529e587de90a3743e4f95fdd3578d20ff65fe8283cbd0031c2c97086c51c63fdbdc50c624d518bc04b88e52fe80fbfe98f0eff5bbacd6520708c8f7dcb9b3fc0f32f6cc39ce4530505ece7a96648d2d6a5c87fe56ac566ba2968aea08bdc97d5cc17bd07d6752d683365eb276637f4eab57c6f335c111984b6926c9f650fb41efbd4ac7e53dcf6949c644a171cbe66d4a5866b08bf6030ce155241271678abe77b395f1980c8e31c5d775e37e051472ae09c894687856e8fd2c98d5c0b4282e0593acb5d1a1bf5fb2ccec76af6fda8e22db687fb8606f7a329092f023b48261f6ca4ac28ad538433e6f0381a99c944fb70970e0e0f8b8e144ac59de6fa923e72259f21ab767f16ec594fdd5c9fbdff1d445a0b7fe39e9318d99fc18d22b89b6f10e88f30e97ac75bc04056077f76860289b1bd1fbf3dd5b3bd0ce575e2d9c187499c7fbef0715e97fe73ec26c8384ffb3da1bcdf2d7540b350443efcd9222cccb01b83327f9f4f3ca935a403157b40c1e96a78341f9d2813f533a2c67a4549e28ac9affb39bc2ec58f8c2698a2cc855d5a66d825ee24e935cf9d99a1d90a063a4c9797254047e2c9085e313946ef4aba79b068486bd90b15dfeed31802f54e1d77b4bf7648260941ce95d7e473f243a2c15c17ec73dfd5daff85eadb78e70f659f7dac6b4180f2ffccad5bba5a4fbff0efdadfe1c4f1b591c7128f51e38fd8ff5e3870b73339b7b92a1ac456ad9ade552112f82e283bf91bad16de88cddca3da352e169755d95abad077c231aa34f2c3df87030bc3a02b617c5545e8d82366b1c8b77e2412583991ebf375b035214295d805a37c2929122209868c1ef9585aa29a951ea6ea64b825acaf227375ab32232b9844c0f07fd111051abc691f7978fd86f6ccc685aa5e739cda638bd6392fd8f08a256ac99fdc9f521f09f134e18d798cc72975094129ee21b747ffeaabe0ac03cc7c01eaa6020b31b6ffbd15dec516d136b83fbd99413f7aca163950f7e00499e7e81b8761aabfd43b353df428103e766dda6bc86a74723e499c0699dfbcb5eb0a866bcc724e08510ed5713305373b2a4ff460a9a70d1308264a70a32bb9b99be87ef83da2c98983b877d098307b3790ec70124a1d3625ea7481d58675bed190bd299c9e4d7d84c3007afe79d1545e688bafb05e48d41252b56fdeb21c1fd748d7c68dafa16c835789d9704374946835f9b119fc3f156c71e6e32bdbf9759efca51502457d7c92c56d3c442c101b430bbac92d3ab8db92515c223cdfa57b01af44168b035b5e1b7f814f456597c17874704815db2837db123e45d22a84ddca1a49a757ea4af4793360b32022167791c787fffba139e3ac41d5b9143956a0ae814a6ad7dde5ac37731c91907e99d96acd49e221d8b6273a4bfad4d80a7a856ba54f92c88fb19f440fd8eb7611a019094c822fc6b3af3b566683471c617dbfb0eb93976039b5bdec02dc3e4c66f248316d5b5fc61e46e4981f5a9deac2dbd23c93a7d8e3f220f835aad550fabc96da5d4e3c296b1d914c4a311fbad44d39c24339486c74a114d99b25e107536d8a1b7e0fb98ef9c7675a979e1cdf870a21cab57a2d28da55f55bc282506fb0087fd3abcc123d6adca0374d0a879ee7781fd4faca0fc68dcd661958e79644fa5f465643b92d6828e43ced4a0ff5318567a72c9a7d17ec713eee4a40629e5c3f2a8426785f39f091bba26fa12955d429cb543aa32a0c47ef7b724ae8c6fe3fd98db15426a54e10f0823b594911d6a867caad72c9f4f3b3abc1b555795a55ec09ba97f31233cfc49c0ab9a0c1fb57d7d621f24c1cd5c9841a6cb5ba6d0c65405dfa269491e7a3d254f97bf437b718158f4346f6e2185576e728c906b8d354979212d31a49a96d13a14d6792377f47dcead9784bc668d4a8f5de6c999d580791eeda8474ed922da8161caf27e2c16f51aa7e2743b7678eb1cc9c90f0dd5015ec78b786585aa2eb3f72f78b1b46370425f626c6506469f6afdbb85924fb4d848518b9cc7e3d857abf24d5a2796b0d5774f7177f1d9f1b7fbb18c951c045d3e86575fafb1061932f31e9b1545abc2745ca3838a022231d753c350f3835340e659a0139e698455df33982a756059c45e83a1f7f09b3036bbbda144ce157d9ca611c0dfe8b26e73a3d088ed3f89067b79f27168d98610e5cda26aee6fe33d321af77faec998314a3d4c525545061fc43c67a79b39bd515db527bb03aa6b2675448a894281cb1c42bfb774f9e4f0452b3a82ca20c973fbf983c36a253edaba10f6bbded8af2829848989a5ca41ac3ff20a023f26b99345f802a8de2cbd99c29be00bbb79cc758b112c755d01280281038edffaf5389c2ec027ace3292f0c1c61b87fee28c01239ea19262cd6c04a3561b0859d2517c10b786f2ee6138af3d9e4c14aae28133fd2d58a979828024e85e61b36f7096c4b18a8fbc0986df0d16dd0d96f6d2b70c4bee355ae018d547853fbbad4d13200ee16254238107e8c0aeed328ae39a65d64d6c30d3e4be503a2b66cefce783b52b25a4ff27ae477d1e39f20614de519ab410c1484c6ce151559f5c29f5d8434f263cae20ebc440989f3928fb83a0082b07c27a63ec43feeb93efc43efdaf73429be6a5b7dea73804f4c85ea79fb1e73900aa728e5dd8405bf3aea6f9e741dfe0d70f5762cdb307115f88d06561fd1e19ff2b1c03537e875dc0105342d48ffffd93a9710789ae7e991938fc64d08011836dd26c5a151c1c992427400df872d75bd8c78c724a88403905a2fc5dadf63357c669a3e52f080a115f91ff0d9ebf2909c5eb65bc09761512710239734e2b27f6ef1e5375ce2f0112fa534de1328c1c980770b5e5e5369871fa43d2c341c607e09e4c66dc144856a9612cbc44a781fb1a837568ebebecae0f117ffe4f3471e17fc58db9d33010609bd7da6038d04c17f1bcd72d3684817c19868aaec2c4f6122ae76c9aa1596d6b979d3b7e1135a21f11df0b2d363d008fdf436cba265a0aaefe688220e3c06d7b31945c80fdcfb53f7f9a0e064db40bbf3f8ec7cf5671e12e7863ebb32c27f20757735ccb96dfdbb1b9ee15076e7f03b82d1028659ceb69b81cae57d56c7ed84dcd9e6beca491728ca9c22d6ba891b86f0945c637accbe5fccadd7010240ca62d5bfd05c39c81a062cd8b26e9cd7311d3e4ad894f00c9565bf16277fe2c11d988953b813a2773fe7eb1b9db20ce4401c2f2d3c06fd5df15191dbca6114747b3a29c15505fdb1c131883f056d259cb768006e70078d1ef89032e17b1ce12646d6cd2f76fe0b1bfa408a630501c76ddb7ef6db2b4e7f72fa204233dab0d88179d57c49fc5455c0fd717210c49c1bd2361552c468a6d08f4d008f65e4c3b011afb51ca0baa3bb60ddebfda240d81479108ea996b876294dc2150f38f5c5752ba965d15dfebf1c52eb53054b5110b9ef0688aa6909b574e37e807b97b6979f3b17def4c1cd466624c5eac5402540fb313b7dd4196fc138b5678ab8d5435bbc881d11462b8ebc01fedabc5d3da34d3ddd713b78ce3cd6a249a9fb962f8a72a3d4cfa6f94f401cb248fc953ef9bd37e87db8f73a2ce37e50aa78581ec84253636ea619be71a14ce6747b770f1e548185bcf87eda83e11ae0cd14f6adeec943c0261d687e097e60d17901993c8197d6dd7887a80ded530e32fdce69bf7c484c6eba5decae9c100961a844b3b0c93f390f2beaf0f52087289862216b7b66d7326d6067a0bb75803cf1589f0ea8c6cc63826edc80a62490af96f28ef5e8568dde0b258f1a4c273cbc033e0f4130ccabd93dcd437b0e49f8eadb5bc40df17c14fb3650b5b0028e20fac8df057f9e7c4a8a0b7f4415d33b8d6fac16cfa5c15d62338cf218ee9729d16fae24195f8469c5a8370d44111a32a884231001b2329bf8d61fad0df6b2be9ae6449004c59a8770016a94005287fbc599db68d48e50246703ffd60285d110dbadc777c342f4419efcdc7ee596be0ae51c19a4d44824d62f56c2501fce2eaad01ae2fac341df604d6"}) openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:28:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200200, 0xc) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedsend(r1, &(0x7f0000000300)="58efd020b5e5e13f3ce75a040bdc2029dda3e8d199ae39447fca268425a3d185bbd5b22641f2a976fed8f414a4950269f71a26241393660223b7b818cd29c7760174eef8ba0b44f8a7baf2b5a63e7edf1535e60b836d656b9f3e3730e9ee49fe5f84c186a3a585300d763f01fca380e4fb90fed05192620fa8a9b8612f1991114b045b966d2465fc0f1563fd506d2244d36a598858c3f65afb0a83cac99c15daac8c531b192b7e1fac689f792c316146595f4a39f54f7e5618e51e97a0d882a2cbb23c73cdedea904d06a5aa9dc379f213ed67387fbbf40ab8e0d57384b46d7384e4", 0xe2, 0x5238, &(0x7f0000000280)={r2, r3+60000000}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000240)={{r4, r5+60000000}, {r6, r7+10000000}}, &(0x7f0000000400)) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='./file0\x00') 00:28:29 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}, {@fscache}], [{@fsname={'fsname', 0x3d, '\''}}]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fsuuid=f\x00\x004\x00d\x00\x00-\x00\x00\x00\x00-6da4-3\x00\x007-9db16\x007\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x1ff}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2cfd31290ab3cfbe3d2c00"]) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x2, &(0x7f0000000580)={'trans=unix,', {[{@cache_loose}, {@access_any}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@cache_loose}, {@uname={'uname', 0x3d, 'noextend'}}], [{@dont_hash}, {@euid_gt}, {@appraise_type}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x61, 0x37, 0x36, 0x38, 0x39, 0x39, 0x63], 0x2d, [0x32, 0x7, 0x38, 0x61], 0x2d, [0x64, 0x0, 0x6b, 0x65], 0x2d, [0x3a, 0x31, 0x30, 0x32], 0x2d, [0x63, 0x33, 0x39, 0x35, 0x31, 0x38, 0x63]}}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}}) fremovexattr(r2, &(0x7f0000000180)=@known='trusted.overlay.nlink\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x9, 0x2) openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) r7 = signalfd4(r2, &(0x7f00000006c0)={[0x9]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x8, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, 'trusted.overlay.nlink\x00'}}, {@cachetag={'cachetag', 0x3d, 'access=any'}}, {@version_9p2000}, {@posixacl}], [{@euid_lt={'euid<', r5}}, {@obj_user}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, 'dfltuid'}}]}}) 00:28:29 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/115) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:28:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x9, 0x2) r2 = socket$inet6(0xa, 0x806, 0x5) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000340)=""/42, 0x2a}], 0x1, &(0x7f00000003c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x50000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="1d41986ad80000000000d36e00f9a5", @ANYRESHEX=r2, @ANYBLOB=',loose,nodevmap,access=user,debug=0x0000000000000002,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',mask=MAY_APPEND,seclabel,\x00']) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}]}}) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:28:29 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) 00:28:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:28:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 68) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1377.763000] 9pnet_fd: Insufficient options for proto=fd [ 1377.775346] FAULT_INJECTION: forcing a failure. [ 1377.775346] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.776442] CPU: 0 UID: 0 PID: 87029 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1377.776458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1377.776465] Call Trace: [ 1377.776469] [ 1377.776474] dump_stack_lvl+0xfa/0x120 [ 1377.776498] should_fail_ex+0x4d7/0x5e0 [ 1377.776514] ? __kernfs_new_node+0xd3/0x870 [ 1377.776527] should_failslab+0xc2/0x120 [ 1377.776540] kmem_cache_alloc_noprof+0x5f/0x470 [ 1377.776563] __kernfs_new_node+0xd3/0x870 [ 1377.776577] ? __pfx___kernfs_new_node+0x10/0x10 [ 1377.776592] ? lock_acquire+0x15e/0x2f0 [ 1377.776606] ? kernfs_root+0x23/0x2a0 [ 1377.776617] ? find_held_lock+0x2b/0x80 [ 1377.776634] ? kernfs_root+0xee/0x2a0 [ 1377.776645] ? lock_release+0xc8/0x290 [ 1377.776657] ? lock_is_held_type+0x9e/0x120 [ 1377.776677] kernfs_new_node+0x13c/0x1e0 [ 1377.776694] __kernfs_create_file+0x55/0x360 [ 1377.776714] sysfs_add_file_mode_ns+0x21c/0x440 [ 1377.776735] ? __pfx_slab_attr_store+0x10/0x10 [ 1377.776756] internal_create_group+0x571/0xeb0 [ 1377.776774] ? __pfx_internal_create_group+0x10/0x10 [ 1377.776795] sysfs_slab_add+0x188/0x210 [ 1377.776813] do_kmem_cache_create+0x235/0x5a0 [ 1377.776834] __kmem_cache_create_args+0x20f/0x360 [ 1377.776847] ? p9_client_create+0xd52/0x11b0 [ 1377.776862] p9_client_create+0xdfc/0x11b0 [ 1377.776879] ? __pfx_p9_client_create+0x10/0x10 [ 1377.776896] ? trace_kmalloc+0x1f/0xb0 [ 1377.776909] ? legacy_get_tree+0x109/0x220 [ 1377.776924] ? vfs_get_tree+0x93/0x340 [ 1377.776940] ? lockdep_init_map_type+0x4b/0x240 [ 1377.776954] ? __raw_spin_lock_init+0x3a/0x110 [ 1377.776973] v9fs_session_init+0x1df/0x17a0 [ 1377.776986] ? do_raw_spin_lock+0x123/0x260 [ 1377.777007] ? find_held_lock+0x2b/0x80 [ 1377.777023] ? __create_object+0x59/0x80 [ 1377.777039] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1377.777054] ? __pfx_v9fs_session_init+0x10/0x10 [ 1377.777067] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1377.777082] ? __create_object+0x59/0x80 [ 1377.777097] ? __kmalloc_cache_noprof+0x369/0x470 [ 1377.777114] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1377.777140] v9fs_mount+0xbc/0x9e0 [ 1377.777156] ? __pfx_v9fs_mount+0x10/0x10 [ 1377.777172] ? cap_capable+0xdb/0x3b0 [ 1377.777192] ? __pfx_v9fs_mount+0x10/0x10 [ 1377.777207] legacy_get_tree+0x109/0x220 [ 1377.777225] vfs_get_tree+0x93/0x340 [ 1377.777240] path_mount+0x122f/0x1d70 [ 1377.777253] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1377.777274] ? __pfx_path_mount+0x10/0x10 [ 1377.777285] ? kmem_cache_free+0x2a1/0x460 [ 1377.777302] ? putname.part.0+0x11b/0x160 [ 1377.777316] ? getname_flags.part.0+0x1c6/0x540 [ 1377.777333] ? putname.part.0+0x11b/0x160 [ 1377.777349] __x64_sys_mount+0x27b/0x300 [ 1377.777360] ? __pfx___x64_sys_mount+0x10/0x10 [ 1377.777378] do_syscall_64+0xbf/0x360 [ 1377.777397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.777410] RIP: 0033:0x7f6852067b19 [ 1377.777420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1377.777431] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1377.777443] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1377.777451] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1377.777458] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1377.777465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1377.777472] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1377.777490] [ 1377.806335] 9pnet_fd: Insufficient options for proto=fd [ 1377.813478] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1377.832620] 9pnet_fd: Insufficient options for proto=fd [ 1377.848508] 9pnet_fd: Insufficient options for proto=fd [ 1377.903612] SLUB: Unable to add cache 9p-fcall-cache-545 to sysfs 00:28:30 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:28:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) sync() 00:28:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 69) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:30 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) r2 = dup(r0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x8) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}, {@version_9p2000}, {@cache_loose}, {@dfltgid}], [{@obj_type={'obj_type', 0x3d, 'noextend'}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:28:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:28:43 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) creat(&(0x7f0000000140)='./file0\x00', 0x109) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4004010) 00:28:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {0x0}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:28:43 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2010098, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e732edd66acbd0ebc4d6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fsuuid=f\x00\x004\x00d\x00\x00-\x00\x00\x00\x00-6da4-3\x00\x007-9db1\x00\x007\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6e6f657857c774656e6c2c00"]) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='schedstat\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1200068, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}, {@version_9p2000}, {@mmap}, {@access_any}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, 'net/arp\x00'}}, {@cache_none}, {@loose}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@subj_type={'subj_type', 0x3d, '-\xda^(}&:]'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:28:43 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r0, @ANYBLOB="017766646e6f3d034381bdaf548e426f9137d653fef374513e9eaf9fcbf8fd6c560d9c15f60ea3ca4d407d8ab016f9068ffd901b9d28ac36fb10583fd28fc5099229cfc76c3e1dac923613fd59610d1261baa845b0", @ANYBLOB="88acb6767a0693827aed8a8ad9e2c54b6e42e38399f1dcd31a17d3d372004cf197a80171cd358db1f5d1f8fadfe903517017a604d9a7fb700c", @ANYBLOB="2c64656275673d3078666666666666666666667027ec92d2fea63263636573733d757365722c616669643d3078303030303030303030303030303066662c6163636573733d616e792c6673757569643d66000034006400002d000000002d366461342d330000372d39646231370037002c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='./file0\x00') r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x7554, &(0x7f00000004c0)={0x0, 0x3d12, 0x10, 0x1, 0xbc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000640)=0x0) clock_gettime(0x0, &(0x7f00000045c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001d40)=""/165, 0xa5}, {&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000001f00)=""/113, 0x71}, {&(0x7f0000001f80)=""/23, 0x17}, {&(0x7f0000001fc0)=""/168, 0xa8}, {&(0x7f0000002080)=""/135, 0x87}], 0x6, &(0x7f00000021c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002200)=@abs, 0x6e, &(0x7f0000004480)=[{&(0x7f0000002280)=""/231, 0xe7}, {&(0x7f0000002380)=""/193, 0xc1}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/4096, 0x1000}], 0x4, &(0x7f00000044c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x2, 0x10000, &(0x7f0000004600)={r6, r7+10000000}) r9 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x5, 0x0, r10) syz_io_uring_submit(0x0, r5, &(0x7f00000046c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r8, 0x0, &(0x7f0000004640)="1451c08c55f0a4daadb9ac5551ca9aa2568be22e06df6c94fb02d2d78e4f7bc68bb2629ddb346411eb1a812d7f528e39dc897ccf1691cd3269204d54cf990ee955011d0e25da0c5f29536928041cfc605b39ea157f", 0x55, 0x12140, 0x0, {0x0, r10}}, 0x2) poll(&(0x7f0000000300)=[{r4}], 0x1, 0x8) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000400)=""/146, 0x92}, {&(0x7f0000000580)=""/183, 0xb7}], 0x2) openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:28:43 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 70) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x1000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)="86473d4ec7d8eb9bbf582ab0c6357b337311f37ab299e6f29b03d23e7f8d411bc5a8ef8270381de95db874706fb6122f5cf000bb68a6d0bacbd030adef5926a8c6266d5508e5fb7ab12c1076548a1a9ea7a1c402f557863e38e46d7add4128e56dbd509f27058cc4eb0cde66e1e6eb1968e1319a682b9d331e6a4596c364c7a7e2b1f80bf4ecba0d4b19d7fbfb670fbf00fd6ac023c3029595b2a862a504f4cb", 0xa0, 0x102000000000}], 0x800008, &(0x7f0000000480)={[{@huge_within_size}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x8}}], [{@euid_lt={'euid<', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'uid'}}, {@obj_type}, {@smackfstransmute={'smackfstransmute', 0x3d, 'fsuuid'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@obj_type={'obj_type', 0x3d, 'trans=fd,'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000005c0)='.pending_reads\x00', 0x101001, 0x100) 00:28:43 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x10002, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d9326af51824d6a83615f0000000074aa4b15f82fb80b8460a95b718ad605b592ad313fbd2cc00a41f4231fc87d05945b0337c69a857b990de0a3b123b5344bd9747c6c08207637e96930b29ce835f664e5d03bfa9c58bb44e3ea8fa66d826e417efb905b70564b7f4fa1cc755f9efbd1d91f8ed50200000000000000de69be3ffcbf836a49472a0e280e39d2eeab8adbefeb0cb0f687e6121aa9aba877e6b3", @ANYRESHEX=r2, @ANYBLOB="ac00b5ea19de939f99fbdf0a4cb47355014098bd23e6c3356bef57ac7cde494b975380c76c7b522146f94008086372e451854d11e29bbb49e60bc8165d508dbe1da2b2ad32b00c2a161e4e4da5a1433bd7f1da5b33ca69dbffbc2547ae972ee951835fbbfa3a809fe0ee435732e4a60553937a49a5c6169aec95b934c958d4e7326f91ebd427c8"]) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) open$dir(&(0x7f0000000180)='./file0\x00', 0x101040, 0xd0) getpeername$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r4}], 0x1, 0x8) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000380), &(0x7f00000003c0)={0x0, 0xfb, 0x10f, 0x1, 0x7, "c7d98008edf4cc1f91e3fdcec9c11e03", "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"}, 0x10f, 0x1) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x84, 0x0) close_range(r0, r5, 0x2) poll(&(0x7f0000000300)=[{}], 0x1, 0x8) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000500)={0x0, 0x0, 0x8, 0x6e33}) r6 = syz_open_dev$hidraw(&(0x7f0000000240), 0x3ff, 0x4102) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='wchan\x00') fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000300)='[&\\^\x00', &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000280)=0x1) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1391.531531] 9pnet_fd: Insufficient options for proto=fd [ 1391.561646] 9pnet_fd: Insufficient options for proto=fd [ 1391.585885] FAULT_INJECTION: forcing a failure. [ 1391.585885] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.588205] CPU: 1 UID: 0 PID: 88171 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1391.588238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1391.588251] Call Trace: [ 1391.588258] [ 1391.588267] dump_stack_lvl+0xfa/0x120 [ 1391.588308] should_fail_ex+0x4d7/0x5e0 [ 1391.588339] ? __kernfs_new_node+0xd3/0x870 [ 1391.588362] should_failslab+0xc2/0x120 [ 1391.588386] kmem_cache_alloc_noprof+0x5f/0x470 [ 1391.588431] __kernfs_new_node+0xd3/0x870 [ 1391.588460] ? __pfx___kernfs_new_node+0x10/0x10 [ 1391.588490] ? lock_acquire+0x15e/0x2f0 [ 1391.588516] ? kernfs_root+0x23/0x2a0 [ 1391.588538] ? find_held_lock+0x2b/0x80 [ 1391.588572] ? kernfs_root+0xee/0x2a0 [ 1391.588594] ? lock_release+0xc8/0x290 [ 1391.588617] ? lock_is_held_type+0x9e/0x120 [ 1391.588657] kernfs_new_node+0x13c/0x1e0 [ 1391.588691] __kernfs_create_file+0x55/0x360 [ 1391.588729] sysfs_add_file_mode_ns+0x21c/0x440 [ 1391.588771] ? __pfx_slab_attr_store+0x10/0x10 [ 1391.588812] internal_create_group+0x571/0xeb0 [ 1391.588848] ? __pfx_internal_create_group+0x10/0x10 [ 1391.588890] sysfs_slab_add+0x188/0x210 [ 1391.588926] do_kmem_cache_create+0x235/0x5a0 [ 1391.588968] __kmem_cache_create_args+0x20f/0x360 [ 1391.589003] ? p9_client_create+0xd52/0x11b0 [ 1391.589054] p9_client_create+0xdfc/0x11b0 [ 1391.589087] ? __pfx_p9_client_create+0x10/0x10 [ 1391.589122] ? trace_kmalloc+0x1f/0xb0 [ 1391.589149] ? legacy_get_tree+0x109/0x220 [ 1391.589179] ? vfs_get_tree+0x93/0x340 [ 1391.589209] ? lockdep_init_map_type+0x4b/0x240 [ 1391.589237] ? __raw_spin_lock_init+0x3a/0x110 [ 1391.589274] v9fs_session_init+0x1df/0x17a0 [ 1391.589300] ? do_raw_spin_lock+0x1dc/0x260 [ 1391.589331] ? find_held_lock+0x2b/0x80 [ 1391.589364] ? __create_object+0x59/0x80 [ 1391.589395] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1391.589424] ? __pfx_v9fs_session_init+0x10/0x10 [ 1391.589450] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1391.589478] ? __create_object+0x59/0x80 [ 1391.589509] ? __kmalloc_cache_noprof+0x369/0x470 [ 1391.589542] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1391.589591] v9fs_mount+0xbc/0x9e0 [ 1391.589622] ? __pfx_v9fs_mount+0x10/0x10 [ 1391.589660] ? cap_capable+0xdb/0x3b0 [ 1391.589699] ? __pfx_v9fs_mount+0x10/0x10 [ 1391.589729] legacy_get_tree+0x109/0x220 [ 1391.589764] vfs_get_tree+0x93/0x340 [ 1391.589795] path_mount+0x122f/0x1d70 [ 1391.589818] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1391.589859] ? __pfx_path_mount+0x10/0x10 [ 1391.589881] ? kmem_cache_free+0x2a1/0x460 [ 1391.589914] ? putname.part.0+0x11b/0x160 [ 1391.589942] ? getname_flags.part.0+0x1c6/0x540 [ 1391.589974] ? putname.part.0+0x11b/0x160 [ 1391.590007] __x64_sys_mount+0x27b/0x300 [ 1391.590030] ? __pfx___x64_sys_mount+0x10/0x10 [ 1391.590065] do_syscall_64+0xbf/0x360 [ 1391.590102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.590126] RIP: 0033:0x7f6852067b19 [ 1391.590145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1391.590167] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1391.590190] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1391.590206] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1391.590220] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1391.590234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1391.590247] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1391.590282] [ 1391.726341] SLUB: Unable to add cache 9p-fcall-cache-552 to sysfs 00:28:43 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400001, 0xc) 00:28:44 executing program 2: perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x10}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') ptrace$getregset(0x4204, r0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=""/250, 0xfa}) perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0xff, 0x0, 0xf7, 0x7f, 0x0, 0x7, 0x50000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x3, 0x7}, 0x200, 0x8, 0x4f8, 0x0, 0x7, 0x1, 0xff, 0x0, 0x0, 0x0, 0x5}, r0, 0x6, 0xffffffffffffffff, 0x8) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:28:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:28:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 71) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:44 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {0x0}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:28:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x8) pread64(r3, &(0x7f00000002c0)=""/83, 0x53, 0xfffffffffffffffd) 00:28:44 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:28:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 72) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:44 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r5, r3) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001880)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xfffffffffffffc93) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r8, r6) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004400)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000000380)=""/172, 0xac}], 0x3}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f0000000580)=""/110, 0x6e}, {&(0x7f0000000600)=""/8, 0x8}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/169, 0xa9}, {&(0x7f0000001780)=""/47, 0x2f}, {&(0x7f00000017c0)=""/41, 0x29}], 0x8, &(0x7f0000004640)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001800000000000000010000000100000011ee4d5d22f4ca5a4bb0aa6ad20cc2ecf3252240b1ba37e9603103b48395", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002b80)=[{&(0x7f00000019c0)=""/102, 0x66}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/38, 0x26}, {&(0x7f0000002a80)=""/195, 0xc3}], 0x4}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1, &(0x7f0000003c80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003d80), 0x6e, &(0x7f0000004040)=[{&(0x7f0000003e00)=""/84, 0x54}, {&(0x7f0000003e80)=""/195, 0xc3}, {&(0x7f0000003f80)=""/122, 0x7a}, {&(0x7f0000004000)=""/61, 0x3d}], 0x4, &(0x7f0000004080)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f00000041c0)=@abs, 0x6e, &(0x7f00000042c0)=[{&(0x7f0000004240)=""/39, 0x27}, {&(0x7f0000004280)=""/7, 0x7}], 0x2, &(0x7f0000004740)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000002851b98a3fd88c31aa331de3e72cf4d1a2c716daad1b2c355aef4ebf62bd90b94298a55cfa7bf626a8788cb25b6e359236d07c0de140da90dde91a43e87af8ac64ea4e5ea2057520ae125a9c3239c51953ed2df7510e2fe670163c843d1be47934e143d4779c2af4f4f642f2bb9c12cc0b7d592124cded29a2c43ea871b9434e5a202e881b488d851c4c26a591521bbb61ddcf4eda0d765b7c2259f84f9c82e650676ca1483fbebd3fbadfa355a7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf8}}], 0x6, 0x40000020, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000004580)={{}, {0x1, 0x1}, [{0x2, 0x2}, {0x2, 0x6}, {0x2, 0xbc9252f76184a328}, {0x2, 0x4, 0xee00}, {0x2, 0x0, r1}], {0x4, 0x2}, [{0x8, 0x7, r5}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x0, 0xee01}, {0x8, 0x1, r8}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, r9}, {}, {0x8, 0x5, 0xee00}, {0x8, 0x4}], {0x10, 0x7}, {0x20, 0x3}}, 0x94, 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1392.250948] FAULT_INJECTION: forcing a failure. [ 1392.250948] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.252106] CPU: 0 UID: 0 PID: 89337 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1392.252122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.252129] Call Trace: [ 1392.252134] [ 1392.252138] dump_stack_lvl+0xfa/0x120 [ 1392.252162] should_fail_ex+0x4d7/0x5e0 [ 1392.252179] ? __kernfs_new_node+0xd3/0x870 [ 1392.252192] should_failslab+0xc2/0x120 [ 1392.252205] kmem_cache_alloc_noprof+0x5f/0x470 [ 1392.252228] __kernfs_new_node+0xd3/0x870 [ 1392.252242] ? __pfx___kernfs_new_node+0x10/0x10 [ 1392.252257] ? lock_acquire+0x15e/0x2f0 [ 1392.252271] ? kernfs_root+0x23/0x2a0 [ 1392.252282] ? find_held_lock+0x2b/0x80 [ 1392.252300] ? kernfs_root+0xee/0x2a0 [ 1392.252311] ? lock_release+0xc8/0x290 [ 1392.252322] ? lock_is_held_type+0x9e/0x120 [ 1392.252343] kernfs_new_node+0x13c/0x1e0 [ 1392.252360] __kernfs_create_file+0x55/0x360 [ 1392.252379] sysfs_add_file_mode_ns+0x21c/0x440 [ 1392.252401] ? __pfx_slab_attr_store+0x10/0x10 [ 1392.252421] internal_create_group+0x571/0xeb0 [ 1392.252439] ? __pfx_internal_create_group+0x10/0x10 [ 1392.252460] sysfs_slab_add+0x188/0x210 [ 1392.252478] do_kmem_cache_create+0x235/0x5a0 [ 1392.252499] __kmem_cache_create_args+0x20f/0x360 [ 1392.252511] ? p9_client_create+0xd52/0x11b0 [ 1392.252526] p9_client_create+0xdfc/0x11b0 [ 1392.252542] ? __pfx_p9_client_create+0x10/0x10 [ 1392.252560] ? trace_kmalloc+0x1f/0xb0 [ 1392.252573] ? legacy_get_tree+0x109/0x220 [ 1392.252588] ? vfs_get_tree+0x93/0x340 [ 1392.252603] ? lockdep_init_map_type+0x4b/0x240 [ 1392.252617] ? __raw_spin_lock_init+0x3a/0x110 [ 1392.252636] v9fs_session_init+0x1df/0x17a0 [ 1392.252650] ? do_raw_spin_lock+0x123/0x260 [ 1392.252666] ? find_held_lock+0x2b/0x80 [ 1392.252682] ? __create_object+0x59/0x80 [ 1392.252698] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1392.252714] ? __pfx_v9fs_session_init+0x10/0x10 [ 1392.252727] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1392.252741] ? __create_object+0x59/0x80 [ 1392.252756] ? __kmalloc_cache_noprof+0x369/0x470 [ 1392.252773] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1392.252798] v9fs_mount+0xbc/0x9e0 [ 1392.252814] ? __pfx_v9fs_mount+0x10/0x10 [ 1392.252831] ? cap_capable+0xdb/0x3b0 [ 1392.252851] ? __pfx_v9fs_mount+0x10/0x10 [ 1392.252866] legacy_get_tree+0x109/0x220 [ 1392.252883] vfs_get_tree+0x93/0x340 [ 1392.252898] path_mount+0x122f/0x1d70 [ 1392.252911] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1392.252932] ? __pfx_path_mount+0x10/0x10 [ 1392.252943] ? kmem_cache_free+0x2a1/0x460 [ 1392.252959] ? putname.part.0+0x11b/0x160 [ 1392.252974] ? getname_flags.part.0+0x1c6/0x540 [ 1392.252990] ? putname.part.0+0x11b/0x160 [ 1392.253011] __x64_sys_mount+0x27b/0x300 [ 1392.253022] ? __pfx___x64_sys_mount+0x10/0x10 [ 1392.253040] do_syscall_64+0xbf/0x360 [ 1392.253059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.253072] RIP: 0033:0x7f6852067b19 [ 1392.253081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.253092] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1392.253104] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1392.253112] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1392.253119] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1392.253127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1392.253133] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1392.253151] 00:28:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000002c0)={{0x0, 0x8, 0x100, 0x20000, 0x0, 0x7fff, 0x1, 0x8000, 0x7, 0x6, 0x400, 0x0, 0x3, 0x8001, 0x1}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000012c0)={{r3, 0x0, 0x2, 0x2, 0x3f, 0x0, 0x8000, 0x1, 0x1, 0x1f, 0x6, 0x401, 0x20, 0x9, 0x3}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) r4 = syz_open_dev$vcsu(&(0x7f0000000180), 0x224e, 0x80) bind$bt_sco(r4, &(0x7f00000022c0), 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') [ 1392.359522] SLUB: Unable to add cache 9p-fcall-cache-557 to sysfs 00:28:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d6171bf43ca5c76eab02609363c68f2451b34f61b469889af31339c924243222b1cd4c41d51ee83c2b0c5c3a2506625831f1f599a8a3077d3036cb8d32d816564417202e598ae73039419c3ede4d9b7e4390a9e84ace335efca4260e6f06ef1f5fb7f67d90f2887969399831aa20e5caa58dec74d99f64fb1c5ab7c109147", @ANYRESHEX=r1, @ANYBLOB="0000000000000000000020d60c55ffada832ba56567cce024b8116a8fcee5d4c7460f19a20b326cd5b2d73474eb7caa2436e6305b3080cae4dff0a6b8d0a349f5ee17d77ebf1537959e57edad63d93acf1a5764984cf37a6846b5f27f487b4f648f64cf7d72366523d3165c9c37452ee8de07c6cda493e8947e88186f4b9d1ee9e7227c6b347d72e145a11f268b1bbd7480da3ed29caaf81126db00175133471d643ead5aba66a36f39c5ee06790c2278cc802a1d9802372000000000000"]) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:28:54 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x8401, 0x0) 00:28:54 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {0x0}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:28:54 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='t=\x00'/15, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fsuuid=f\x00\x004\x00d\x00\x00-\x00\x00\x00\x00-6da4-3\x00\x007-9db1\x00\x007\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x100000001, 0x7, &(0x7f0000000740)=[{&(0x7f00000002c0)="ae1c0da6b3668dc189c4013c5c6caa410e83ee07b2fbde6af3a6", 0x1a, 0x8}, {&(0x7f0000000300)="4bb9ebcb4c3657494e3079b8f34f49b4ecd8f3bc504b9fbf443310081c64ba4466d0eb5b3fa9669deb7bc2aa33c8482d798c497a547e02baadeb05ede375ea4d1f60f441d675cd001ca207ae19c974342bcecf1b9eaad02d97b3b5b93aad24586acf6283cadf4d54eb73eea5060d070b0540357f433fdddcdf770901af2fa3dd49aeb90c2946bc632e7876d1dff62f970d275d541e31bdbd1ddaf146c34cc5bfff18586b4b091383e64e46e9b955c835902489c83aae1f8036dad7ec578cde31ec086951e40741640be6eb01e66e40fbb555e48f39bca8f51fa4c3e190994177826522f903d5fb43695efbe9", 0xec, 0x8c1}, {&(0x7f0000000400)="0beb5a7812a9fb278551eddc900129accdf95d2269c881b6090f6c597b5f9b374c70fcbd2ebd51cc89d2e1c4fb7168dd9c7deba38df35048eaeaceb181132cc69dfe19fe0d70a46f3a45786d8bd7ed209a547e2b7f68649056bca4e704f815b3b8026b9c28496c325525b44082cb88a0c6d8ddc990fd6eb5b5085de78f7d71872f5a2976fd0cde08ca1e4187e2bbeee54f506a83253320b1f11790e65beee174bdf16a6787e5c8a531034a5c81cceb1ce8594506abe8372e54380803adde7d522aa93c00ccb9c6d0", 0xc8, 0x4}, {&(0x7f0000000580)="5afc8f9e8140b0c20a57967e2cd864c2eb73f4bd872567bc9765a7026ea28b97a1f3c60d59321090d065ebf8dbe93c5328c3ec96cb516c94ff131378928f5aa044191cc6f4c5ee4ea2809a1608281a575df6acaa61751406e263f66fa09d429527983458ff01e5843c1f6853c34ca1b4ed2b5b9e2b5578a46bf707f87465e7a1ee4f62ff55", 0x85, 0x8000}, {&(0x7f0000000500)="86b658134035ffba2e384e7da1758fb2502e6cfd0632e5551c98b6e641fea8fc", 0x20, 0xa6d}, {&(0x7f0000000640)="29f91cd94842ce27d8241ad5ec2030d4263643ab8b023639f0a0fc3c6f7008a90bfe107885283163ae74d9947115a1af3dda5cd219781f76bb4a7f0cfac0e5965c86be076b8677bdcba6161d2aa6d3c6cddcff6130c6ae5e6237db06a883f0e066", 0x61, 0xfffffffffffffffa}, {&(0x7f00000006c0)="4ea26c3458055eec2f72cf60c3c1bc555e11a0fe9ff55d559064035147344566aca93bddb50ac15c35a437015bca08bfc450f79ee01d7a2cd36da380590d2299c1029395625c8346dd194c532fd7fe3d1db7d81be1927fc6b4a1cd76bd4f77af3094ba9a1567c4249c14b531cbddb0acdaa9db12fe55a1a0376b99c4814933", 0x7f, 0x8}], 0x8000, &(0x7f0000000800)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, '!].+'}}, {@obj_user={'obj_user', 0x3d, '#&#'}}, {@hash}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, 'rfdno'}}, {@appraise_type}, {@obj_role={'obj_role', 0x3d, ']./'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fowner_gt={'fowner>', r3}}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:28:54 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@cache_fscache}, {@version_u}, {@loose}, {@access_client}, {@fscache}], [{@subj_role={'subj_role', 0x3d, '}#.\\'}}, {@uid_lt}, {@obj_role={'obj_role', 0x3d, 'U'}}, {@smackfsroot}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000100)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) 00:28:54 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 73) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c776606000000", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:28:54 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xa4, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa4}}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x70bd29, 0x21dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4015) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) [ 1402.266228] 9pnet_fd: Insufficient options for proto=fd [ 1402.267720] 9pnet_fd: Insufficient options for proto=fd 00:28:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000180)=""/165) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1ea71738f8158369, 0x40010, r0, 0x16ef5000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='\x00', &(0x7f0000000080)='net/arp\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:28:54 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 00:28:54 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 74) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:28:54 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:28:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') recvmmsg$unix(r2, &(0x7f0000004840)=[{{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000f80)=""/149, 0x95}, {&(0x7f0000001040)=""/203, 0xcb}, {&(0x7f0000001140)=""/236, 0xec}, {&(0x7f0000001240)=""/125, 0x7d}], 0x4, &(0x7f0000001300)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000001340), 0x6e, &(0x7f0000002640)=[{&(0x7f00000013c0)=""/186, 0xba}, {&(0x7f0000001480)=""/142, 0x8e}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/206, 0xce}], 0x4, &(0x7f0000002680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000002780), 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002800)=""/14, 0xe}, {&(0x7f0000002840)=""/114, 0x72}, {&(0x7f00000028c0)=""/117, 0x75}, {&(0x7f0000002940)=""/220, 0xdc}, {&(0x7f0000002a40)=""/244, 0xf4}, {&(0x7f0000002b40)=""/4, 0x4}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/96, 0x60}], 0x8, &(0x7f0000002cc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/2, 0x2}, {&(0x7f0000002dc0)=""/192, 0xc0}, {&(0x7f0000002e80)=""/202, 0xca}], 0x3}}, {{&(0x7f0000002fc0)=@abs, 0x6e, &(0x7f0000003140)=[{&(0x7f0000003040)=""/52, 0x34}, {&(0x7f0000003080)=""/187, 0xbb}], 0x2, &(0x7f0000003180)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000004680)=[{&(0x7f0000003280)=""/158, 0x9e}, {&(0x7f0000003340)=""/225, 0xe1}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/81, 0x51}, {&(0x7f00000044c0)=""/46, 0x2e}, {&(0x7f0000004500)=""/212, 0xd4}, {&(0x7f0000004600)=""/105, 0x69}], 0x7, &(0x7f0000004700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}], 0x6, 0x40002040, &(0x7f00000049c0)) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x5, 0x2, &(0x7f0000000400)=[{&(0x7f0000000300)="7caa58ceab4d6f0a183a329df5e571a736183b40fe3cefb817cc8708a3979c0e04a5a48d2e1dd85e63276a18bb64a2a6ed9e22057803b8ae4c856fa86623d1222472e9ab8ac1180d5d17d02b1f23e7db46a63cb23b4617c3fdc39d79f6f56abd4aa0d6365959ae080258e3a75264bb0d9de0215b05296fcc6d1cfc8f92d0ba29c9fcbc769ca4036f56af8186a22415b28e91fe0f42", 0x95, 0xffff}, {&(0x7f00000003c0)="4a4220bbd4ec0b65eab426acba9136031690efb20c43c36d1e851d8ff7c94638023d6503f506d3d00f472a5cdbedac0de36028633711", 0x36, 0x3}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always,smac,\x00'/34]) openat(r2, &(0x7f0000000480)='./file0\x00', 0x200001, 0x2) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000004c0)={0x0, 0x6, @status={[0x200, 0x8, 0x5, 0x4, 0x2, 0xffff]}, [0x6, 0xff, 0x4, 0xa2fc, 0x1, 0xffffffffffff8001, 0xcd7e855, 0x8, 0x1, 0x3, 0x6, 0x6, 0xaf4, 0x2, 0xffffffff, 0x1a, 0x0, 0x3b, 0x7, 0x8, 0x7, 0x2, 0x1, 0x4, 0x9, 0x7, 0x3, 0x1, 0xffffffff, 0x9, 0xe6, 0x4, 0x2, 0x20, 0x7, 0x8001, 0x5, 0x1f, 0x38, 0x5ec1, 0x80000000, 0x3ff, 0x3, 0x5, 0x1, 0x81, 0x0, 0x403, 0x7, 0xffffffff, 0x39, 0x0, 0x7, 0x800, 0x8507, 0x7, 0xd3a, 0x0, 0x4, 0x1000000000, 0x7fffffff, 0x0, 0x59, 0x7996]}) 00:28:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d6615502f40646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fsuuid=\x00\x00\x004\x00d\x00\x00-\x00\x00\x00\x00-6da\x00-35a7-9db1687d,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7fce7a8c668250dce8a3c8d4eb8f49a77b31e5ffa244f77f3e6d17d074d7d2dcdedae4c154f0f65b64dc2bd25e1e6130569c81fa47c633e32ddd9c7bb355654c7b73637fcc8e2dcfe4af458e8bafa8429106ce79cecac62164201cdbeafb1dca5821833403441a39f8cacedb21f1aa08d6106e30a571efdb586ac106ba9a5f0447ec2b1b6ae47583d8a0427f31f2cf0a5fce12ce8f482ae960de6e530a8ce758c25d657dd2b2"]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYBLOB=',wfd~o=', @ANYRESOCT, @ANYRESDEC]) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) [ 1402.774955] FAULT_INJECTION: forcing a failure. [ 1402.774955] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.776663] CPU: 1 UID: 0 PID: 90333 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1402.776692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1402.776705] Call Trace: [ 1402.776712] [ 1402.776721] dump_stack_lvl+0xfa/0x120 [ 1402.776760] should_fail_ex+0x4d7/0x5e0 [ 1402.776790] ? __kernfs_new_node+0xd3/0x870 [ 1402.776812] should_failslab+0xc2/0x120 [ 1402.776835] kmem_cache_alloc_noprof+0x5f/0x470 [ 1402.776877] __kernfs_new_node+0xd3/0x870 [ 1402.776904] ? __pfx___kernfs_new_node+0x10/0x10 [ 1402.776932] ? lock_acquire+0x15e/0x2f0 [ 1402.776956] ? kernfs_root+0x23/0x2a0 [ 1402.776977] ? find_held_lock+0x2b/0x80 [ 1402.777016] ? kernfs_root+0xee/0x2a0 [ 1402.777036] ? lock_release+0xc8/0x290 [ 1402.777058] ? lock_is_held_type+0x9e/0x120 [ 1402.777095] kernfs_new_node+0x13c/0x1e0 [ 1402.777127] __kernfs_create_file+0x55/0x360 [ 1402.777162] sysfs_add_file_mode_ns+0x21c/0x440 [ 1402.777202] ? __pfx_slab_attr_store+0x10/0x10 [ 1402.777240] internal_create_group+0x571/0xeb0 [ 1402.777273] ? __pfx_internal_create_group+0x10/0x10 [ 1402.777312] sysfs_slab_add+0x188/0x210 [ 1402.777346] do_kmem_cache_create+0x235/0x5a0 [ 1402.777384] __kmem_cache_create_args+0x20f/0x360 [ 1402.777408] ? p9_client_create+0xd52/0x11b0 [ 1402.777434] p9_client_create+0xdfc/0x11b0 [ 1402.777465] ? __pfx_p9_client_create+0x10/0x10 [ 1402.777498] ? trace_kmalloc+0x1f/0xb0 [ 1402.777521] ? legacy_get_tree+0x109/0x220 [ 1402.777549] ? vfs_get_tree+0x93/0x340 [ 1402.777576] ? lockdep_init_map_type+0x4b/0x240 [ 1402.777603] ? __raw_spin_lock_init+0x3a/0x110 [ 1402.777637] v9fs_session_init+0x1df/0x17a0 [ 1402.777662] ? do_raw_spin_lock+0x123/0x260 [ 1402.777692] ? find_held_lock+0x2b/0x80 [ 1402.777722] ? __create_object+0x59/0x80 [ 1402.777751] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1402.777779] ? __pfx_v9fs_session_init+0x10/0x10 [ 1402.777803] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1402.777830] ? __create_object+0x59/0x80 [ 1402.777858] ? __kmalloc_cache_noprof+0x369/0x470 [ 1402.777889] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1402.777935] v9fs_mount+0xbc/0x9e0 [ 1402.777964] ? __pfx_v9fs_mount+0x10/0x10 [ 1402.777995] ? cap_capable+0xdb/0x3b0 [ 1402.778032] ? __pfx_v9fs_mount+0x10/0x10 [ 1402.778060] legacy_get_tree+0x109/0x220 [ 1402.778092] vfs_get_tree+0x93/0x340 [ 1402.778120] path_mount+0x122f/0x1d70 [ 1402.778143] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1402.778181] ? __pfx_path_mount+0x10/0x10 [ 1402.778202] ? kmem_cache_free+0x2a1/0x460 [ 1402.778233] ? putname.part.0+0x11b/0x160 [ 1402.778259] ? getname_flags.part.0+0x1c6/0x540 [ 1402.778289] ? putname.part.0+0x11b/0x160 [ 1402.778319] __x64_sys_mount+0x27b/0x300 [ 1402.778341] ? __pfx___x64_sys_mount+0x10/0x10 [ 1402.778373] do_syscall_64+0xbf/0x360 [ 1402.778408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.778431] RIP: 0033:0x7f6852067b19 [ 1402.778448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1402.778468] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1402.778489] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1402.778504] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1402.778517] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1402.778530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1402.778543] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1402.778575] 00:28:54 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x80, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:28:55 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0xfd, 0x0, 0x2b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) [ 1402.873144] SLUB: Unable to add cache 9p-fcall-cache-562 to sysfs 00:28:55 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x66, 0x7, 0xb6, 0x20, 0x0, 0xffffffffffffff55, 0x2000, 0xd, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp, 0x4000, 0x96f0, 0x5, 0x1, 0x8, 0x80, 0x5, 0x0, 0x7, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r0, 0x8) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:28:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 75) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:04 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000300)=0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x20, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, 'net/arp\x00'}}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@nodevmap}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, 'uid'}}, {@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, 'net/arp\x00'}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r5, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:29:04 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000140)='*\x00'], &(0x7f0000000200), 0x100) 00:29:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:29:04 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x208001, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '\x00z/\x00\b\x00\x00\xd9\x9dopW\x95j~\x1f7\x9d'}}, {@smackfshat={'smackfshat', 0x3d, 'noextend'}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x9, 0x2) move_mount(r4, &(0x7f0000000200)='./file0\x00', r0, &(0x7f00000002c0)='./file0/file0\x00', 0x0) 00:29:04 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x105) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x80, 0x8, 0x9, 0xc2, 0x0, 0x2, 0x80002, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x10, 0x2, 0xb1fa, 0x0, 0x9, 0x240, 0x6, 0x0, 0xb12, 0x0, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00') r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) 00:29:04 executing program 1: r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:29:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r1, 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r6, r4) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {0x1, 0x5}, [{0x2, 0x6}], {0x4, 0x3}, [{0x8, 0x5}, {0x8, 0x5}, {0x8, 0x0, r1}, {0x8, 0x1, r2}, {0x8, 0x4, r4}, {0x8, 0x0, 0xffffffffffffffff}], {}, {0x20, 0x5}}, 0x5c, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x0, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@seclabel}, {@hash}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x39, 0x30, 0x66, 0x36, 0x61, 0x65, 0x66], 0x2d, [0x31, 0x39, 0x38, 0x34], 0x2d, [0x64, 0x36, 0x35, 0x35], 0x2d, [0x37, 0x63, 0x71, 0x35], 0x2d, [0x52, 0x31, 0x31, 0x39, 0x61, 0x39, 0x66, 0x33]}}}, {@appraise}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r9}], 0x1, 0x8) ioctl$BTRFS_IOC_DEFRAG(r9, 0x50009402, 0x0) r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x181e01, 0x0) copy_file_range(r10, &(0x7f00000002c0), r7, &(0x7f0000000340)=0x1, 0x0, 0x0) 00:29:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 76) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1412.210377] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 00:29:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) [ 1412.245789] FAULT_INJECTION: forcing a failure. [ 1412.245789] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.247669] CPU: 1 UID: 0 PID: 91247 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1412.247699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.247712] Call Trace: [ 1412.247719] [ 1412.247728] dump_stack_lvl+0xfa/0x120 [ 1412.247767] should_fail_ex+0x4d7/0x5e0 [ 1412.247796] ? __kernfs_new_node+0xd3/0x870 [ 1412.247817] should_failslab+0xc2/0x120 [ 1412.247841] kmem_cache_alloc_noprof+0x5f/0x470 [ 1412.247883] __kernfs_new_node+0xd3/0x870 [ 1412.247910] ? __pfx___kernfs_new_node+0x10/0x10 [ 1412.247938] ? lock_acquire+0x15e/0x2f0 [ 1412.247962] ? kernfs_root+0x23/0x2a0 [ 1412.247983] ? find_held_lock+0x2b/0x80 [ 1412.248022] ? kernfs_root+0xee/0x2a0 [ 1412.248043] ? lock_release+0xc8/0x290 [ 1412.248064] ? lock_is_held_type+0x9e/0x120 [ 1412.248101] kernfs_new_node+0x13c/0x1e0 [ 1412.248133] __kernfs_create_file+0x55/0x360 [ 1412.248181] sysfs_add_file_mode_ns+0x21c/0x440 [ 1412.248220] ? __pfx_slab_attr_store+0x10/0x10 [ 1412.248258] internal_create_group+0x571/0xeb0 [ 1412.248292] ? __pfx_internal_create_group+0x10/0x10 [ 1412.248331] sysfs_slab_add+0x188/0x210 [ 1412.248365] do_kmem_cache_create+0x235/0x5a0 [ 1412.248403] __kmem_cache_create_args+0x20f/0x360 [ 1412.248427] ? p9_client_create+0xd52/0x11b0 [ 1412.248453] p9_client_create+0xdfc/0x11b0 [ 1412.248484] ? __pfx_p9_client_create+0x10/0x10 [ 1412.248517] ? trace_kmalloc+0x1f/0xb0 [ 1412.248540] ? legacy_get_tree+0x109/0x220 [ 1412.248567] ? vfs_get_tree+0x93/0x340 [ 1412.248595] ? lockdep_init_map_type+0x4b/0x240 [ 1412.248621] ? __raw_spin_lock_init+0x3a/0x110 [ 1412.248656] v9fs_session_init+0x1df/0x17a0 [ 1412.248681] ? do_raw_spin_lock+0x123/0x260 [ 1412.248711] ? find_held_lock+0x2b/0x80 [ 1412.248742] ? __create_object+0x59/0x80 [ 1412.248770] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1412.248798] ? __pfx_v9fs_session_init+0x10/0x10 [ 1412.248822] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1412.248849] ? __create_object+0x59/0x80 [ 1412.248877] ? __kmalloc_cache_noprof+0x369/0x470 [ 1412.248908] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1412.248954] v9fs_mount+0xbc/0x9e0 [ 1412.248983] ? __pfx_v9fs_mount+0x10/0x10 [ 1412.249014] ? cap_capable+0xdb/0x3b0 [ 1412.249051] ? __pfx_v9fs_mount+0x10/0x10 [ 1412.249081] legacy_get_tree+0x109/0x220 [ 1412.249116] vfs_get_tree+0x93/0x340 [ 1412.249144] path_mount+0x122f/0x1d70 [ 1412.249167] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1412.249206] ? __pfx_path_mount+0x10/0x10 [ 1412.249226] ? kmem_cache_free+0x2a1/0x460 [ 1412.249258] ? putname.part.0+0x11b/0x160 [ 1412.249283] ? getname_flags.part.0+0x1c6/0x540 [ 1412.249314] ? putname.part.0+0x11b/0x160 [ 1412.249344] __x64_sys_mount+0x27b/0x300 [ 1412.249366] ? __pfx___x64_sys_mount+0x10/0x10 [ 1412.249399] do_syscall_64+0xbf/0x360 [ 1412.249434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.249456] RIP: 0033:0x7f6852067b19 [ 1412.249474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.249494] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1412.249515] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1412.249530] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1412.249543] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1412.249556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1412.249568] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1412.249601] [ 1412.428457] SLUB: Unable to add cache 9p-fcall-cache-569 to sysfs 00:29:04 executing program 7: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x66, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x36, 0x64, 0x62, 0x38, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:29:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 77) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {0x0}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:29:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x21, 0x0, &(0x7f00000023c0)) mount$9p_fd(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e2f6578b2d8537b0cba005ea815b3db1f4274656e642c00"]) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:29:04 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) getpgid(0x0) r2 = fork() process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) syz_open_procfs(r2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:04 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x8) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) close_range(r1, r2, 0x2) process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/204, 0xcc}, {&(0x7f00000000c0)=""/92, 0x5c}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r4}], 0x1, 0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYBLOB="040000000000000005000000000000000400000000000000000000000000000001000000000000009d5a00000000000005000000ffffff7f0400000009000000080000000000000000000000000000000000050000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000c1d1d5dc84784c95a20e3b5dbd187c000000000000"]) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x84f}}, './file0\x00'}) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000500)={'filter\x00', 0x0, 0x3, 0x0, [0x5, 0x5, 0x9, 0x3, 0x1, 0x56e2], 0x8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)}, &(0x7f0000000580)=0x78) fcntl$setlease(r3, 0x9, 0x2) 00:29:04 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x40000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) [ 1412.691709] FAULT_INJECTION: forcing a failure. [ 1412.691709] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.693266] CPU: 1 UID: 0 PID: 91982 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1412.693293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.693305] Call Trace: [ 1412.693312] [ 1412.693320] dump_stack_lvl+0xfa/0x120 [ 1412.693356] should_fail_ex+0x4d7/0x5e0 [ 1412.693383] ? __kernfs_new_node+0xd3/0x870 [ 1412.693403] should_failslab+0xc2/0x120 [ 1412.693425] kmem_cache_alloc_noprof+0x5f/0x470 [ 1412.693463] __kernfs_new_node+0xd3/0x870 [ 1412.693487] ? __pfx___kernfs_new_node+0x10/0x10 [ 1412.693512] ? lock_acquire+0x15e/0x2f0 [ 1412.693535] ? kernfs_root+0x23/0x2a0 [ 1412.693554] ? find_held_lock+0x2b/0x80 [ 1412.693583] ? kernfs_root+0xee/0x2a0 [ 1412.693602] ? lock_release+0xc8/0x290 [ 1412.693621] ? lock_is_held_type+0x9e/0x120 [ 1412.693655] kernfs_new_node+0x13c/0x1e0 [ 1412.693684] __kernfs_create_file+0x55/0x360 [ 1412.693716] sysfs_add_file_mode_ns+0x21c/0x440 [ 1412.693752] ? __pfx_slab_attr_store+0x10/0x10 [ 1412.693787] internal_create_group+0x571/0xeb0 [ 1412.693818] ? __pfx_internal_create_group+0x10/0x10 [ 1412.693853] sysfs_slab_add+0x188/0x210 [ 1412.693884] do_kmem_cache_create+0x235/0x5a0 [ 1412.693923] __kmem_cache_create_args+0x20f/0x360 [ 1412.693946] ? p9_client_create+0xd52/0x11b0 [ 1412.693969] p9_client_create+0xdfc/0x11b0 [ 1412.693997] ? __pfx_p9_client_create+0x10/0x10 [ 1412.694033] ? trace_kmalloc+0x1f/0xb0 [ 1412.694054] ? legacy_get_tree+0x109/0x220 [ 1412.694080] ? vfs_get_tree+0x93/0x340 [ 1412.694105] ? lockdep_init_map_type+0x4b/0x240 [ 1412.694129] ? __raw_spin_lock_init+0x3a/0x110 [ 1412.694160] v9fs_session_init+0x1df/0x17a0 [ 1412.694182] ? do_raw_spin_lock+0x123/0x260 [ 1412.694208] ? find_held_lock+0x2b/0x80 [ 1412.694236] ? __create_object+0x59/0x80 [ 1412.694262] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1412.694287] ? __pfx_v9fs_session_init+0x10/0x10 [ 1412.694308] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1412.694332] ? __create_object+0x59/0x80 [ 1412.694358] ? __kmalloc_cache_noprof+0x369/0x470 [ 1412.694386] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1412.694427] v9fs_mount+0xbc/0x9e0 [ 1412.694454] ? __pfx_v9fs_mount+0x10/0x10 [ 1412.694482] ? cap_capable+0xdb/0x3b0 [ 1412.694515] ? __pfx_v9fs_mount+0x10/0x10 [ 1412.694540] legacy_get_tree+0x109/0x220 [ 1412.694569] vfs_get_tree+0x93/0x340 [ 1412.694595] path_mount+0x122f/0x1d70 [ 1412.694615] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1412.694649] ? __pfx_path_mount+0x10/0x10 [ 1412.694668] ? kmem_cache_free+0x2a1/0x460 [ 1412.694696] ? putname.part.0+0x11b/0x160 [ 1412.694720] ? getname_flags.part.0+0x1c6/0x540 [ 1412.694747] ? putname.part.0+0x11b/0x160 [ 1412.694774] __x64_sys_mount+0x27b/0x300 [ 1412.694793] ? __pfx___x64_sys_mount+0x10/0x10 [ 1412.694823] do_syscall_64+0xbf/0x360 [ 1412.694854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.694875] RIP: 0033:0x7f6852067b19 [ 1412.694890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.694908] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1412.694928] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1412.694941] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1412.694953] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1412.694965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1412.694976] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1412.695010] 00:29:04 executing program 5: ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000340)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="35adab1c733d66642c7266646e6f3d805e0516fb719f48cb7369300d868f0ce5f2b1caa193eec82426922b98f8035e10925b73d720c9bbee6f16fe330aa68e2243187f6c9c26a3c57e32a3787b80a98f75472cff02351164e59aaf3f0675dd3b5861d2b112d1b55ae1083d08eff02e77c7b38f3194823c92e6b0a39c33b8dfd61b63a52216d8358f271548f3d67235c0fb55b675cd48af2fc63045ece6e943adb2d627acdd7a4a778a367501455ce9c8a4826400aab869b6c22d47deb60e521000000000b38c484995", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fsuuid=\x00\x00\x004\x0064\x00-\x00\x00\x00\x00-6da\x00-35a7-9db1687d,fscontext=unconfined_u,\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000300), 0x2, 0x1) [ 1412.811871] SLUB: Unable to add cache 9p-fcall-cache-573 to sysfs 00:29:05 executing program 6: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc) keyctl$negate(0xd, r0, 0x401, 0xfffffffffffffff8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=""/168, 0xa8) getuid() mount$9p_fd(0x0, 0x0, 0x0, 0x10001, &(0x7f0000000280)=ANY=[@ANYBLOB="695a7373e6642c7266646e6f1907baea00", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472ff6e733d46642c72667d6e6f3d", @ANYRESHEX=r1, @ANYBLOB="2c779264846f3d", @ANYRESHEX=r2, @ANYBLOB="0000000080000000642c00"]) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc) dup2(r3, r3) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000005c0)) keyctl$link(0xb, r4, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={0x0, r4}, &(0x7f0000000380)=""/5, 0x5, &(0x7f00000004c0)={&(0x7f00000003c0)={'sm3\x00'}, &(0x7f0000000400)="6d1fd1af50d7c42704a30a317dcbe23b618456ca3ff332651599274d15d373fa018a6c7f0b42f84eff67d618fa12e1cc43b448886439923dbfcfa2c754e868d3a345f5d6f267acb6bcf30a92153c4b2aaae7f9237e1a472b16e9a3db9bf17c2bc2f07558d448065b3ab420fd956fcdf7e4d2a8e08d7d3f4c5185f63658cc132905067aa07cc6561af221a5cb", 0x8c}) add_key$fscrypt_provisioning(&(0x7f0000000500), &(0x7f0000000580)={'syz', 0x2}, &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000000000000000000096161616161616161616161616161616161616161616161616161613131313131313131313131313131313131313131313131313131313131313131b4aee14ccc79a70f343a6b0e387eba9b9d40bffef899eb98e6481c3477e42da58edd6df30d1ee426db2a1d8f44dc361ebdbf8493e87751e9d8836e46d9286268f109f5402b3957e212d6572e6ff49670d314e1c0a5bdd1aa68d7e4fef3db5fe62fad79156e792fa9451b586a3bdb1efff028006c589deff786a336168acddc0e636da59046694cbd229aac83995e4db70413367e983c2d9602a61e9ce86931941858b3e04047301975973a3d8c17ebbea95c28342ae04f201fcfb0851a6d89c8b82c036edc2dbc7256083569a4f475139a57df6dfbb90e6fa84838a9ab3c188a03fa468873bebd891dc70df49d4024bdd59ec1bf1603463a6406d20ed5e1119455c71d9bf382b2f6f2e7b0ce192cb339ee248d80208aead78e4dd15a82f60a499ef9f8f657ff5b6adc503696d20d560219947afb89127da5a5041d23746b4e0ac1854fa2c3a26e89abd42fe13b4e31f6bc2da3cc83ff33391d78c1dca0f266b6aed62bc52b3b300c4f2e4c3c83ba93be82d22e02eea25a1a2d90eb8dc2"], 0x48, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) 00:29:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x101000, 0x80) 00:29:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 78) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:05 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, r0, 0x2) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:29:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {0x0}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) [ 1413.062783] FAULT_INJECTION: forcing a failure. [ 1413.062783] name failslab, interval 1, probability 0, space 0, times 0 [ 1413.064025] CPU: 1 UID: 0 PID: 92696 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1413.064046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1413.064055] Call Trace: [ 1413.064061] [ 1413.064067] dump_stack_lvl+0xfa/0x120 [ 1413.064097] should_fail_ex+0x4d7/0x5e0 [ 1413.064119] ? __kernfs_new_node+0xd3/0x870 [ 1413.064135] should_failslab+0xc2/0x120 [ 1413.064152] kmem_cache_alloc_noprof+0x5f/0x470 [ 1413.064190] __kernfs_new_node+0xd3/0x870 [ 1413.064209] ? __pfx___kernfs_new_node+0x10/0x10 [ 1413.064229] ? lock_acquire+0x15e/0x2f0 [ 1413.064247] ? kernfs_root+0x23/0x2a0 [ 1413.064262] ? find_held_lock+0x2b/0x80 [ 1413.064285] ? kernfs_root+0xee/0x2a0 [ 1413.064299] ? lock_release+0xc8/0x290 [ 1413.064315] ? lock_is_held_type+0x9e/0x120 [ 1413.064341] kernfs_new_node+0x13c/0x1e0 [ 1413.064364] __kernfs_create_file+0x55/0x360 [ 1413.064389] sysfs_add_file_mode_ns+0x21c/0x440 [ 1413.064417] ? __pfx_slab_attr_store+0x10/0x10 [ 1413.064444] internal_create_group+0x571/0xeb0 [ 1413.064468] ? __pfx_internal_create_group+0x10/0x10 [ 1413.064495] sysfs_slab_add+0x188/0x210 [ 1413.064520] do_kmem_cache_create+0x235/0x5a0 [ 1413.064547] __kmem_cache_create_args+0x20f/0x360 [ 1413.064564] ? p9_client_create+0xd52/0x11b0 [ 1413.064583] p9_client_create+0xdfc/0x11b0 [ 1413.064605] ? __pfx_p9_client_create+0x10/0x10 [ 1413.064629] ? trace_kmalloc+0x1f/0xb0 [ 1413.064648] ? legacy_get_tree+0x109/0x220 [ 1413.064670] ? vfs_get_tree+0x93/0x340 [ 1413.064690] ? lockdep_init_map_type+0x4b/0x240 [ 1413.064709] ? __raw_spin_lock_init+0x3a/0x110 [ 1413.064734] v9fs_session_init+0x1df/0x17a0 [ 1413.064752] ? do_raw_spin_lock+0x123/0x260 [ 1413.064773] ? find_held_lock+0x2b/0x80 [ 1413.064795] ? __create_object+0x59/0x80 [ 1413.064816] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1413.064836] ? __pfx_v9fs_session_init+0x10/0x10 [ 1413.064853] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1413.064872] ? __create_object+0x59/0x80 [ 1413.064892] ? __kmalloc_cache_noprof+0x369/0x470 [ 1413.064914] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1413.064948] v9fs_mount+0xbc/0x9e0 [ 1413.064968] ? __pfx_v9fs_mount+0x10/0x10 [ 1413.064990] ? cap_capable+0xdb/0x3b0 [ 1413.065022] ? __pfx_v9fs_mount+0x10/0x10 [ 1413.065042] legacy_get_tree+0x109/0x220 [ 1413.065065] vfs_get_tree+0x93/0x340 [ 1413.065085] path_mount+0x122f/0x1d70 [ 1413.065101] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1413.065128] ? __pfx_path_mount+0x10/0x10 [ 1413.065143] ? kmem_cache_free+0x2a1/0x460 [ 1413.065165] ? putname.part.0+0x11b/0x160 [ 1413.065184] ? getname_flags.part.0+0x1c6/0x540 [ 1413.065206] ? putname.part.0+0x11b/0x160 [ 1413.065227] __x64_sys_mount+0x27b/0x300 [ 1413.065242] ? __pfx___x64_sys_mount+0x10/0x10 [ 1413.065266] do_syscall_64+0xbf/0x360 [ 1413.065290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.065307] RIP: 0033:0x7f6852067b19 [ 1413.065319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1413.065334] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1413.065349] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1413.065360] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1413.065369] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1413.065379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1413.065388] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1413.065411] [ 1413.132605] SLUB: Unable to add cache 9p-fcall-cache-576 to sysfs 00:29:16 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3db8c9ff6104df84e0b6fb3d34f5081ae872f9902cbe919c14998fe4699b10c860c7363332234227", @ANYRESHEX=r1, @ANYBLOB=',\x00']) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:16 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:29:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x8) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x81, 0x9, 0x1, 0x1, 0x3, 0x3e, 0x5, 0x1b6, 0x40, 0x1bf, 0x3ff, 0x7, 0x38, 0x1, 0x6, 0x2, 0x1}, [{0x4, 0x800, 0x41, 0x401, 0x3, 0x4, 0x7, 0xf3}], "8b10b15c4ed1ca00c1d87d785caf9027c9391b2a168e931cdcf7dcc49dc0f40fc17860c2e23affb5d1dc93f2e1425daeb23e7db7db2fca84a33c0cd208204b075019b5879bb3986da75ee3f8aec7c9edd747e06e608c898bd7df58f3e13cbb2cf21937d1a45353aa55b01a8ecad08299c0653ec9fbb43602e03383226cd7e21ab739db957257e2b53cc1a2494b30b42944c4d5197c265d110d4cab8f3603accee37daf9b8d949caa2e405fec6c375452fd539b62793e83bf6fe0ebc67929b395b60c0966945479481ed6972fabf3432dbee743cdfdb0413b49bc9f99947ceb3bcedaf42d620873ab2dc450bc041aa0df7d9617fd4e", ['\x00', '\x00', '\x00']}, 0x46d) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, r1, 0x0) r2 = fork() process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000100)={0x3}) fcntl$setlease(r3, 0x9, 0x2) 00:29:16 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x3) 00:29:16 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64, 0x39], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x63, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c2c80630b596c6e6f657874656e642800"]) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:29:16 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = inotify_init1(0x80000) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000001700)={0x1, 0x1, 0x1000, 0x12, &(0x7f00000006c0)="9c835a48e705b6bcb52d6cc9dd2b93cdbcc9", 0x1000, 0x0, &(0x7f0000000700)="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"}) getresuid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r7, r5) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', 0x1, 0x2, &(0x7f0000000440)=[{&(0x7f0000000300)="7b1adfb1f6e416124f6c5267532d72ae0bdbd85c0063ec9855ecbf281e04e0", 0x1f, 0x5}, {&(0x7f0000000340)="057a0244e1c4ee95062bd4ad5c90870309bf12c657cf0428029fcb97e1f2a373684b73ebe44b808c6f9d5774cbe67cf56f7a122a0d4bd45b015975b7c05f88078727e0d79203d1e53cae6fcc5870e6df9d3c44c20e8cb39d9ac8ce8652aace4361292967b30a243f76023fedb93bb154d9707af25d2415d158b1f37cea0ba4ff36a8d0c214b9ac94ed12369903a5e4dadd0aa8ac95a0f4ae41e2eb22d24b50bb41f0c7a2174c88ae73fa3ec4a082341e7f816518027f1c4519d5e971e6fd44e3e02032311a0c1000bd285bb2769c5e8455db1b57c788347adc75cf68dc03b44df21785", 0xe3, 0x7}], 0x800, &(0x7f0000000540)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r7, @ANYBLOB="2c6e725f696e6f6465733d302d70253938706d6b2c6e725f696e6f6465733d6534352c6e725f626c6f636b733d33392c6673757569643d3834376236a838382d390064392d613537582d630061372d64383234333832312c7569643d", @ANYRESDEC=r3, @ANYBLOB=',dont_measure,fsmagic=0x000H000000000006,measure,dont_hash,context=staff_u,rootcontext=staff_u,\x00']) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77090003003d", @ANYRESHEX, @ANYBLOB=',fsuuid=\x00\x00\x004\x00d\x00\x00-\x00\x00\x00\x00-6da\x00-35a7-9db1687d,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c00aa24c609944aea3ac530"]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:29:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 79) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {0x0}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) [ 1423.898472] 9pnet_fd: Insufficient options for proto=fd [ 1423.930932] tmpfs: Invalid gid '0x00000000ffffffff' 00:29:16 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f00000002c0)=@generic={0x1a, "32cc0cde1558d5a3d2e55a8485a4b837f151d4606b818c9e6963b3dc0a434c604c86c206b0393c2445cd5a365ec4a8a2c7c6acdee20eff3c58a747d7e503720b5a0a3a8c629f113f315ffb258e8dd39e77e37c5d0084333dac317e97c1ed057e9301d8187c177658abc8b39d3172f8ca6081859c745c760c29d2cac1190b"}, 0x80) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@mcast2}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x10040, 0x2) 00:29:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 80) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:16 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x5, 0x8, 0x1, 0x7, 0x0, 0x9b, 0x8ca, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x3, 0xff}, 0x802, 0x8, 0x2, 0x5, 0x2, 0x7, 0xfff7, 0x0, 0xe0000000}, r1, 0x0, r0, 0x2) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) sync() 00:29:16 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c653000445ac4f16fcf87ad3d4296f2b4668affccbf9103359d9a36c9f2f0313fa5e134b22a19afb87e4ca9f9cce530e0a4937987f1b8399e0de802452566d231692308243740348e2b985ea96c03b92f33be97347bdf926ccf5f2b0181c5e62a3a5e3042b7e7c2ab60ef341cdac0bac304487da7e3a5b519911a47540216d930a83825e2416cdd44c405d3053a2842d02cba26e1a2030be615c31afdccd1f8b77937402709a4700d5591b6af0081c8d35e22381aff9d1e6f8e1f83244cec045936f58bc040a6dc94e873caadce8094e69751a1"]) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x8408, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'rfdno'}}, {@cachetag={'cachetag', 0x3d, '9p\x00'}}, {@debug}, {@access_user}, {@nodevmap}, {@fscache}], [{@uid_gt}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, r6}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0x26}}, {@fowner_gt={'fowner>', 0xee01}}, {@subj_user={'subj_user', 0x3d, '.,&*$-^@-'}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00000000cd312e346f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) syz_open_procfs(0x0, 0x0) r7 = socket$inet(0x2, 0x800, 0x5) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000480)=0xc) 00:29:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:29:16 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x104202c, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c6673757569643d00000034006400002d000000322d366461002d333561372d39646231363837642cab521a07", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r4}], 0x1, 0x8) sendmsg$unix(r3, &(0x7f0000000a00)={&(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000780)="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", 0xfc}, {&(0x7f0000000880)="95bdf4bb95c8b3dc5c0c70d2e307ace20b9bd19557439cee50492b8517b3b05f251e9bebf19652766fe835c54f51d4da687e5c22675c8bb49dfe866096c64135f4b3ae3eeaa4c4493c4e83d26a3e53d64d06ebafb9299863a66584c3a5fe4a64d421b39ae45b0405d870fb766b281c9fb026f726bbf017fc982693b0df6fd568e50ebdaecf4f2c568f265cc73ee9aaad1a461faea251c48b839ab24b81c3d76868890e660e9dd49a35677d3788bb9ee74751", 0xb2}, {&(0x7f0000000940)="c2b6a03b96ec71ecd58752bca0d1414ed565b5237f0ed437b266dfd4ea7d4d179e88", 0x22}], 0x3, &(0x7f00000009c0)=[@rights={{0x24, 0x1, 0x1, [r2, r4, 0xffffffffffffffff, r0, r2]}}], 0x28, 0x8004}, 0x26040051) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r6) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x1802004, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag}, {@mmap}, {@access_uid={'access', 0x3d, r6}}, {@access_client}, {@version_u}, {@debug={'debug', 0x3d, 0x1f}}, {@dfltuid={'dfltuid', 0x3d, r7}}, {@version_L}, {@version_9p2000}], [{@subj_user={'subj_user', 0x3d, ':'}}, {@fsname={'fsname', 0x3d, 'rfdno'}}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x10, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}}, 0x40000) [ 1424.271704] FAULT_INJECTION: forcing a failure. [ 1424.271704] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.272627] CPU: 0 UID: 0 PID: 93773 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1424.272643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1424.272650] Call Trace: [ 1424.272655] [ 1424.272659] dump_stack_lvl+0xfa/0x120 [ 1424.272683] should_fail_ex+0x4d7/0x5e0 [ 1424.272700] ? __kernfs_new_node+0xd3/0x870 [ 1424.272712] should_failslab+0xc2/0x120 [ 1424.272726] kmem_cache_alloc_noprof+0x5f/0x470 [ 1424.272750] __kernfs_new_node+0xd3/0x870 [ 1424.272764] ? __pfx___kernfs_new_node+0x10/0x10 [ 1424.272779] ? lock_acquire+0x15e/0x2f0 [ 1424.272793] ? kernfs_root+0x23/0x2a0 [ 1424.272804] ? find_held_lock+0x2b/0x80 [ 1424.272822] ? kernfs_root+0xee/0x2a0 [ 1424.272833] ? lock_release+0xc8/0x290 [ 1424.272845] ? lock_is_held_type+0x9e/0x120 [ 1424.272866] kernfs_new_node+0x13c/0x1e0 [ 1424.272883] __kernfs_create_file+0x55/0x360 [ 1424.272902] sysfs_add_file_mode_ns+0x21c/0x440 [ 1424.272923] ? __pfx_slab_attr_store+0x10/0x10 [ 1424.272945] internal_create_group+0x571/0xeb0 [ 1424.272963] ? __pfx_internal_create_group+0x10/0x10 [ 1424.272983] sysfs_slab_add+0x188/0x210 [ 1424.273006] do_kmem_cache_create+0x235/0x5a0 [ 1424.273026] __kmem_cache_create_args+0x20f/0x360 [ 1424.273040] ? p9_client_create+0xd52/0x11b0 [ 1424.273054] p9_client_create+0xdfc/0x11b0 [ 1424.273070] ? __pfx_p9_client_create+0x10/0x10 [ 1424.273088] ? trace_kmalloc+0x1f/0xb0 [ 1424.273101] ? legacy_get_tree+0x109/0x220 [ 1424.273116] ? vfs_get_tree+0x93/0x340 [ 1424.273131] ? lockdep_init_map_type+0x4b/0x240 [ 1424.273145] ? __raw_spin_lock_init+0x3a/0x110 [ 1424.273164] v9fs_session_init+0x1df/0x17a0 [ 1424.273178] ? do_raw_spin_lock+0x1dc/0x260 [ 1424.273194] ? find_held_lock+0x2b/0x80 [ 1424.273210] ? __create_object+0x59/0x80 [ 1424.273226] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1424.273241] ? __pfx_v9fs_session_init+0x10/0x10 [ 1424.273254] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1424.273269] ? __create_object+0x59/0x80 [ 1424.273284] ? __kmalloc_cache_noprof+0x369/0x470 [ 1424.273307] v9fs_mount+0xbc/0x9e0 [ 1424.273323] ? __pfx_v9fs_mount+0x10/0x10 [ 1424.273340] ? cap_capable+0xdb/0x3b0 [ 1424.273361] ? __pfx_v9fs_mount+0x10/0x10 [ 1424.273376] legacy_get_tree+0x109/0x220 [ 1424.273393] vfs_get_tree+0x93/0x340 [ 1424.273408] path_mount+0x122f/0x1d70 [ 1424.273421] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1424.273442] ? __pfx_path_mount+0x10/0x10 [ 1424.273453] ? kmem_cache_free+0x2a1/0x460 [ 1424.273470] ? putname.part.0+0x11b/0x160 [ 1424.273484] ? getname_flags.part.0+0x1c6/0x540 [ 1424.273501] ? putname.part.0+0x11b/0x160 [ 1424.273517] __x64_sys_mount+0x27b/0x300 [ 1424.273528] ? __pfx___x64_sys_mount+0x10/0x10 [ 1424.273546] do_syscall_64+0xbf/0x360 [ 1424.273565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.273578] RIP: 0033:0x7f6852067b19 [ 1424.273588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1424.273599] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1424.273611] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1424.273619] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1424.273627] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1424.273634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1424.273640] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1424.273658] [ 1424.341401] SLUB: Unable to add cache 9p-fcall-cache-582 to sysfs 00:29:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 81) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:25 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000180)={0x0, 0x3885, 0x5}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:29:25 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:29:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setregid(r5, r3) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x7, &(0x7f00000015c0)=[{&(0x7f0000000200)="16cdee2a5f07d5822517e22fd127a538ff341d8974d6eb18073a392ffdd09b627ab0e3a8c780c09802b7783a19c912f637a879a6325d6ec9465e4f10819b722e1b1593143c223f36a5f056b13573088fa70d2e17926abeddd787339515f17d745b569ef0a565357cffb99b02913e28cca684918052327c4c00fdaf9fe093fe69d8e598df2687c03600df9db229e9b60c116e14fc825352d5f449900173e61ea2ef56b524ff1350fab384bee2c6d3304a7d4de52a468b41e910f70b2b0c538791208b4501f26f4411ba467a7c2464ac99986b18a855155072ff47a800ca92b669079c0b65af6b6faab54b", 0xea, 0x80000001}, {&(0x7f0000000300)="407ef9eb99ef87e02cae1f4b2d7285c3f339f261a58a45a241e6050bf2e9e28d802e94a470b9ee09d26011cd866cb25f36392d5537c101071f5fde752fdb02a19ce2668ea99b47dddf0d4b3335fe5cdfbadbc18806", 0x55, 0x200}, {&(0x7f0000000380)="4f9073a7a9f29f61a6711b975ff466bfe9c416d93dcaae12f461f44fd8f6c6f2023a44a5bff74fc354bbb1dcc2e760f289c6fe5d96f681200538d8e2b0bfb990ba889beb0d968451feac6eaae062ed4d3878b96d8fa8e38ba44911ca464540db095653436ea16f7dd7d0abe7200925d63e8d8c06db73b4b3bec68cbff3ead9325bd35d781c57ff44cecb1ded205aca4f6f1bf74ced602ec702e1eb123d222140b29293529b0d58031d1c984d22403acc8488661c2e6186c85c3924267b507a62cef6eb9962", 0xc5, 0x2}, {&(0x7f0000000180)="1a", 0x1, 0xffffffffffff72d5}, {&(0x7f0000000480), 0x0, 0x8}, {&(0x7f00000004c0)="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", 0x1000, 0xff}, {&(0x7f00000014c0)="c4fdeaad1aa8bbc00aae3e30ab0fc6deebd242d182ce4f89e3dda155b5993388a7e9cf2c569a5264243588b7ddb841cbc641411d00891783b1bbc08538bbb37246c99553c11cbbea97a7e55f72df2945337f1d92a2885659b7c367d7848e52691597751c0b30d1f4d34872cf4e0aa193e94f197ebc04a5b8d49176dd34d53846d09ed4264eced503fc0f69164462660082f02f89f70fcb2e20eb375333f2fb0cbec7f2f95cfa515a36949ffb0937b13ad153feed6a309bfe8d2c1cc6bf4768c14da57fd2899e02e00c6a76d44c027a433616ed9f6156b696329005db5bc781a86eeb46ca5c390fdf28b25776cc", 0xed, 0x79}], 0x804000, &(0x7f0000001680)={[{@huge_never}, {@huge_always}, {@gid={'gid', 0x3d, r3}}, {@mode={'mode', 0x3d, 0x1ff}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x32, 0x2d, 0x34, 0x36, 0x0]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x6d, 0x31, 0x31]}}], [{@subj_role={'subj_role', 0x3d, ',{@%/'}}]}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:25 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x31, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x31, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x66]}}}, {@uid_eq}]}}) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000580)={{r2}, "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"}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d666b2c7266646e6f3d73dc704a62f6bc918810b156aa320e358a12fc74e1a1f5ba542ea68a4daacfa9e8a95fef406514ef8e61941915e43ea6291e242646475e6d9094fc6fe470cd610991e73226562ffd1e064441c7f8261f3ee816d91e7f503eb308800fbd5690267098e64e097ffd7d7ad78937c8b9b755365f60b825a76aa5e0f00bb627b36c0443fe40c911043e7250f0f655efe61ee875ce0212fb1f1af0e14c62c023ce69aba0e9735eeb7d997e39e71adcd7394969c040af460de331ef1e62b88a5f2ab58e6b7f7ee9ee3c406ff166bb177c747849d4d85ede2d07a03063c0a1123d713e004b2ecab019e45752dd0f77dd4cff8ce278f87633e177f2888df759d301ba4672d913b0a5eaec5f5b7c9cccc9ade8cdbfbaa5eca869352071949912be32a2848832f3c345a0398f25306b70f899855f09c723f5e10b0de34e63a70bd52035407dac00d056dfc0ace69c10af7ff5c49bf0bfe725b08dd08b659ad8ac27fad8947d8779814cddebbc84651c0f0f17ba05693241bc41cf73fde2c25dd0ddd7977eb025788d2c4bb19ecd5257fb91e5f1eff9566d797865a1f0ae01b47b6ed108c91b44efc942f75266701129207a5c719cbad31cc8dcd9b1cf2b8cc46da743625d0a48bbb5dd9cceaf0efa", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noextend,\x00']) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x1, 0x0, 0x1, 0x0, 0x0, [{{r1}, 0x8}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') getdents(r2, &(0x7f00000001c0)=""/49, 0x31) openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:29:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x33, 0x30, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="00800000000000c195211b68ac14e4af7af91fdaeffd8faa6ac3a1c0ba42e494258adea18874489acfc924c50e5d4b0868a8539ba8d8ecbacd80e28b2c8d0826d1b0d03a0521afaede78bb4e70792b6557f7566c443e4c2a8c4149694f59a2a70c82a6ce18bb5a7d295650c173af7539aba8c667c86604302079ed75aa11d021e1c6a40a26817c7e66ed0a8a4bbddd0f74", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:29:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:29:25 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x7, 0x80, 0x9, 0xb6, 0x0, 0x7, 0x2802a, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0xa84, 0x2}, 0x7626, 0x10001, 0x8, 0x6, 0x2, 0x47, 0x80, 0x0, 0x2ad7, 0x0, 0x3f}, r0, 0xf, 0xffffffffffffffff, 0x0) [ 1433.369972] 9pnet_fd: Insufficient options for proto=fd [ 1433.378989] 9pnet_fd: Insufficient options for proto=fd [ 1433.394791] 9pnet_fd: Insufficient options for proto=fd [ 1433.423151] loop4: detected capacity change from 0 to 264192 [ 1433.438707] tmpfs: Unsupported parameter 'huge' [ 1433.477616] 9pnet_fd: Insufficient options for proto=fd [ 1433.480944] 9pnet: Could not find request transport: fk 00:29:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:29:35 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6, 0xff, 0x1f, 0x9c, 0x0, 0x9, 0x4100, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x3546bd7b, 0x1000, 0x5, 0x9, 0x2, 0x9, 0x0, 0x9, 0x0, 0x100000001}, r0, 0xb, r1, 0x8) 00:29:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002740), 0x80000, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x8) fcntl$setlease(r0, 0x9, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x1, 0x2, {0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0x5}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000340)="6bed36c996b92d7ecfc2604b0ab54999095b2dd5f960a8ff59d990a5e5ff313053d2e2d2a1738b7e56134a6bec64515b11cb90a0aae6df39a2c4a6798660747d613407ace03ec67344c30053ff1278f81178a20115e4d7474c2c89311b127e6175b375651873fca81fe0b5dc8a7ffb6246c8f22105098fe725d3a671594414ec1f70bddd7c315930a50ba462fcbf2291d85eaa61af9c", 0x96}, {&(0x7f0000000180)="1303e8332dc140c8299ca98cecede853d7ecf8c305d37ad6f6cf3aa583e79477488a3d7e0e57", 0x26}, {&(0x7f0000000400)="9db2e780bc9432ff5cd1a1328454e385d34fc47642758fe715aad8c5cfdd29dc86cc6c", 0x23}, {&(0x7f0000000440)="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", 0x1000}], 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/4637], 0x1228}, 0x80) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r4}], 0x1, 0x8) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r5}], 0x1, 0x8) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r6}], 0x1, 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002780)=ANY=[@ANYRESOCT, @ANYRES64=r4, @ANYRES32, @ANYRES64=r6, @ANYBLOB=',fsutid=\x00\x00\x004\x00d\x00\x00-\x00\x00\x0035a7-9db1687d,uid=\x00\x00\x00\x00\x00\x00\x00', @ANYRESOCT=0x0, @ANYBLOB="3a102d9751f17fac00"]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') syz_open_dev$mouse(&(0x7f0000002700), 0x400, 0x200) 00:29:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4, 0x10000}}, './file0\x00'}) ioctl$CDROMSTOP(r1, 0x5307) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:29:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 82) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:35 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d5d28009c42022e49ff0e0f2858c28974b876ac08d79e1e31a25ecea652e2e56b34a5a2f875650b2510735cc376d5db9a8042b92b84ed5df189701ab8d67d3e6eadc1052928d2d17ad2e399922fc545b9c87f3774a4a73d6631d8", @ANYRESHEX=r1, @ANYBLOB=',whdno=', @ANYRESHEX, @ANYBLOB=',fsuuid=f\x00\x004\x00d\x00\x00-\x00\x00\x00\x00-6da4-3\x00\x007-9db16\x007\x00,uid=', @ANYRESOCT=r1, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) unlinkat(r0, &(0x7f0000000380)='./file0\x00', 0x200) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00') 00:29:35 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) close(r3) 00:29:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) ioctl$TIOCSIG(r3, 0x40045436, 0x2f) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) getdents(r2, &(0x7f0000000200)=""/231, 0xe7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x1263, &(0x7f0000000000)={"8d0200", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:29:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x9, 0x2) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) sync() sync() r2 = fork() process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x1, 0x9, 0xcb, 0x1, 0x0, 0x5, 0x9000, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf604, 0x4, @perf_bp={&(0x7f0000000080), 0x18}, 0x8008, 0x80, 0xb0bd, 0x4, 0xffffffff, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x9}, r2, 0x10, r1, 0x3) sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fstatfs(r3, &(0x7f0000000180)=""/188) 00:29:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 83) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:35 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x64, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x65, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x34, 0x36, 0x0, 0x37, 0x64]}}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) process_madvise(r2, &(0x7f0000000700)=[{&(0x7f00000002c0)="ef8a274079b2b8fe0e383de08735201d74d569e070cdcb6ea89d2b6a7373d8ff5788c4f612993c484a068c154d390d55b2acacb85fde1435414629cfb68f9e837d513be34e8df5d33ab81535fe181db1a668cbd35eb8e7b59a7d254f0d78ec600e3316015d54d791859c15650bf8af84d8607ff055541d37848874685be9341303effffac45ca9209a1c797c6c51024ede46924bac31abfb96", 0x99}, {&(0x7f0000000380)="74a576e223cbede8ac73f075220f325e35348a0636e051d7eb485bd15a11236581fd43e3c59dc9dd8ea8dee3a2b58665045142df5b00f47b25f3c2f040318a9a7e8843890452e8a169603607203ad4846a47fba1ed80175f38d5227e242ef5ba6dd7b51cfe3816c8ef0b7560f267cfc064b8b90944895ba078d521b96ae14712965376f36082c8956e84", 0x8a}, {&(0x7f0000000440)="66023b1f2c3ede4d33d612613b8d02751e0ca70491e35e39554eb1e81ab7711e81c5f750db0d29de8ab5acb4c48e175ffe223903c35dd1046021f468e932aa5a3be149c60bf0e8e01a42387cf9c852f77acc5bc9e77ce0be578f0f05a0c309b5261aaf5348e266756bd4ffa6b625b2302a26480eb4bcbe9ce94339e7072d7d1aa136ebf1c44b3ea42befa3ad", 0x8c}, {&(0x7f0000000580)="56f21db4e54d8df81c8cb00380787c89516f64dd2216c40d841564f4d456a75aa4859784fbc9fd7d347aceb013c589cca2f9cabd92ccfe629864d356bbfb5fcce4cd0df018a9fefc6c33bfd0ecc7ced357ab730942cad875bb9ff80c1e0959f892e8e81487adbae155ca943be3dc5daa104f30cfd673", 0x76}, {&(0x7f0000000600)="42466dbb54f68ff260ba88b7d4249ec27a907a3ec11ac10cf6017a4734c9f4c99b008ca81c5670ff985fd9ac7074fcb305cb2e5e6dc39c509cdfaa6f24e1d1a66d4091c23357da4886a655bd9e0a4770a41155d1b841135883901a95d63d2f8c6b10eeee19d50550def6d13ef1cb5fb8b14f238c9b895f6b456024612c66632667bda1f1cfbcc7fb40f14363dd245a72bb2d4df8850baf126b5829ad94d266589c7d05589eaf0011c5d7bfc7562ac7fd831029517e7742771e0103d5fe17dcc3c7c67ae2bfc0209480833f6208ae212e86", 0xd1}], 0x5, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) r4 = dup2(r1, r1) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f0000001c80)={0x1, 0xffffffff, 0x7}) 00:29:35 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x100, 0x0) statx(r0, &(0x7f0000000340)='./file0\x00', 0x100, 0x200, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x12c088, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x80}}, {@version_u}], [{@fowner_gt={'fowner>', r2}}, {@uid_lt={'uid<', 0xee01}}, {@fsmagic}, {@permit_directio}]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') llistxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=""/168, 0xa8) 00:29:35 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x125803) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/vlan/vlan1\x00') r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:29:35 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x6, 0x0, 0x34, 0x0, 0x64], 0x2d, [0x0, 0x0, 0x64], 0x2d, [0x36, 0x64, 0x0, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x32, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x20, &(0x7f0000000380)={'trans=xen,', {[{@aname={'aname', 0x3d, 'noextend'}}, {@posixacl}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@privport}], [{@audit}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:29:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) [ 1443.661950] FAULT_INJECTION: forcing a failure. [ 1443.661950] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.663064] CPU: 1 UID: 0 PID: 95995 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1443.663081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1443.663088] Call Trace: [ 1443.663092] [ 1443.663097] dump_stack_lvl+0xfa/0x120 [ 1443.663120] should_fail_ex+0x4d7/0x5e0 [ 1443.663138] ? __kernfs_new_node+0xd3/0x870 [ 1443.663150] should_failslab+0xc2/0x120 [ 1443.663163] kmem_cache_alloc_noprof+0x5f/0x470 [ 1443.663186] __kernfs_new_node+0xd3/0x870 [ 1443.663201] ? __pfx___kernfs_new_node+0x10/0x10 [ 1443.663216] ? lock_acquire+0x15e/0x2f0 [ 1443.663230] ? kernfs_root+0x23/0x2a0 [ 1443.663241] ? find_held_lock+0x2b/0x80 [ 1443.663258] ? kernfs_root+0xee/0x2a0 [ 1443.663269] ? lock_release+0xc8/0x290 [ 1443.663281] ? lock_is_held_type+0x9e/0x120 [ 1443.663301] kernfs_new_node+0x13c/0x1e0 [ 1443.663318] __kernfs_create_file+0x55/0x360 [ 1443.663337] sysfs_add_file_mode_ns+0x21c/0x440 [ 1443.663359] ? __pfx_slab_attr_store+0x10/0x10 [ 1443.663379] internal_create_group+0x571/0xeb0 [ 1443.663397] ? __pfx_internal_create_group+0x10/0x10 [ 1443.663418] sysfs_slab_add+0x188/0x210 [ 1443.663436] do_kmem_cache_create+0x235/0x5a0 [ 1443.663457] __kmem_cache_create_args+0x20f/0x360 [ 1443.663470] ? p9_client_create+0xd52/0x11b0 [ 1443.663484] p9_client_create+0xdfc/0x11b0 [ 1443.663501] ? __pfx_p9_client_create+0x10/0x10 [ 1443.663518] ? trace_kmalloc+0x1f/0xb0 [ 1443.663531] ? legacy_get_tree+0x109/0x220 [ 1443.663546] ? vfs_get_tree+0x93/0x340 [ 1443.663562] ? lockdep_init_map_type+0x4b/0x240 [ 1443.663576] ? __raw_spin_lock_init+0x3a/0x110 [ 1443.663595] v9fs_session_init+0x1df/0x17a0 [ 1443.663608] ? do_raw_spin_lock+0x123/0x260 [ 1443.663624] ? find_held_lock+0x2b/0x80 [ 1443.663641] ? __create_object+0x59/0x80 [ 1443.663657] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1443.663672] ? __pfx_v9fs_session_init+0x10/0x10 [ 1443.663685] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1443.663699] ? __create_object+0x59/0x80 [ 1443.663714] ? __kmalloc_cache_noprof+0x369/0x470 [ 1443.663731] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1443.663756] v9fs_mount+0xbc/0x9e0 [ 1443.663772] ? __pfx_v9fs_mount+0x10/0x10 [ 1443.663789] ? cap_capable+0xdb/0x3b0 [ 1443.663808] ? __pfx_v9fs_mount+0x10/0x10 [ 1443.663823] legacy_get_tree+0x109/0x220 [ 1443.663841] vfs_get_tree+0x93/0x340 [ 1443.663856] path_mount+0x122f/0x1d70 [ 1443.663868] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1443.663889] ? __pfx_path_mount+0x10/0x10 [ 1443.663900] ? kmem_cache_free+0x2a1/0x460 [ 1443.663917] ? putname.part.0+0x11b/0x160 [ 1443.663931] ? getname_flags.part.0+0x1c6/0x540 [ 1443.663948] ? putname.part.0+0x11b/0x160 [ 1443.663964] __x64_sys_mount+0x27b/0x300 [ 1443.663976] ? __pfx___x64_sys_mount+0x10/0x10 [ 1443.663993] do_syscall_64+0xbf/0x360 [ 1443.664016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.664029] RIP: 0033:0x7f6852067b19 [ 1443.664038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1443.664050] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1443.664061] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1443.664070] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1443.664077] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1443.664084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1443.664090] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1443.664108] 00:29:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000bc0)={&(0x7f00000004c0), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/98, 0x62}, {&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000680)=""/182, 0xb6}, {&(0x7f0000000740)=""/241, 0xf1}, {&(0x7f0000000840)=""/221, 0xdd}, {&(0x7f0000000940)=""/108, 0x6c}, {&(0x7f00000009c0)=""/231, 0xe7}], 0x8, &(0x7f0000000b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x2100) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r0, 0xff, 0x8, 0x6}) pread64(r4, &(0x7f0000000240)=""/82, 0x52, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000140)={0x3, 0x1, {0xfffffffffffffffe, 0x3, 0x6, 0x3, 0x1}, 0xa670}) [ 1443.708834] SLUB: Unable to add cache 9p-fcall-cache-591 to sysfs 00:29:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 00:29:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 84) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3da68752fffc1f13438920065c8438bf6633571d07418722f9b3e485dbdda6e0395aa34c466e5fadbd0200000088c47c39faa33736", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r3 = accept4$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x80800) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000140)={0x1, 'nr0\x00', {}, 0x9afe}) fcntl$notify(r2, 0x402, 0x24) rmdir(&(0x7f00000002c0)='./file0\x00') setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1444.070442] 9pnet_fd: Insufficient options for proto=fd 00:29:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d66e331279d863a41c0", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fsuuid=\x00\x00\x0043d\x00\x00-\x00\x00\x00\x00-6da\x00-35a7-9db1687d,uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = dup3(r1, r0, 0x0) r3 = memfd_create(&(0x7f0000000300)='9p\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x80000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}, {@fscache}, {@version_L}, {@mmap}, {@nodevmap}, {@privport}, {@version_9p2000}, {@posixacl}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cachetag={'cachetag', 0x3d, 'noextend'}}], [{@smackfshat={'smackfshat', 0x3d, '9p\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@hash}, {@subj_type={'subj_type', 0x3d, 'rfdno'}}, {@hash}]}}) fcntl$setpipe(r2, 0x407, 0xffffffff00000000) 00:29:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', @ifru_hwaddr=@dev}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) 00:29:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@nodevmap}], [{@audit}]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:29:46 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:29:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) rmdir(&(0x7f0000000180)='./file0\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4008, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x4}}, {@aname}, {@cachetag={'cachetag', 0x3d, 'uid'}}], [{@hash}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '\\]}'}}, {@euid_eq={'euid', 0x3d, r3}}, {@seclabel}, {@subj_type}, {@subj_type={'subj_type', 0x3d, 'noextend'}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:29:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000200)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "b2a745a29b854f"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001200)={{r1, 0x0, 0x7, 0xcfe, 0x5, 0x3, 0x9, 0x10001, 0x1, 0xfff, 0x35, 0x9, 0xdf, 0x101, 0x7fff800000}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000003580)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000140)={{r5, 0x8, 0x2, 0x4, 0x4, 0x308, 0x10000, 0x4, 0x529c, 0x7ff, 0x6, 0x1, 0x0, 0x8, 0xd59}, 0x10, [0x0, 0x0]}) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r6}], 0x1, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f00000012c0)={r3, r2, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000022c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f00000024c0)={r7, r8, "e2db67b47251c4e53375dfd334afa083ed83a2c9b2bbe80b57b477a2079594ebfc84dd126a24fa626f156e857a63f437c1bef96f8e24a99b1d199f73ca89f825b25c042fad7b54932aa38ce03b3eea5016ee72d29101e46031532d2b0117ae3782a18fff544956d0a74224d528a24fd9088821ef2f6f05f0ba9a26767e505c58c64582b65e169d36f5bd113ec3e985ed92d8ca94a098a5f9be610819ae05fe569b84c58d747f56c37b2c6cc9af53ef2d40a4f922a4d113637350fe7e47820171515b061275cedde285b148c0798055fdd1a23a4a1c2d773faa4b511d01c2c2224b42a8a57e988ce0cb820a3104fbf1d0b074984f1c3279d204c563b34f4248f5", "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"}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = accept$inet(r10, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10) readv(r11, &(0x7f0000004940)=[{&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/219, 0xdb}, {&(0x7f0000004880)=""/49, 0x31}, {&(0x7f00000048c0)=""/74, 0x4a}], 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000034c0)=ANY=[@ANYBLOB="02c58951265dcd9e0f28a5e0c1670f5ab70256471c52368b3d1be548bb7290a4a49516d721a2d4eebb3c3697cd012e37aa4ef7f9632805bb17a006c258e0131760d938b3e2582460a2eff0d74b97e998fee5641898d41b1169e1e1c41f04afb9b91302a5bb5aa90c32b735aacab8cd797afad3c89bf8973c87f4a0a791f3464eddfab7bda747c9553d224098e980ba75d6", @ANYRESHEX=r9, @ANYBLOB=',wfdnoO', @ANYRESHEX=r10, @ANYBLOB=',\x00']) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 85) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18}, 0x0, 0x7, 0xffffffffffffffff, 0x1) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8340, 0x70) writev(r0, &(0x7f0000001340)=[{&(0x7f0000000080)="b53bfd553593ea0ba487a9eaf8578a6582a64a40770ed5fa9a", 0x19}, {&(0x7f0000000180)="e56a4f98fb4222bedf1fb6f91aea85dcf9d235963f4a1942f6a256c6e2388e79d29bfdecdfe62c685224db9c362bd090cd0f75193e99984d89a17cf617f5fa9d7e29432549b7eb2ab1c12a8674015284e18aeacc700ed01e3b40c92e025548ad94ba99668e15024294fe175fb2e2c2310e6c05ee66f7e80e1790c87e904c64d329a5cf937a42c1c6f7ad51080762abc0000f5ec46a66d6152f302ec295ff2c8d2447743ce6724705cd1465d18dc73e8c4b2c", 0xb2}, {&(0x7f00000000c0)="a1c46f378258b7115294ef388da7800729e28675fc223d7eb29f449992fab1a38f9db35ca5", 0x25}, {&(0x7f0000000240)="ab734030a6f18c38e81749d72fa1583db6b5ab020e3f6fe5b95d7be52b2c52e05a677e0d23d479952855e9dc91608969964e19ac348c73cfe0a872e5d998c0959e5ef9e81e74a76ad856f4aecb10b9ba73fc9d15701081362b7aeff9f6379bb04bbb385796f4066c54e605947304ee6a57debcd06cb00fec59126dc3d0cb28b96023170a115c333fb981c094866bccebeeec14", 0x93}, {&(0x7f0000000300)="9b1e704866e7ba7fba91dad08cd1262fb133f30fe5f442", 0x17}, {&(0x7f0000000340)="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", 0x1000}], 0x6) sync() sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) [ 1454.104641] 9pnet_fd: Insufficient options for proto=fd 00:29:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 86) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat$incfs(r0, &(0x7f0000000180)='.log\x00', 0x400000, 0x1e0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x0, 0x34], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:29:46 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) 00:29:46 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x8) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x80, 0x0, 0x1, 0x9, 0x0, 0x8, 0x2100a, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0xc3}, 0x41001, 0x7, 0x1, 0x6, 0x8, 0x3, 0x0, 0x0, 0x3ff, 0x0, 0x5}, r3, 0x6, r2, 0x2) 00:29:46 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @c}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') [ 1454.589698] FAULT_INJECTION: forcing a failure. [ 1454.589698] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.591101] CPU: 1 UID: 0 PID: 97567 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1454.591122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1454.591131] Call Trace: [ 1454.591137] [ 1454.591142] dump_stack_lvl+0xfa/0x120 [ 1454.591172] should_fail_ex+0x4d7/0x5e0 [ 1454.591193] ? __kernfs_new_node+0xd3/0x870 [ 1454.591208] should_failslab+0xc2/0x120 [ 1454.591225] kmem_cache_alloc_noprof+0x5f/0x470 [ 1454.591255] __kernfs_new_node+0xd3/0x870 [ 1454.591274] ? __pfx___kernfs_new_node+0x10/0x10 [ 1454.591293] ? lock_acquire+0x15e/0x2f0 [ 1454.591311] ? kernfs_root+0x23/0x2a0 [ 1454.591326] ? find_held_lock+0x2b/0x80 [ 1454.591348] ? kernfs_root+0xee/0x2a0 [ 1454.591362] ? lock_release+0xc8/0x290 [ 1454.591378] ? lock_is_held_type+0x9e/0x120 [ 1454.591404] kernfs_new_node+0x13c/0x1e0 [ 1454.591426] __kernfs_create_file+0x55/0x360 [ 1454.591451] sysfs_add_file_mode_ns+0x21c/0x440 [ 1454.591479] ? __pfx_slab_attr_store+0x10/0x10 [ 1454.591506] internal_create_group+0x571/0xeb0 [ 1454.591530] ? __pfx_internal_create_group+0x10/0x10 [ 1454.591557] sysfs_slab_add+0x188/0x210 [ 1454.591581] do_kmem_cache_create+0x235/0x5a0 [ 1454.591608] __kmem_cache_create_args+0x20f/0x360 [ 1454.591625] ? p9_client_create+0xd52/0x11b0 [ 1454.591644] p9_client_create+0xdfc/0x11b0 [ 1454.591666] ? __pfx_p9_client_create+0x10/0x10 [ 1454.591689] ? trace_kmalloc+0x1f/0xb0 [ 1454.591705] ? legacy_get_tree+0x109/0x220 [ 1454.591725] ? vfs_get_tree+0x93/0x340 [ 1454.591745] ? lockdep_init_map_type+0x4b/0x240 [ 1454.591764] ? __raw_spin_lock_init+0x3a/0x110 [ 1454.591788] v9fs_session_init+0x1df/0x17a0 [ 1454.591805] ? do_raw_spin_lock+0x123/0x260 [ 1454.591826] ? find_held_lock+0x2b/0x80 [ 1454.591848] ? __create_object+0x59/0x80 [ 1454.591869] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1454.591888] ? __pfx_v9fs_session_init+0x10/0x10 [ 1454.591905] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1454.591924] ? __create_object+0x59/0x80 [ 1454.591944] ? __kmalloc_cache_noprof+0x369/0x470 [ 1454.591966] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1454.591999] v9fs_mount+0xbc/0x9e0 [ 1454.592025] ? __pfx_v9fs_mount+0x10/0x10 [ 1454.592047] ? cap_capable+0xdb/0x3b0 [ 1454.592073] ? __pfx_v9fs_mount+0x10/0x10 [ 1454.592092] legacy_get_tree+0x109/0x220 [ 1454.592115] vfs_get_tree+0x93/0x340 [ 1454.592135] path_mount+0x122f/0x1d70 [ 1454.592151] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1454.592178] ? __pfx_path_mount+0x10/0x10 [ 1454.592193] ? kmem_cache_free+0x2a1/0x460 [ 1454.592215] ? putname.part.0+0x11b/0x160 [ 1454.592233] ? getname_flags.part.0+0x1c6/0x540 [ 1454.592255] ? putname.part.0+0x11b/0x160 [ 1454.592276] __x64_sys_mount+0x27b/0x300 [ 1454.592291] ? __pfx___x64_sys_mount+0x10/0x10 [ 1454.592314] do_syscall_64+0xbf/0x360 [ 1454.592339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.592355] RIP: 0033:0x7f6852067b19 [ 1454.592368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1454.592382] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1454.592397] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1454.592408] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1454.592417] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1454.592426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1454.592435] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1454.592458] 00:29:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') [ 1454.655225] SLUB: Unable to add cache 9p-fcall-cache-599 to sysfs 00:29:46 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000040)=""/26) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:46 executing program 7: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000300)={0x3, 0x1, 0x800, 0x5, 0x439, 0x20}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@pcr={'pcr', 0x3d, 0x3}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c774b19aff335", @ANYRESHEX=r2, @ANYBLOB=',noextend,\x00']) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) openat$cgroup_ro(r3, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r5}], 0x1, 0x8) dup(r5) openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1454.772808] 9pnet_fd: Insufficient options for proto=fd [ 1454.860909] 9pnet_fd: Insufficient options for proto=fd 00:29:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 87) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:29:47 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) 00:30:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 88) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:30:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r0, @ANYBLOB="de6a98e153a59a6a4c4f89bf417f03bfce4418ae1d28f2", @ANYRESHEX=r1, @ANYBLOB="1361", @ANYRESDEC, @ANYRESHEX]) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:30:00 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) 00:30:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fsuuid=\x00\x00\x004\x00d\x00\x00-\x00\x00\x00\x00-6da\x00-35a7-9db1687d,uid=', @ANYRESDEC=0x0, @ANYBLOB='\b\x00 ']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:30:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:30:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [0x0, 0x0, 0x0, 0x62], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:00 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x2208000, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = fspick(r0, &(0x7f0000000000)='./file0\x00', 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000700)={0x1, [0x0]}) r2 = fork() process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') process_vm_readv(r2, &(0x7f0000000440)=[{}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000000540)=""/240, 0xf0}, {&(0x7f0000000640)=""/39, 0x27}, {&(0x7f0000000680)=""/3, 0x3}], 0x4, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = fork() process_vm_readv(r4, &(0x7f00000009c0)=[{&(0x7f0000000740)=""/209, 0xd1}, {&(0x7f0000000840)=""/57, 0x39}, {&(0x7f0000000880)=""/3, 0x3}, {&(0x7f00000008c0)=""/31, 0x1f}, {&(0x7f0000000900)=""/116, 0x74}, {&(0x7f0000000980)=""/48, 0x30}], 0x6, &(0x7f0000000d80)=[{&(0x7f0000000a40)=""/59, 0x3b}, {&(0x7f0000000a80)=""/29, 0x1d}, {&(0x7f0000000ac0)=""/112, 0x70}, {&(0x7f0000000b40)=""/167, 0xa7}, {&(0x7f0000000c00)=""/245, 0xf5}, {&(0x7f0000000d00)=""/87, 0x57}], 0x6, 0x0) fcntl$setlease(r3, 0x9, 0x2) [ 1468.123961] FAULT_INJECTION: forcing a failure. [ 1468.123961] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.125805] CPU: 1 UID: 0 PID: 98406 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1468.125835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.125847] Call Trace: [ 1468.125855] [ 1468.125864] dump_stack_lvl+0xfa/0x120 [ 1468.125902] should_fail_ex+0x4d7/0x5e0 [ 1468.125932] ? __kernfs_new_node+0xd3/0x870 [ 1468.125953] should_failslab+0xc2/0x120 [ 1468.125976] kmem_cache_alloc_noprof+0x5f/0x470 [ 1468.126026] __kernfs_new_node+0xd3/0x870 [ 1468.126053] ? __pfx___kernfs_new_node+0x10/0x10 [ 1468.126085] ? lock_acquire+0x15e/0x2f0 [ 1468.126109] ? kernfs_root+0x23/0x2a0 [ 1468.126130] ? find_held_lock+0x2b/0x80 [ 1468.126162] ? kernfs_root+0xee/0x2a0 [ 1468.126183] ? lock_release+0xc8/0x290 [ 1468.126204] ? lock_is_held_type+0x9e/0x120 [ 1468.126241] kernfs_new_node+0x13c/0x1e0 [ 1468.126272] __kernfs_create_file+0x55/0x360 [ 1468.126308] sysfs_add_file_mode_ns+0x21c/0x440 [ 1468.126347] ? __pfx_slab_attr_store+0x10/0x10 [ 1468.126385] internal_create_group+0x571/0xeb0 [ 1468.126419] ? __pfx_internal_create_group+0x10/0x10 [ 1468.126458] sysfs_slab_add+0x188/0x210 [ 1468.126492] do_kmem_cache_create+0x235/0x5a0 [ 1468.126530] __kmem_cache_create_args+0x20f/0x360 [ 1468.126554] ? p9_client_create+0xd52/0x11b0 [ 1468.126580] p9_client_create+0xdfc/0x11b0 [ 1468.126610] ? __pfx_p9_client_create+0x10/0x10 [ 1468.126643] ? trace_kmalloc+0x1f/0xb0 [ 1468.126666] ? legacy_get_tree+0x109/0x220 [ 1468.126694] ? vfs_get_tree+0x93/0x340 [ 1468.126722] ? lockdep_init_map_type+0x4b/0x240 [ 1468.126748] ? __raw_spin_lock_init+0x3a/0x110 [ 1468.126783] v9fs_session_init+0x1df/0x17a0 [ 1468.126807] ? do_raw_spin_lock+0x123/0x260 [ 1468.126837] ? find_held_lock+0x2b/0x80 [ 1468.126868] ? __create_object+0x59/0x80 [ 1468.126897] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1468.126924] ? __pfx_v9fs_session_init+0x10/0x10 [ 1468.126948] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1468.126975] ? __create_object+0x59/0x80 [ 1468.127003] ? __kmalloc_cache_noprof+0x369/0x470 [ 1468.127034] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1468.127081] v9fs_mount+0xbc/0x9e0 [ 1468.127110] ? __pfx_v9fs_mount+0x10/0x10 [ 1468.127141] ? cap_capable+0xdb/0x3b0 [ 1468.127177] ? __pfx_v9fs_mount+0x10/0x10 [ 1468.127205] legacy_get_tree+0x109/0x220 [ 1468.127238] vfs_get_tree+0x93/0x340 [ 1468.127266] path_mount+0x122f/0x1d70 [ 1468.127289] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1468.127327] ? __pfx_path_mount+0x10/0x10 [ 1468.127348] ? kmem_cache_free+0x2a1/0x460 [ 1468.127379] ? putname.part.0+0x11b/0x160 [ 1468.127404] ? getname_flags.part.0+0x1c6/0x540 [ 1468.127434] ? putname.part.0+0x11b/0x160 [ 1468.127465] __x64_sys_mount+0x27b/0x300 [ 1468.127486] ? __pfx___x64_sys_mount+0x10/0x10 [ 1468.127519] do_syscall_64+0xbf/0x360 [ 1468.127553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.127576] RIP: 0033:0x7f6852067b19 [ 1468.127593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.127613] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1468.127635] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1468.127650] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1468.127663] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1468.127676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1468.127689] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1468.127721] [ 1468.214943] SLUB: Unable to add cache 9p-fcall-cache-605 to sysfs 00:30:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 89) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:30:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 90) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:30:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:30:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) r1 = syz_open_procfs(0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) 00:30:10 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x63, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x31, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) accept(r0, &(0x7f0000000140)=@ax25={{0x3, @default}, [@remote, @rose, @null, @rose, @bcast, @default, @netrom, @default]}, &(0x7f00000002c0)=0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000300), r3) 00:30:10 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:30:10 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000001000000180000005aec961a727d311795280884bbaf33cd5bf2cd5593d7a5ad7e1853449989e2cffd9695517d1f49226ee0dba93498a0a7a014e863e1fcba2d239c8d4302b1c7fa1b83c07cc9967c5c058ab621cc69829d2c93c3857b93b6fb2c0c330e9128aac42bb45d20e6fae2fd2ac638abc140efd65551f057571832ce142402c6177d1b2be86f1a26fb61bc99a1baf09c5a601147cd5c9ab6ab01e850093ae784b7b58d1eef6f0a6083b00c55c0c2748ddb0b", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x828, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733966662c7266646e6f3d930352f87c6d59c3b75d4f635e25894384b2d1b4", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c6673757529c85c0f46ae2ecb88c187b7a7ff7469643d66000034006400002d000061252d330000372d3964623134003700fca4ce7aa9949dc42b2b115f1bb0355649f54e3b46f0cf6149b36f54641471", @ANYRESDEC=0x0, @ANYBLOB='<\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd9rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',noextend,\x00']) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:10 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) r2 = fork() process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/253, 0xfd}, {&(0x7f0000000440)=""/196, 0xc4}], 0x2, &(0x7f0000000740)=[{&(0x7f0000000540)=""/132, 0x84}, {&(0x7f0000000600)=""/114, 0x72}, {&(0x7f0000000680)=""/137, 0x89}], 0x3, 0x0) 00:30:10 executing program 5: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fsuuid=\x00\x00\x004\x00db\x00-\x00\x00\x00\x00-6da\x00-V5a7-9db1687d,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x21080a0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@version_u}, {@version_9p2000}, {@access_any}, {@dfltuid}, {@msize={'msize', 0x3d, 0xe26b}}], [{@dont_appraise}, {@fowner_gt={'fowner>', r3}}, {@dont_hash}, {@obj_role={'obj_role', 0x3d, 'wfdno'}}, {@dont_appraise}, {@dont_measure}, {@appraise}]}}) [ 1478.224380] 9pnet: Could not find request transport: fd9rfdno=0x0000000000000003 00:30:10 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x100000, &(0x7f0000000340)={'trans=unix,', {[{@loose}], [{@dont_hash}, {@permit_directio}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x10000, 0x2) [ 1478.289127] FAULT_INJECTION: forcing a failure. [ 1478.289127] name failslab, interval 1, probability 0, space 0, times 0 [ 1478.290174] CPU: 1 UID: 0 PID: 99175 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1478.290191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1478.290198] Call Trace: [ 1478.290202] [ 1478.290207] dump_stack_lvl+0xfa/0x120 [ 1478.290233] should_fail_ex+0x4d7/0x5e0 [ 1478.290250] ? __kernfs_new_node+0xd3/0x870 [ 1478.290263] should_failslab+0xc2/0x120 [ 1478.290277] kmem_cache_alloc_noprof+0x5f/0x470 [ 1478.290301] __kernfs_new_node+0xd3/0x870 [ 1478.290315] ? __pfx___kernfs_new_node+0x10/0x10 [ 1478.290330] ? lock_acquire+0x15e/0x2f0 [ 1478.290345] ? kernfs_root+0x23/0x2a0 [ 1478.290356] ? find_held_lock+0x2b/0x80 [ 1478.290374] ? kernfs_root+0xee/0x2a0 [ 1478.290385] ? lock_release+0xc8/0x290 [ 1478.290397] ? lock_is_held_type+0x9e/0x120 [ 1478.290418] kernfs_new_node+0x13c/0x1e0 [ 1478.290435] __kernfs_create_file+0x55/0x360 [ 1478.290454] sysfs_add_file_mode_ns+0x21c/0x440 [ 1478.290476] ? __pfx_slab_attr_store+0x10/0x10 [ 1478.290498] internal_create_group+0x571/0xeb0 [ 1478.290516] ? __pfx_internal_create_group+0x10/0x10 [ 1478.290537] sysfs_slab_add+0x188/0x210 [ 1478.290556] do_kmem_cache_create+0x235/0x5a0 [ 1478.290577] __kmem_cache_create_args+0x20f/0x360 [ 1478.290591] ? p9_client_create+0xd52/0x11b0 [ 1478.290606] p9_client_create+0xdfc/0x11b0 [ 1478.290623] ? __pfx_p9_client_create+0x10/0x10 [ 1478.290640] ? trace_kmalloc+0x1f/0xb0 [ 1478.290653] ? legacy_get_tree+0x109/0x220 [ 1478.290670] ? vfs_get_tree+0x93/0x340 [ 1478.290686] ? lockdep_init_map_type+0x4b/0x240 [ 1478.290700] ? __raw_spin_lock_init+0x3a/0x110 [ 1478.290719] v9fs_session_init+0x1df/0x17a0 [ 1478.290733] ? do_raw_spin_lock+0x123/0x260 [ 1478.290749] ? find_held_lock+0x2b/0x80 [ 1478.290766] ? __create_object+0x59/0x80 [ 1478.290782] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1478.290798] ? __pfx_v9fs_session_init+0x10/0x10 [ 1478.290811] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1478.290825] ? __create_object+0x59/0x80 [ 1478.290841] ? __kmalloc_cache_noprof+0x369/0x470 [ 1478.290864] v9fs_mount+0xbc/0x9e0 [ 1478.290881] ? __pfx_v9fs_mount+0x10/0x10 [ 1478.290897] ? cap_capable+0xdb/0x3b0 [ 1478.290918] ? __pfx_v9fs_mount+0x10/0x10 [ 1478.290933] legacy_get_tree+0x109/0x220 [ 1478.290951] vfs_get_tree+0x93/0x340 [ 1478.290967] path_mount+0x122f/0x1d70 [ 1478.290979] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1478.291005] ? __pfx_path_mount+0x10/0x10 [ 1478.291017] ? kmem_cache_free+0x2a1/0x460 [ 1478.291034] ? putname.part.0+0x11b/0x160 [ 1478.291048] ? getname_flags.part.0+0x1c6/0x540 [ 1478.291065] ? putname.part.0+0x11b/0x160 [ 1478.291081] __x64_sys_mount+0x27b/0x300 [ 1478.291093] ? __pfx___x64_sys_mount+0x10/0x10 [ 1478.291111] do_syscall_64+0xbf/0x360 [ 1478.291132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.291145] RIP: 0033:0x7f6852067b19 [ 1478.291156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.291167] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1478.291179] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1478.291187] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1478.291195] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1478.291202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1478.291209] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1478.291227] [ 1478.323328] SLUB: Unable to add cache 9p-fcall-cache-609 to sysfs 00:30:10 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sync() sync() clone3(&(0x7f0000002240)={0x8000000, &(0x7f00000000c0), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x10}, &(0x7f0000000200)=""/4096, 0x1000, &(0x7f0000001200)=""/4096, &(0x7f0000002200)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x7, 0xaa, 0x7, 0x0, 0x40, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x12c, 0x7f}, 0x18202, 0x3, 0xffffffff, 0x0, 0x4, 0x2d3, 0x8, 0x0, 0x0, 0x0, 0x1f}, r1, 0x3, r0, 0x3) syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') sync() fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) sync() 00:30:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 91) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:30:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x8) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0x2a400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0xbb6}}, './file0\x00'}) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r5}], 0x1, 0x8) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r6}], 0x1, 0x8) sendmmsg$unix(r0, &(0x7f0000000840)=[{{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000000)="3f9fa17930feb25de4072de52d8eb67ff93a795123640c74308f", 0x1a}, {&(0x7f0000000600)="16c21cf515f44df9e1d27b3e9aa4dd8d61cc2295a4836cdfc4785e09736cd6e48a8b6b46e7a0c908a6ad2fcdaf8b1e135ee47312bd83da2e807a1ab55e17c0a735ad8eec36a794992a3c13abdefef1d2215659202c4606234a51bc01d0a964355e87550807255e3330026c5bd2da1bb6ed0d835323774c79980e509a31418d93ff4f00ca8f6b0e6b3d242cce4bc43291ab63af9ee546a0c34fc8aade2317b49e7699162229e6b72385e680334ee22aadf77149db6c3b79c05eb0204d6dc5f3c0b1761a1b0f51c0a9c947073c953afeca0d4de310e7a4", 0xd6}], 0x2, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r3, r1, 0xffffffffffffffff, r4]}}], 0x30, 0x20000000}}, {{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=[@rights={{0x18, 0x1, 0x1, [r5, r1]}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x30, 0x8000}}], 0x2, 0x40) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000180)) 00:30:10 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x65, 0x0, 0xb6af340468dd3e00, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f6511de79894e2529b57874656e642c00d3478285f1acb124d61a8ad7af20ff47fdf8bd0ff3526425a8eb4b5cd4ccb0ed74e5f4408801f32c08945537cd4b757676a8fc648b0a274478ea8fd32f1cfe9dc7d54e3e6fe4f4423fa58e9ec08a5523998d98e8e1fa1b54a308cc747ec1e9116665c12101690f9c3a5e639e6546bd8d748ea4b0ec47aec106739019621efe06b4f08303e988bd49a8"]) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x3, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e269dff53b7c1109fdf0769099e91f6c5fe6a1ac141e8eeadf5d7d7ed5e5b1de4612a74b24eab22dfc5aba3527c40fb0a0c1ded2dbb9c1f915c66f3893f73a85ccece", 0x43, 0x9}, {&(0x7f0000000580)="5112b73874d8caba509ace74110cc65ebcd4bdc85074e36a21b58256e0a32ea4891d5a3291012ab0eedcf46332c556afba6fb3999b2633d2a8be975cba8d1cb27a340223f8475581ee486c225a183974ddbe0c4a0987cb2415428a35bda03015aa45e653d35a8b5ab393906fee395755e054c7f292b52eba6a3f4f2eaeedb9f31465de899d6741df8e43442ee17b72b83beea4a611885dda8247634dcacd9c6d4a4fc4d58abe03811f5dfbc2311a3ac54957c78fadf7290797cdf393ec546fd66fdd32f5eb05013f8ddc99e485c62f2298f7d80d714e9f", 0xd7, 0x4}, {&(0x7f0000000680)="f4e7d817a26bf8159dfb6412e241b04cd71f5979efa8517df0b2a7570772686de8823e0dfad4dc030264d1bb6c180fea98eefe48a09e215b5418ee802aacde5c33244c628b01a074d6240894f259474dc048900a29e5026f118254a378c4a51183362495d1c78fb5ba1606dd18ac1d5d76a1b1eaca2931d3d1d44ad01528acd5144f57383b732c", 0x87}], 0x80000, &(0x7f0000000740)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x67, 0x31]}}, {@huge_never}], [{@pcr={'pcr', 0x3d, 0x29}}, {@subj_type={'subj_type', 0x3d, '&)]!,.-+Z'}}, {@subj_role={'subj_role', 0x3d, '/dev/input/event#\x00'}}]}) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x8) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r5}], 0x1, 0x8) dup(r5) openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 00:30:10 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x210003, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000004, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cache_loose}], [{@uid_gt={'uid>', 0xee00}}, {@fsname={'fsname', 0x3d, 'wfdno'}}, {@context={'context', 0x3d, 'root'}}]}}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:30:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="ffff66646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) 00:30:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xa}, 0xe00, 0x0, 0x0, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0x4) sync() sync() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') sync() openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000001c0)) sync() fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0xfffffffe, 0x100]) 00:30:11 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x31, 0xa], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:11 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = getpgid(r0) process_vm_readv(r2, &(0x7f0000000540)=[{&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000080)=""/95, 0x5f}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/17, 0x11}], 0x6, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f00000041c0)=""/4096, 0x1000}], 0x3, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) [ 1478.941261] 9pnet_fd: Insufficient options for proto=fd 00:30:11 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 92) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:30:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 00:30:11 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x223810, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000180), &(0x7f0000000300), 0x2, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r4 = eventfd2(0x0, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f00000002c0)) r5 = openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) signalfd(r5, &(0x7f0000000240)={[0x1]}, 0x8) sendfile(r0, r1, &(0x7f0000000280)=0x9e, 0x8) lseek(r5, 0x1db85d61, 0x3) 00:30:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) sync() 00:30:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x88, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:30:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000440)=""/4107, 0x100b}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 00:30:22 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fsuuid=f\x00\x004\x00d\x00\x00-o\x00\x00\x00-6da4-3\x00\x007-94b1\x00\x007\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB="89c382a0c7f9cb31ff1d5227160a2ca929c3f20ef76a58fdeb7ac7096e4b197f9d8f0fb806b190c204d1a41253c26720bca03cb486c62f05b6fa3a8369240c9cec9c63e75308009d814b47bceefd0a5f75171f9b499feb0ab03feaae24bb1d9f6400b8c8637c1679b58ed50f492daf074c94c06761bcc0288c0d09e61b3503a2dab68a86132b9bcb566e8ab28450380f6b0a50491f0ad01552a9cd9a9aed381eafe9f577990a"]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) tee(r2, r1, 0x800, 0xd) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x4) 00:30:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2cae0d7b00003d", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) faccessat(r0, &(0x7f0000000180)='./file0\x00', 0x198) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:30:22 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() r2 = fork() r3 = getpid() clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/236, 0xec}], 0x1, &(0x7f0000000580)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x70}}], 0x1, 0x2012, &(0x7f0000000680)={r4, r5+60000000}) r7 = getpgid(r1) r8 = fcntl$getown(r0, 0x9) clone3(&(0x7f0000000700)={0x2100000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x1c}, &(0x7f00000021c0)=""/4096, 0x1000, &(0x7f0000000100)=""/68, &(0x7f00000006c0)=[r2, r1, r3, r1, r6, r7, r1, r8], 0x8}, 0x58) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r9, 0x400, 0x0) fcntl$setlease(r9, 0x9, 0x2) 00:30:22 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d8822a76864d12734cac667ec299cab2609000092", @ANYRESHEX, @ANYBLOB=',fsuuid=f\x00\x004\x00d\x00\x00-\x00\x00\x00\x00-6da4-3\x00\x007-9db16\x007\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) statx(r1, &(0x7f0000000400)='./file0\x00', 0x800, 0x100, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000640)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@access_uid={'access', 0x3d, r4}}, {@posixacl}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@cache_mmap}, {@aname={'aname', 0x3d, 'wfdno'}}, {@noextend}, {@cache_mmap}], [{@euid_eq={'euid', 0x3d, r6}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r7, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r8, &(0x7f0000000300)=@known='trusted.overlay.metacopy\x00') r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r9, 0x400, 0x0) fcntl$setlease(r9, 0x9, 0x2) write$P9_RLERRORu(r9, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x10) 00:30:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 93) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1489.950932] 9pnet_fd: Insufficient options for proto=fd 00:30:22 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x100000001}}, './file0\x00'}) dup2(r1, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:30:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 94) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:30:22 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64, 0x38], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x63, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x33, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x8000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:22 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) r2 = getpgid(0x0) read$char_usb(r1, &(0x7f00000021c0)=""/4096, 0x1000) ptrace(0x11, r2) 00:30:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000140)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000040)=0x80) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1490.544560] FAULT_INJECTION: forcing a failure. [ 1490.544560] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.546248] CPU: 0 UID: 0 PID: 101819 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1490.546278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1490.546291] Call Trace: [ 1490.546299] [ 1490.546307] dump_stack_lvl+0xfa/0x120 [ 1490.546347] should_fail_ex+0x4d7/0x5e0 [ 1490.546377] ? __kernfs_new_node+0xd3/0x870 [ 1490.546405] should_failslab+0xc2/0x120 [ 1490.546429] kmem_cache_alloc_noprof+0x5f/0x470 [ 1490.546472] __kernfs_new_node+0xd3/0x870 [ 1490.546499] ? __pfx___kernfs_new_node+0x10/0x10 [ 1490.546527] ? lock_acquire+0x15e/0x2f0 [ 1490.546552] ? kernfs_root+0x23/0x2a0 [ 1490.546573] ? find_held_lock+0x2b/0x80 [ 1490.546605] ? kernfs_root+0xee/0x2a0 [ 1490.546626] ? lock_release+0xc8/0x290 [ 1490.546647] ? lock_is_held_type+0x9e/0x120 [ 1490.546685] kernfs_new_node+0x13c/0x1e0 [ 1490.546717] __kernfs_create_file+0x55/0x360 [ 1490.546753] sysfs_add_file_mode_ns+0x21c/0x440 [ 1490.546792] ? __pfx_slab_attr_store+0x10/0x10 [ 1490.546831] internal_create_group+0x571/0xeb0 [ 1490.546865] ? __pfx_internal_create_group+0x10/0x10 [ 1490.546904] sysfs_slab_add+0x188/0x210 [ 1490.546939] do_kmem_cache_create+0x235/0x5a0 [ 1490.546977] __kmem_cache_create_args+0x20f/0x360 [ 1490.547008] ? p9_client_create+0xd52/0x11b0 [ 1490.547034] p9_client_create+0xdfc/0x11b0 [ 1490.547065] ? __pfx_p9_client_create+0x10/0x10 [ 1490.547098] ? trace_kmalloc+0x1f/0xb0 [ 1490.547122] ? legacy_get_tree+0x109/0x220 [ 1490.547150] ? vfs_get_tree+0x93/0x340 [ 1490.547178] ? lockdep_init_map_type+0x4b/0x240 [ 1490.547205] ? __raw_spin_lock_init+0x3a/0x110 [ 1490.547240] v9fs_session_init+0x1df/0x17a0 [ 1490.547265] ? do_raw_spin_lock+0x123/0x260 [ 1490.547295] ? find_held_lock+0x2b/0x80 [ 1490.547326] ? __create_object+0x59/0x80 [ 1490.547356] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1490.547384] ? __pfx_v9fs_session_init+0x10/0x10 [ 1490.547408] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1490.547435] ? __create_object+0x59/0x80 [ 1490.547463] ? __kmalloc_cache_noprof+0x369/0x470 [ 1490.547507] v9fs_mount+0xbc/0x9e0 [ 1490.547536] ? __pfx_v9fs_mount+0x10/0x10 [ 1490.547567] ? cap_capable+0xdb/0x3b0 [ 1490.547604] ? __pfx_v9fs_mount+0x10/0x10 [ 1490.547632] legacy_get_tree+0x109/0x220 [ 1490.547665] vfs_get_tree+0x93/0x340 [ 1490.547693] path_mount+0x122f/0x1d70 [ 1490.547716] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1490.547755] ? __pfx_path_mount+0x10/0x10 [ 1490.547776] ? kmem_cache_free+0x2a1/0x460 [ 1490.547807] ? putname.part.0+0x11b/0x160 [ 1490.547834] ? getname_flags.part.0+0x1c6/0x540 [ 1490.547864] ? putname.part.0+0x11b/0x160 [ 1490.547894] __x64_sys_mount+0x27b/0x300 [ 1490.547916] ? __pfx___x64_sys_mount+0x10/0x10 [ 1490.547949] do_syscall_64+0xbf/0x360 [ 1490.547986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.548008] RIP: 0033:0x7f6852067b19 [ 1490.548026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1490.548046] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1490.548068] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1490.548083] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1490.548096] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1490.548110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1490.548122] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1490.548155] [ 1490.615579] SLUB: Unable to add cache 9p-fcall-cache-621 to sysfs 00:30:22 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fsuuid=f\x00\x004\x00d\x00\x00-\x00\x00\x00\x00-6da4-3\x00\x007-9db16\x007\x00,uid=', @ANYRESDEC=0x0, @ANYRESOCT=r0]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r5) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f00000008c0)=0xe8) r10 = fork() process_vm_readv(r10, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000500)=0x0) r12 = open(&(0x7f0000000840)='./file0\x00', 0x15d040, 0x40) kcmp$KCMP_EPOLL_TFD(r10, r11, 0x7, r2, &(0x7f0000000880)={r12, r0, 0x400}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x2044012, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}, {@cache_fscache}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x20000000000}}, {@debug={'debug', 0x3d, 0x4}}, {@access_any}, {@fscache}, {@cache_mmap}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'net/arp\x00'}}, {@pcr={'pcr', 0x3d, 0x33}}, {@fowner_lt={'fowner<', r5}}, {@uid_gt={'uid>', r6}}, {@uid_lt={'uid<', r8}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, '--.$%&\x15,[{-!-\\\'.(&'}}, {@uid_lt={'uid<', r9}}]}}) openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:34 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') process_vm_readv(r0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f0000000540)=""/172, 0xac}, {&(0x7f0000000600)=""/122, 0x7a}], 0x5, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/129, 0x81}, {&(0x7f00000007c0)=""/163, 0xa3}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000880)=""/111, 0x6f}, {&(0x7f0000000900)=""/184, 0xb8}, {&(0x7f00000009c0)=""/177, 0xb1}], 0x6, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6, 0x37, 0x81, 0x80, 0x0, 0x80, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x0, 0x1ed}, 0x80, 0xc24d, 0x3f, 0x0, 0x3, 0x100, 0x7ff, 0x0, 0x7, 0x0, 0x7}, r0, 0x3, r1, 0xb) r2 = fork() process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) 00:30:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',\afdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f470c7800c21b7d55"]) r2 = open_tree(r1, &(0x7f0000000180)='./file0\x00', 0x80000) readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/189, 0xbd) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000002c0)=@v2={0x2, @aes128, 0x4, '\x00', @a}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 95) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:30:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x65, 0x0, 0xb6af340468dd3e00, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f6511de79894e2529b57874656e642c00d3478285f1acb124d61a8ad7af20ff47fdf8bd0ff3526425a8eb4b5cd4ccb0ed74e5f4408801f32c08945537cd4b757676a8fc648b0a274478ea8fd32f1cfe9dc7d54e3e6fe4f4423fa58e9ec08a5523998d98e8e1fa1b54a308cc747ec1e9116665c12101690f9c3a5e639e6546bd8d748ea4b0ec47aec106739019621efe06b4f08303e988bd49a8"]) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x3, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e269dff53b7c1109fdf0769099e91f6c5fe6a1ac141e8eeadf5d7d7ed5e5b1de4612a74b24eab22dfc5aba3527c40fb0a0c1ded2dbb9c1f915c66f3893f73a85ccece", 0x43, 0x9}, {&(0x7f0000000580)="5112b73874d8caba509ace74110cc65ebcd4bdc85074e36a21b58256e0a32ea4891d5a3291012ab0eedcf46332c556afba6fb3999b2633d2a8be975cba8d1cb27a340223f8475581ee486c225a183974ddbe0c4a0987cb2415428a35bda03015aa45e653d35a8b5ab393906fee395755e054c7f292b52eba6a3f4f2eaeedb9f31465de899d6741df8e43442ee17b72b83beea4a611885dda8247634dcacd9c6d4a4fc4d58abe03811f5dfbc2311a3ac54957c78fadf7290797cdf393ec546fd66fdd32f5eb05013f8ddc99e485c62f2298f7d80d714e9f", 0xd7, 0x4}, {&(0x7f0000000680)="f4e7d817a26bf8159dfb6412e241b04cd71f5979efa8517df0b2a7570772686de8823e0dfad4dc030264d1bb6c180fea98eefe48a09e215b5418ee802aacde5c33244c628b01a074d6240894f259474dc048900a29e5026f118254a378c4a51183362495d1c78fb5ba1606dd18ac1d5d76a1b1eaca2931d3d1d44ad01528acd5144f57383b732c", 0x87}], 0x80000, &(0x7f0000000740)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x67, 0x31]}}, {@huge_never}], [{@pcr={'pcr', 0x3d, 0x29}}, {@subj_type={'subj_type', 0x3d, '&)]!,.-+Z'}}, {@subj_role={'subj_role', 0x3d, '/dev/input/event#\x00'}}]}) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x8) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r5}], 0x1, 0x8) dup(r5) openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f657874656e642b00f2e7a025ab64a79f6c4be23d116c8fbb96c80c05c52fc766a073095dc200"/51]) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYBLOB="05a9", @ANYBLOB="2c008b0311206efeb5a314ca1d687f7c74a35172301859a104b24b"]) syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) futex(&(0x7f0000000000)=0x4000, 0x3, 0x0, 0x0, &(0x7f0000000100), 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:30:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1100c3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x65, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x31, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x29) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x18) r3 = syz_io_uring_complete(0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30f) r4 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x440400, 0x1) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r5}], 0x1, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) poll(&(0x7f0000000300)=[{}], 0x1, 0x8) write(0xffffffffffffffff, &(0x7f00000005c0)="516345d903328b797303dd475b53d81bf04e4ff273d79c49cec8c80530f86b4becd0efc9ab9cf64342598e4f79c42655bcd944b77eb385bdcc8d566f081fabc6e5ba60e2372892dde48670cd9d9987bdb82ad37071a67c9ebeb5a498fc5b783d18746a14c05097d0d29606d932dc2770095d7f5bb12565717fd801a50661b6a0d3b91436c84ac22015f975e75876f8ebcd1ef1887629", 0x96) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r6}], 0x1, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000380)={"471875033c5f4cf2faa1f923962ad82a", 0x0, 0x0, {0xabf, 0x2}, {0x7}, 0x4c46, [0x4, 0x1, 0x3, 0x80, 0x789, 0x7fff, 0x20, 0x639f, 0x8, 0x1, 0x7, 0x5, 0x80000001, 0x80d, 0x3, 0x4]}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000480)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f00000004c0)={"b6058a9629732ec6e9f940a055274dde", r7, r8, {0xffffffffffff4fa9, 0x88}, {0x2, 0x9}, 0x6, [0x200, 0x4, 0x8, 0x7fffffff, 0x7f, 0xfffffffffffffffc, 0xab8, 0x5, 0x400, 0x0, 0x4, 0x2, 0x400, 0x3, 0x101, 0x40]}) 00:30:34 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7f, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0xc032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xf, r0, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) [ 1502.560470] 9pnet_fd: Insufficient options for proto=fd [ 1502.598966] 9pnet_fd: Insufficient options for proto=fd 00:30:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 96) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1502.916977] FAULT_INJECTION: forcing a failure. [ 1502.916977] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.919004] CPU: 1 UID: 0 PID: 102930 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1502.919038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1502.919052] Call Trace: [ 1502.919060] [ 1502.919069] dump_stack_lvl+0xfa/0x120 [ 1502.919112] should_fail_ex+0x4d7/0x5e0 [ 1502.919145] ? __kernfs_new_node+0xd3/0x870 [ 1502.919169] should_failslab+0xc2/0x120 [ 1502.919195] kmem_cache_alloc_noprof+0x5f/0x470 [ 1502.919242] __kernfs_new_node+0xd3/0x870 [ 1502.919272] ? __pfx___kernfs_new_node+0x10/0x10 [ 1502.919303] ? lock_acquire+0x15e/0x2f0 [ 1502.919330] ? kernfs_root+0x23/0x2a0 [ 1502.919353] ? find_held_lock+0x2b/0x80 [ 1502.919388] ? kernfs_root+0xee/0x2a0 [ 1502.919411] ? lock_release+0xc8/0x290 [ 1502.919436] ? lock_is_held_type+0x9e/0x120 [ 1502.919477] kernfs_new_node+0x13c/0x1e0 [ 1502.919513] __kernfs_create_file+0x55/0x360 [ 1502.919552] sysfs_add_file_mode_ns+0x21c/0x440 [ 1502.919596] ? __pfx_slab_attr_store+0x10/0x10 [ 1502.919639] internal_create_group+0x571/0xeb0 [ 1502.919677] ? __pfx_internal_create_group+0x10/0x10 [ 1502.919720] sysfs_slab_add+0x188/0x210 [ 1502.919758] do_kmem_cache_create+0x235/0x5a0 [ 1502.919801] __kmem_cache_create_args+0x20f/0x360 [ 1502.919828] ? p9_client_create+0xd52/0x11b0 [ 1502.919857] p9_client_create+0xdfc/0x11b0 [ 1502.919891] ? __pfx_p9_client_create+0x10/0x10 [ 1502.919928] ? trace_kmalloc+0x1f/0xb0 [ 1502.919954] ? legacy_get_tree+0x109/0x220 [ 1502.919985] ? vfs_get_tree+0x93/0x340 [ 1502.920016] ? lockdep_init_map_type+0x4b/0x240 [ 1502.920046] ? __raw_spin_lock_init+0x3a/0x110 [ 1502.920088] v9fs_session_init+0x1df/0x17a0 [ 1502.920115] ? do_raw_spin_lock+0x123/0x260 [ 1502.920148] ? find_held_lock+0x2b/0x80 [ 1502.920182] ? __create_object+0x59/0x80 [ 1502.920214] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1502.920245] ? __pfx_v9fs_session_init+0x10/0x10 [ 1502.920271] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1502.920301] ? __create_object+0x59/0x80 [ 1502.920333] ? __kmalloc_cache_noprof+0x369/0x470 [ 1502.920367] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1502.920418] v9fs_mount+0xbc/0x9e0 [ 1502.920451] ? __pfx_v9fs_mount+0x10/0x10 [ 1502.920485] ? cap_capable+0xdb/0x3b0 [ 1502.920526] ? __pfx_v9fs_mount+0x10/0x10 [ 1502.920557] legacy_get_tree+0x109/0x220 [ 1502.920593] vfs_get_tree+0x93/0x340 [ 1502.920625] path_mount+0x122f/0x1d70 [ 1502.920649] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1502.920692] ? __pfx_path_mount+0x10/0x10 [ 1502.920715] ? kmem_cache_free+0x2a1/0x460 [ 1502.920750] ? putname.part.0+0x11b/0x160 [ 1502.920778] ? getname_flags.part.0+0x1c6/0x540 [ 1502.920812] ? putname.part.0+0x11b/0x160 [ 1502.920846] __x64_sys_mount+0x27b/0x300 [ 1502.920869] ? __pfx___x64_sys_mount+0x10/0x10 [ 1502.920906] do_syscall_64+0xbf/0x360 [ 1502.920945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.920969] RIP: 0033:0x7f6852067b19 [ 1502.920988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1502.921010] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1502.921034] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1502.921050] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1502.921065] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1502.921079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1502.921093] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1502.921129] 00:30:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:30:35 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = fork() process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x35}, &(0x7f0000000100)=""/33, 0x21, &(0x7f0000000440)=""/88, &(0x7f0000000140)=[r0, r0, r2, 0x0], 0x4, {r1}}, 0x58) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:30:35 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/arp\x00') openat(r1, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1503.095286] SLUB: Unable to add cache 9p-fcall-cache-628 to sysfs [ 1503.225993] 9pnet_fd: Insufficient options for proto=fd 00:30:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000180)) 00:30:35 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [0x31], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x32, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) move_mount(r3, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0/file0\x00', 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB]) mkdirat(r3, &(0x7f0000000340)='./file0\x00', 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x65, 0x0, 0xb6af340468dd3e00, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f6511de79894e2529b57874656e642c00d3478285f1acb124d61a8ad7af20ff47fdf8bd0ff3526425a8eb4b5cd4ccb0ed74e5f4408801f32c08945537cd4b757676a8fc648b0a274478ea8fd32f1cfe9dc7d54e3e6fe4f4423fa58e9ec08a5523998d98e8e1fa1b54a308cc747ec1e9116665c12101690f9c3a5e639e6546bd8d748ea4b0ec47aec106739019621efe06b4f08303e988bd49a8"]) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x3, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e269dff53b7c1109fdf0769099e91f6c5fe6a1ac141e8eeadf5d7d7ed5e5b1de4612a74b24eab22dfc5aba3527c40fb0a0c1ded2dbb9c1f915c66f3893f73a85ccece", 0x43, 0x9}, {&(0x7f0000000580)="5112b73874d8caba509ace74110cc65ebcd4bdc85074e36a21b58256e0a32ea4891d5a3291012ab0eedcf46332c556afba6fb3999b2633d2a8be975cba8d1cb27a340223f8475581ee486c225a183974ddbe0c4a0987cb2415428a35bda03015aa45e653d35a8b5ab393906fee395755e054c7f292b52eba6a3f4f2eaeedb9f31465de899d6741df8e43442ee17b72b83beea4a611885dda8247634dcacd9c6d4a4fc4d58abe03811f5dfbc2311a3ac54957c78fadf7290797cdf393ec546fd66fdd32f5eb05013f8ddc99e485c62f2298f7d80d714e9f", 0xd7, 0x4}, {&(0x7f0000000680)="f4e7d817a26bf8159dfb6412e241b04cd71f5979efa8517df0b2a7570772686de8823e0dfad4dc030264d1bb6c180fea98eefe48a09e215b5418ee802aacde5c33244c628b01a074d6240894f259474dc048900a29e5026f118254a378c4a51183362495d1c78fb5ba1606dd18ac1d5d76a1b1eaca2931d3d1d44ad01528acd5144f57383b732c", 0x87}], 0x80000, &(0x7f0000000740)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x67, 0x31]}}, {@huge_never}], [{@pcr={'pcr', 0x3d, 0x29}}, {@subj_type={'subj_type', 0x3d, '&)]!,.-+Z'}}, {@subj_role={'subj_role', 0x3d, '/dev/input/event#\x00'}}]}) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x8) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r5}], 0x1, 0x8) dup(r5) openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 97) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:30:35 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c502e9c18b26c26"]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@access_user}, {@cache_fscache}, {@access_any}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1000}}, {@posixacl}, {@uname={'uname', 0x3d, 'wfdno'}}], [{@fowner_lt={'fowner<', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@hash}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x4c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac04, 0xfac0f, 0xfac03]}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@cache_fscache}, {@cache_none}, {@uname={'uname', 0x3d, 'cache=fscache'}}], [{@pcr={'pcr', 0x3d, 0x3}}, {@fowner_gt={'fowner>', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@seclabel}, {@uid_gt}, {@euid_eq}, {@obj_user={'obj_user', 0x3d, 'hash'}}, {@euid_lt={'euid<', 0xee00}}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r9, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x29}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x30, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1503.389613] audit: type=1400 audit(1752539435.537:12): avc: denied { relabelto } for pid=103203 comm="syz-executor.6" name="file0" dev="sda" ino=16195 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:acpi_bios_t:s0 tclass=dir permissive=1 00:30:35 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') sync() fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:30:35 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1503.663078] 9pnet_fd: Insufficient options for proto=fd 00:30:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 98) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:30:47 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="66246e613d1a4ae20a57eddd6a3b4243cad5a576ed194cda541b5bbeee7d36ce84270d56850be15e8da703e37d043e1a41c23d55031646a2a9ca0518c748d06ddb426a8b0f77387278dfd039c2c9e4cef22abff56572f2289dad5b981c71eac5827c10260cbaa1a309e390413fa49722ea64a3a575fe6f767454c501ba1a356a81666866f693acd8e4c91412e8169e231f88eff0ccd6f416e0fc1de0064e610be19d9858ab3a4075ba4d7ca2778eb3813b5ec8751661514a8f3321bee5e2833f58c744130f41002bba5e871ff5d94ae404ad14827d61ef56acf4340c758bfff848a456a41f78a6646c412b74418c8a2bd341", @ANYRESHEX, @ANYBLOB=',fsuuid=f\x00\x004\x00d\x00\x00-\x00\x00\x00\x00-6da4-3\x00\x007-9db1\x00\x007\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') 00:30:47 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = fork() process_vm_readv(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) clone3(&(0x7f0000000440)={0x200, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x2c}, &(0x7f00000021c0)=""/4096, 0x1000, &(0x7f0000000100)=""/12, &(0x7f0000000140)=[r1, r0, r0, r2, r0], 0x5, {r3}}, 0x58) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x9, 0x2) 00:30:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x65, 0x0, 0xb6af340468dd3e00, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f6511de79894e2529b57874656e642c00d3478285f1acb124d61a8ad7af20ff47fdf8bd0ff3526425a8eb4b5cd4ccb0ed74e5f4408801f32c08945537cd4b757676a8fc648b0a274478ea8fd32f1cfe9dc7d54e3e6fe4f4423fa58e9ec08a5523998d98e8e1fa1b54a308cc747ec1e9116665c12101690f9c3a5e639e6546bd8d748ea4b0ec47aec106739019621efe06b4f08303e988bd49a8"]) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x3, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e269dff53b7c1109fdf0769099e91f6c5fe6a1ac141e8eeadf5d7d7ed5e5b1de4612a74b24eab22dfc5aba3527c40fb0a0c1ded2dbb9c1f915c66f3893f73a85ccece", 0x43, 0x9}, {&(0x7f0000000580)="5112b73874d8caba509ace74110cc65ebcd4bdc85074e36a21b58256e0a32ea4891d5a3291012ab0eedcf46332c556afba6fb3999b2633d2a8be975cba8d1cb27a340223f8475581ee486c225a183974ddbe0c4a0987cb2415428a35bda03015aa45e653d35a8b5ab393906fee395755e054c7f292b52eba6a3f4f2eaeedb9f31465de899d6741df8e43442ee17b72b83beea4a611885dda8247634dcacd9c6d4a4fc4d58abe03811f5dfbc2311a3ac54957c78fadf7290797cdf393ec546fd66fdd32f5eb05013f8ddc99e485c62f2298f7d80d714e9f", 0xd7, 0x4}, {&(0x7f0000000680)="f4e7d817a26bf8159dfb6412e241b04cd71f5979efa8517df0b2a7570772686de8823e0dfad4dc030264d1bb6c180fea98eefe48a09e215b5418ee802aacde5c33244c628b01a074d6240894f259474dc048900a29e5026f118254a378c4a51183362495d1c78fb5ba1606dd18ac1d5d76a1b1eaca2931d3d1d44ad01528acd5144f57383b732c", 0x87}], 0x80000, &(0x7f0000000740)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x67, 0x31]}}, {@huge_never}], [{@pcr={'pcr', 0x3d, 0x29}}, {@subj_type={'subj_type', 0x3d, '&)]!,.-+Z'}}, {@subj_role={'subj_role', 0x3d, '/dev/input/event#\x00'}}]}) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x8) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r5}], 0x1, 0x8) dup(r5) openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='attr/prev\x00') sync() sync() sync() fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:30:47 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9a5d87baf65bd41e00d8bf0549378e26cd4e31e40000c67ea558ea10e7d3a2d391d43e1a7f2103ed8b4f57bbce3ab0bfa2f6040e6fdb05c1e0ea332e9a1bc297d6d5b25bd07081e3eb3c0933ed98de2438f7ad98c601ea50091727c50408bc5106de579b374fa9ce8509aaf0eb9a919949e979c3f55c83638523571076ae1ef69469e6c73f4079081d5319d72bac521fbd54386dfde9f04335155dd474968010a2778b8a1f97d334a0669921dcb4578c5d462831ea2447e7ba74178a2379f813d79d3854f887601df1c8f0df18e48064362585a4de07b03e8b79e8060a11c74a1034fbdef6e2c9923df9bb0401aaa7442d334563c3c1"]) r2 = socket(0xa, 0x1, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000001c0)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x6]}, 0x8, 0x80000) write$P9_RVERSION(r3, &(0x7f00000002c0)={0x13, 0x65, 0xffff, 0xffffff01, 0x6, '9P2000'}, 0x13) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000440)={{}, {0x3}, 0x0, 0x0, 0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)="d41b4bad9e99b7460a234c12c71b5be98f74aa2e43b71b23f416fb5ff43ae71957e8cd46433b886c21e5f2f1a60e8b5503de7583ab07d72fac93156c9c22c3eae3228346cba51e2588fd4323292b8f4dc92d153e5f06fbb5ea8deba00d267f69f6395f197b56f66f123bb8aa756bedff926f14f1", 0x74, 0x0, &(0x7f0000000580)={0x2, 0x109f, {0x1, 0xc, 0x92, "4e3652e634d8f4cd2dce2f58a034fd17085138ab43b1d908f662f404bb892b0cfe6412f3a3ddd1c6f396377992f4c180fceff0dac591ce8fd56280fc6acc84d303235094d9ebc60c99a4b5122d8e631d6c189191c0aadda73c2bffcbe7da4334128c81d364d6bbb4629027bbf9debb4558eeb6a43871aa1101985be79b2f9441b050736e2d6c7261fa6366c55e21a86a83da", 0x1000, "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"}, 0xcf, "1428b2dfa5f2f9bdfa7bdda06bb82c2bca23c087e807c629b487e896c6c538e65aad0f10cb4209a3703a61257c61f36c96f15c08e381875e4e256af16333ff86fb564158d63b6ee95975f095a3c6ae2b0a02e194b8f2a7e00d20e84438f05f725e7f6a55173560d7f51f561bc157c9997fbe9c5690e76545bb00c2c4216e3cf165c5e9af30f8fa2948c6f9ba3bdd422670c72be78390f5cd51815e95eb0e3335a2b64edcc98ded7ba86f49e5f6b624202ab80348a9e3728765ddce4d2f7b1bc800cdef4f1ae3fdb803765c83ea9121"}, 0x117a}) poll(&(0x7f0000000300)=[{r5}], 0x1, 0x8) sendto(r4, &(0x7f00000004c0)="72114587503e7798c4e25df1b24a8a1599ec65dbb345d07d452c8a567ba1816a5aca99fb4de5996f773bc4c01231007ac1043ba4866ab739201d40d9a5aafbb50f015a343ba208d50d4f2d6b78d4a157c3fd716159bc22bc49dfd1672141f1279905a347edbca16c74b44576df0f2dd97d0c79a25f601df0c9316b9e2c4bd1ef", 0x80, 0x40, &(0x7f0000001840)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) dup2(0xffffffffffffffff, r5) openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:30:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000001200), 0x1800) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000200)={{r3}, "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"}) [ 1515.930495] FAULT_INJECTION: forcing a failure. [ 1515.930495] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.932567] CPU: 1 UID: 0 PID: 103978 Comm: syz-executor.3 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) [ 1515.932597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1515.932610] Call Trace: [ 1515.932618] [ 1515.932626] dump_stack_lvl+0xfa/0x120 [ 1515.932666] should_fail_ex+0x4d7/0x5e0 [ 1515.932696] ? __kernfs_new_node+0xd3/0x870 [ 1515.932718] should_failslab+0xc2/0x120 [ 1515.932742] kmem_cache_alloc_noprof+0x5f/0x470 [ 1515.932785] __kernfs_new_node+0xd3/0x870 [ 1515.932812] ? __pfx___kernfs_new_node+0x10/0x10 [ 1515.932840] ? lock_acquire+0x15e/0x2f0 [ 1515.932865] ? kernfs_root+0x23/0x2a0 [ 1515.932886] ? find_held_lock+0x2b/0x80 [ 1515.932917] ? kernfs_root+0xee/0x2a0 [ 1515.932938] ? lock_release+0xc8/0x290 [ 1515.932960] ? lock_is_held_type+0x9e/0x120 [ 1515.933005] kernfs_new_node+0x13c/0x1e0 [ 1515.933037] __kernfs_create_file+0x55/0x360 [ 1515.933073] sysfs_add_file_mode_ns+0x21c/0x440 [ 1515.933113] ? __pfx_slab_attr_store+0x10/0x10 [ 1515.933151] internal_create_group+0x571/0xeb0 [ 1515.933185] ? __pfx_internal_create_group+0x10/0x10 [ 1515.933224] sysfs_slab_add+0x188/0x210 [ 1515.933258] do_kmem_cache_create+0x235/0x5a0 [ 1515.933315] __kmem_cache_create_args+0x20f/0x360 [ 1515.933348] ? p9_client_create+0xd52/0x11b0 [ 1515.933385] p9_client_create+0xdfc/0x11b0 [ 1515.933420] ? __pfx_p9_client_create+0x10/0x10 [ 1515.933453] ? trace_kmalloc+0x1f/0xb0 [ 1515.933476] ? legacy_get_tree+0x109/0x220 [ 1515.933505] ? vfs_get_tree+0x93/0x340 [ 1515.933537] ? lockdep_init_map_type+0x4b/0x240 [ 1515.933564] ? __raw_spin_lock_init+0x3a/0x110 [ 1515.933598] v9fs_session_init+0x1df/0x17a0 [ 1515.933623] ? do_raw_spin_lock+0x123/0x260 [ 1515.933653] ? find_held_lock+0x2b/0x80 [ 1515.933684] ? __create_object+0x59/0x80 [ 1515.933712] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1515.933740] ? __pfx_v9fs_session_init+0x10/0x10 [ 1515.933764] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1515.933791] ? __create_object+0x59/0x80 [ 1515.933820] ? __kmalloc_cache_noprof+0x369/0x470 [ 1515.933851] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1515.933897] v9fs_mount+0xbc/0x9e0 [ 1515.933926] ? __pfx_v9fs_mount+0x10/0x10 [ 1515.933957] ? cap_capable+0xdb/0x3b0 [ 1515.933996] ? __pfx_v9fs_mount+0x10/0x10 [ 1515.934024] legacy_get_tree+0x109/0x220 [ 1515.934056] vfs_get_tree+0x93/0x340 [ 1515.934085] path_mount+0x122f/0x1d70 [ 1515.934108] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1515.934146] ? __pfx_path_mount+0x10/0x10 [ 1515.934167] ? kmem_cache_free+0x2a1/0x460 [ 1515.934198] ? putname.part.0+0x11b/0x160 [ 1515.934224] ? getname_flags.part.0+0x1c6/0x540 [ 1515.934255] ? putname.part.0+0x11b/0x160 [ 1515.934285] __x64_sys_mount+0x27b/0x300 [ 1515.934307] ? __pfx___x64_sys_mount+0x10/0x10 [ 1515.934340] do_syscall_64+0xbf/0x360 [ 1515.934376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.934399] RIP: 0033:0x7f6852067b19 [ 1515.934417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1515.934437] RSP: 002b:00007f684f5dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1515.934458] RAX: ffffffffffffffda RBX: 00007f685217af60 RCX: 00007f6852067b19 [ 1515.934473] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 1515.934486] RBP: 00007f684f5dd1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 1515.934500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1515.934513] R13: 00007fffa7df15ef R14: 00007f684f5dd300 R15: 0000000000022000 [ 1515.934549] [ 1516.024883] 9pnet_fd: Insufficient options for proto=fd [ 1516.090738] SLUB: Unable to add cache 9p-fcall-cache-636 to sysfs 00:31:01 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r3 = open_tree(r2, &(0x7f0000000180)='./file0\x00', 0x9801) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x4, 0x1}}, './file0\x00'}) 00:31:01 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [0x35, 0x64], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) fcntl$dupfd(r0, 0x406, r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:31:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 99) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:01 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:31:01 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c502e9c18b26c26"]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@access_user}, {@cache_fscache}, {@access_any}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1000}}, {@posixacl}, {@uname={'uname', 0x3d, 'wfdno'}}], [{@fowner_lt={'fowner<', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@hash}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x4c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac04, 0xfac0f, 0xfac03]}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@cache_fscache}, {@cache_none}, {@uname={'uname', 0x3d, 'cache=fscache'}}], [{@pcr={'pcr', 0x3d, 0x3}}, {@fowner_gt={'fowner>', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@seclabel}, {@uid_gt}, {@euid_eq}, {@obj_user={'obj_user', 0x3d, 'hash'}}, {@euid_lt={'euid<', 0xee00}}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r9, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x29}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x30, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:01 executing program 5: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x3) getpeername(r0, &(0x7f0000000340)=@isdn, &(0x7f00000003c0)=0x80) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) mkdirat(r3, &(0x7f00000002c0)='./file0\x00', 0x100) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64, 0x35], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x37, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) open(&(0x7f0000000180)='./file0\x00', 0x400000, 0xa) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:31:01 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) sync() ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000180)=0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x204, 0x26, 0x100, 0x70bd2c, 0x25dfdbfb, {0x17}, [@nested={0x119, 0x73, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @fd=r3}, @typed={0x4, 0x51}, @generic="924872c12ca2ff11cae51f304d7447dd25d2eebdaf6ea4222522d976f0d5a3e8afb303c07a6210dcaafa6429148d3684164e2070a2c25f958c50d721e2d123fa3d0af4f5", @typed={0x8, 0x45, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="dcb49cc7e3674cefe73e7d35da3580d78866bcd43e306b7d344d96472a57eff24b970e8c1b3790ce613ba55137625ab8c1a6dc21d956e1f1961b29bd30cd709babb53d617f6630e230e683ed280f9ea399891aba7b19e1cd0a7b7b1181d72b4b418f99adbb6eb7903f4cbeff32cec0", @typed={0xc, 0x15, 0x0, 0x0, @u64}, @generic="fac3ac10fa3cfeb5f71f8d1880e997e2812be272923c694e5e3f841c532e0ef13b340b2df956", @typed={0x8, 0x79, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x6, 0x0, 0x0, @pid=r5}, @typed={0xc, 0x64, 0x0, 0x0, @str='net/arp\x00'}]}, @generic="2c010f19df176f16a93dcadf3ef7cc8b0e017c10031393c2b93573320959e64283fc225f8bbf5658723a4ba40c4f8964e346196050f2a93cd95d6a02701cd928d90ca94a17769a6a66cb1309ec1d7e8cfb24f87559da1e5aeeb7dd0b8ea56ed3705ec70861dc48a7467da518a22cd9e0d6fc9e08c52b58002d69581e98c024e256c17d1c093c9cb175ccbf06623a20ffe759130652bd633e3f78afca92", @generic="25a0d3df202ec0a86d5f946da6610ab99b8fc4d6bb420a121486e375db9b43038bdba27a6c007be36c8edd6dca59", @typed={0x8, 0x50, 0x0, 0x0, @uid=0xee01}]}, 0x204}, 0x1, 0x0, 0x0, 0x2000c050}, 0x840) 00:31:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xd0, 0x0, 0x0, 0x1824010, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340), 0x1040090, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@nodevmap}, {@cache_none}, {@privport}, {@cache_none}, {@loose}, {@cache_fscache}, {@version_9p2000}], [{@uid_eq={'uid', 0x3d, r3}}, {@appraise_type}]}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x2000000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}, {@aname={'aname', 0x3d, 'wfdno'}}, {@fscache}], [{@obj_role={'obj_role', 0x3d, '+[\''}}, {@appraise}, {@context={'context', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'wfdno'}}, {@smackfsdef={'smackfsdef', 0x3d, 'trans=fd,'}}]}}) syz_open_procfs(0x0, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 100) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:01 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000100)=""/71, 0x47}, {&(0x7f0000000500)=""/204, 0xcc}, {&(0x7f0000000600)=""/82, 0x52}, {&(0x7f0000000680)=""/227, 0xe3}], 0x5) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xffffffffffffff58}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) tkill(r1, 0x1b) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) r3 = fork() process_vm_readv(r3, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x9, 0x2) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x6, 0x62, 0x9, 0x20, 0x0, 0xaed, 0x40000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x8a0, 0x1, 0x2251, 0x3, 0x140, 0xfffffffa, 0x6707, 0x0, 0x0, 0x0, 0x3}, r3, 0x1, r4, 0xa) 00:31:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x6, 0x8, 0x3, 0x6, 0x0, 0x7, 0x10, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x6, 0x7f}, 0x40008, 0x4, 0x7, 0x9, 0x1ff, 0x0, 0xffff, 0x0, 0x200, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, r0, 0x1) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:31:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) r5 = geteuid() mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}], [{@euid_gt={'euid>', 0xee00}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'wfdno'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x37, 0x34, 0x38, 0x65, 0x34, 0x64, 0x37], 0x2d, [0x0, 0x37, 0x31, 0x63], 0x2d, [0x32, 0x62, 0x39, 0x32], 0x2d, [0x30, 0x38, 0x61, 0x4f73ff794e078bfc], 0x2d, [0x33, 0x91c541f601cea9a2, 0x35, 0x66, 0x61, 0x64, 0x30, 0x30]}}}, {@fowner_gt={'fowner>', r4}}, {@euid_lt={'euid<', r5}}]}}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r6, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) [ 1529.782340] audit: type=1400 audit(1752539461.931:13): avc: denied { read } for pid=105418 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 00:31:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1020030, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x20c1, 0x53) 00:31:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r3}}, {@debug={'debug', 0x3d, 0x6}}, {@access_uid={'access', 0x3d, r3}}, {@afid={'afid', 0x3d, 0x9}}, {@debug={'debug', 0x3d, 0x3}}, {@access_user}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:31:01 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c502e9c18b26c26"]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@access_user}, {@cache_fscache}, {@access_any}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1000}}, {@posixacl}, {@uname={'uname', 0x3d, 'wfdno'}}], [{@fowner_lt={'fowner<', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@hash}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x4c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac04, 0xfac0f, 0xfac03]}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@cache_fscache}, {@cache_none}, {@uname={'uname', 0x3d, 'cache=fscache'}}], [{@pcr={'pcr', 0x3d, 0x3}}, {@fowner_gt={'fowner>', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@seclabel}, {@uid_gt}, {@euid_eq}, {@obj_user={'obj_user', 0x3d, 'hash'}}, {@euid_lt={'euid<', 0xee00}}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r9, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x29}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x30, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r0 = open(&(0x7f0000000000)='./file0\x00', 0x4001, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x4010, r0, 0x4b6f6000) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:31:02 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fsuuid=f\x00\x004\x00d\x00\x00-\x00\x00\x00\x00-6da4-3\x00\x007-9db1\x00\x007\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB="104e2fb0e2602f4aa7f955b17b2242488e2880249a1b5f4997a2625cdf8e7f389bbb0978b3b045fe711b8513a92438e0162a7c7db4d7c77629c504e0accfbd365bfa1bdbf42449004af33d860d85a97f0c940e322b2b8ebf6f2da615640ed34f0736968a01b82419865cb386f1af27001517b1a4888c73cde511ed054aae9c9af9a30722964c44cfd18d1e59325295b582439f14f74a46b18def7361"]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x8) tee(r2, r3, 0x80000001, 0xb) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:31:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) sync() 00:31:02 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c502e9c18b26c26"]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@access_user}, {@cache_fscache}, {@access_any}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1000}}, {@posixacl}, {@uname={'uname', 0x3d, 'wfdno'}}], [{@fowner_lt={'fowner<', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@hash}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x4c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac04, 0xfac0f, 0xfac03]}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@cache_fscache}, {@cache_none}, {@uname={'uname', 0x3d, 'cache=fscache'}}], [{@pcr={'pcr', 0x3d, 0x3}}, {@fowner_gt={'fowner>', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@seclabel}, {@uid_gt}, {@euid_eq}, {@obj_user={'obj_user', 0x3d, 'hash'}}, {@euid_lt={'euid<', 0xee00}}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r9, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x29}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x30, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:02 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x4000, &(0x7f0000000c80)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}], [{@pcr={'pcr', 0x3d, 0x3b}}, {@subj_type={'subj_type', 0x3d, 'wfdno'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '@--\\:-'}}, {@fowner_eq}, {@subj_role={'subj_role', 0x3d, '9p\x00'}}]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) recvmmsg$unix(r1, &(0x7f0000000b40)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000340)=""/232, 0xe8}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/237, 0xed}, {&(0x7f0000000700)=""/162, 0xa2}, {&(0x7f00000007c0)=""/226, 0xe2}, {&(0x7f00000008c0)=""/153, 0x99}, {&(0x7f0000000980)=""/101, 0x65}, {&(0x7f0000000a00)=""/49, 0x31}], 0x6, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x2, 0x40002000, &(0x7f0000000bc0)) syz_open_procfs(r3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x8) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000140)={0x3, 0x33, &(0x7f0000000040)="f0e6f0f22d3954b6b3afbc33e6eb780f974b8985adb743a3ceb93e06706f5932b1e1fe0539cf490ab19b303c9e2bebde55b082"}) 00:31:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) r6 = pidfd_open(r3, 0x0) lseek(r6, 0xfffffffffffffffb, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_fscache}, {@aname}, {@access_uid={'access', 0x3d, r4}}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x66], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x65]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000003a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d23bd3f5afa6d388a0d6893fd3b952e81387f6724273b4ce2a138054e20a2393b66119c139c6589567673a4fd37346d89bf4148aaab6a92d0c700428eebfbef48c9c54d5cec0126b4ca21a7623e865410ce93221958631bb9c73d30e960ced2585dadb6f53ec023185fc2ea82221384319cbfbf728a34ae27198b6a620ac4e39d99164dc56d", @ANYRESHEX=r1, @ANYBLOB=',noextend,\x00']) clock_gettime(0x0, &(0x7f0000004e00)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001380), 0x6e, &(0x7f0000001500)=[{&(0x7f0000001400)=""/217, 0xd9}], 0x1, &(0x7f0000001540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000015c0)=@abs, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001640)=""/255, 0xff}, {&(0x7f0000001740)=""/161, 0xa1}, {&(0x7f0000001800)=""/249, 0xf9}, {&(0x7f0000001900)=""/32, 0x20}, {&(0x7f0000001940)=""/219, 0xdb}, {&(0x7f0000001a40)=""/66, 0x42}, {&(0x7f0000001ac0)=""/74, 0x4a}], 0x7}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001c40)=""/49, 0x31}, {&(0x7f0000001c80)=""/148, 0x94}, {&(0x7f0000001d40)=""/91, 0x5b}, {&(0x7f0000001dc0)=""/115, 0x73}, {&(0x7f0000001e40)=""/51, 0x33}, {&(0x7f0000001e80)=""/135, 0x87}, {&(0x7f0000001f40)=""/86, 0x56}], 0x7, &(0x7f0000002040)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000002100)=""/235, 0xeb}, {&(0x7f0000002200)=""/246, 0xf6}, {&(0x7f0000002300)=""/27, 0x1b}], 0x3, &(0x7f0000002380)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=r5, @ANYBLOB="1c00140000000000f8ff0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f00000023c0)=""/67, 0x43}, {&(0x7f0000002440)=""/49, 0x31}, {&(0x7f0000002480)=""/52, 0x34}, {&(0x7f00000024c0)=""/203, 0xcb}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x5}}, {{&(0x7f0000003640)=@abs, 0x6e, &(0x7f0000004bc0)=[{&(0x7f00000036c0)=""/214, 0xd6}, {&(0x7f00000037c0)=""/142, 0x8e}, {&(0x7f0000003880)=""/88, 0x58}, {&(0x7f0000003900)=""/138, 0x8a}, {&(0x7f00000039c0)=""/113, 0x71}, {&(0x7f0000004e80)=""/4100, 0x1004}, {&(0x7f0000004a40)=""/215, 0xd7}, {&(0x7f0000004b40)=""/94, 0x5e}], 0x8}}], 0x7, 0x40010040, &(0x7f0000004e40)={r7, r8+60000000}) ioprio_get$uid(0x0, r9) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r6, 0x40047211, &(0x7f00000001c0)) 00:31:02 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="77b928f132640d3723bd27d007656e6f65787465ae642c00"]) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000780)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000880)=0xe8) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000740), 0x1000, &(0x7f00000008c0)={'trans=unix,', {[{@noextend}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@seclabel}, {@measure}, {@obj_role={'obj_role', 0x3d, 'wfdno'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'fsuuid'}}, {@seclabel}, {@appraise}, {@euid_lt={'euid<', r2}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') write$P9_RREADLINK(r1, &(0x7f0000000680)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) openat(r3, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000580)=0xe8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000005c0)=0x0) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {0x1, 0x5}, [{0x2, 0x4, r4}, {0x2, 0x1, 0xee00}, {0x2, 0x0, 0xee00}, {0x2, 0x6, r5}, {0x2, 0x1, r7}, {0x2, 0x6}, {0x2, 0x3, 0xee01}, {0x2, 0x0, 0xee01}, {0x2, 0x4, r8}], {0x4, 0x4}, [{0x8, 0x5, 0xee01}, {0x8, 0x5, 0xee00}], {0x10, 0x3}, {0x20, 0x4}}, 0x7c, 0x2) [ 1530.551640] 9pnet_fd: Insufficient options for proto=fd [ 1530.600538] 9pnet_fd: Insufficient options for proto=fd 00:31:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0xb) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:31:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:12 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r3 = fork() process_vm_readv(r3, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) process_vm_readv(r3, &(0x7f0000000700)=[{&(0x7f0000000080)=""/83, 0x53}, {&(0x7f0000000440)=""/132, 0x84}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000600)=""/225, 0xe1}], 0x5, &(0x7f0000000b00)=[{&(0x7f0000000140)=""/35, 0x23}, {&(0x7f0000000780)=""/137, 0x89}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/90, 0x5a}, {&(0x7f0000000980)=""/105, 0x69}, {&(0x7f0000000a00)=""/15, 0xf}, {&(0x7f0000000a40)=""/168, 0xa8}], 0x7, 0x0) fcntl$setlease(r2, 0x400, 0x0) r4 = dup(0xffffffffffffffff) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r4}) fcntl$setlease(r2, 0x9, 0x2) 00:31:12 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x10020c9, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:12 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x9, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r6) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2024, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r6}}, {@access_uid={'access', 0x3d, 0xee01}}, {@loose}, {@version_L}, {@privport}, {@debug={'debug', 0x3d, 0x4a}}, {@uname={'uname', 0x3d, '/'}}, {@access_uid={'access', 0x3d, 0xee00}}, {@msize={'msize', 0x3d, 0x83}}], [{@obj_role={'obj_role', 0x3d, 'net/arp\x00'}}, {@dont_appraise}, {@measure}]}}) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) poll(&(0x7f0000000300)=[{}], 0x1, 0x8) getresuid(&(0x7f0000006280), &(0x7f00000062c0)=0x0, &(0x7f0000006300)) r12 = fork() process_vm_readv(r12, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000007940)=0x0) sendmmsg$unix(r9, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)=[@rights={{0x30, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r7}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}], 0xb0, 0x48000}}, {{&(0x7f0000000700)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000780)="9a62a605fad588adb708ae395837b7040254d3036a148011720aa62ae5983561c0f78059fa7e68645ba25c9535742a22c36f80ee7a6efef732d13f2d382c522015b8", 0x42}, {&(0x7f0000000800)="50c56c4c61aa1bb22d5f130e7775a7d83d05986b7fd9d5cf47f9d08f215a0374eada075d7c85ff47f2a2408e91f0ed4625121a3cf060b8f286b94d496e2c9c0aa13e5fcfc237cc1fa29940077cdfd0d15d02f86046", 0x55}, {&(0x7f0000000880)="b7c912f6a6e5ff948c483c8fb2c33c4dd28ac8877e75a541c5ee300b44174e1ab8732509c6bfcf194de19f01107b7ff4403e7548e9cf09306b17ed4c6f3f2284d7074eee24b119429caeeee7e0858ae5f46d79c0b1194f010f3e0e3e13822b08710e285d4cbf0abb9daa5ed65cf2949c861a3b81ce9e6032d382ab398408129716a7c4ac122ad8f048c6d6464a60c89378be99f5dbce37bcf0bf474b45cbc94c10149a2aab7f698dd18b98546da4810e016453cf253d974f8f8600c58605f029997813bc50f5cc22ad002fd201149e0dc0adfa12e1d78907f30edc6522ef20c8d0122e02e3a390f42be688b3d78fe7b0438a", 0xf2}, {&(0x7f0000000980)="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", 0x1000}], 0x4, &(0x7f0000001b40)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @rights={{0x28, 0x1, 0x1, [r9, r9, r9, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}], 0x98, 0x20000000}}, {{&(0x7f0000001c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001c80)="81c15fcd66d64a57be017ff8a4cb54f0f471da1cd69af9277feb98c5c88f869497e360b685cf22c553c9496e699cd8a8049d7661d03a88ce682a94d3b45a694d5f18b07f", 0x44}, {&(0x7f0000001d00)="659a50bacc3ff2de51b66e905676b87128962531ed6cb134476325891146589a524fdf6abeba149f3f2a7fa3406998ed2eb49540f39eed81868a5b734ca3e44a0312b3976009f858a1fecbbbff7449f108cd20697ffe6c19f24e2b1b1d4e3fb718116357e4cc0a5020f88d1b37818ff1f037f4746e502ff992f9070d1f45c010", 0x80}, {&(0x7f0000001d80)="4ede77477fe42b25bf9371eeb93d8383031c36528518d3d99e1ffaff6b4c5dff721cc0624e6f7556b926f13ac65eed664ceda5eab0158014f680d29cc3ee01459cc2304c23f94ca3babb0f8686b38dd7b4658096f502d449d3311ca148dc58e6e79b0aa1a92cc09681cadb04ca698024cb938d2f4077605f2120a878dbfafa01b761668747d31fb29b817ec8ada5a42e0e8bf868d153fc71481782c75213b3f7f39ac2a1b660955b", 0xa8}, {&(0x7f0000001e40)="a5db51328439cd757a804060477956719d94929dcf9594eba4c3678c199642798d84ad25d52c364a41ac05e141b8abab877c086165df7bcd53e6fc8798a78cc6db96466925f59fc2fc712e9ff25796dec6a07e808fc944dffd5726ccdf074ca8c84769bc5913bac8ca1be805dfdff55b669485e8a52adae497735f7d849ea302140a3d5f409757ad3a", 0x89}, {&(0x7f0000001f00)="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", 0xfb}], 0x5, 0x0, 0x0, 0x4000041}}, {{&(0x7f0000002080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002200)=[{&(0x7f0000002100)="7cc3a98d51679da3d16d69160620f7555207edfffae57a4c5f4d89edc79ecac3af77d083ad89ab5246b1560879437b6d0d3d6fdf1fefcb1ada802f2a58a2528105348202a66dc1a665948d9f4d694dd6", 0x50}, {&(0x7f0000002180)="8b186c4f3a8f88de7cad445b8aa7494c4f2d0f9908abc0fa5747b8e6e8c75dd375f6e5c5c0edc8c715eb53e60f80d2aac582e400f751c26cf365fe749308d1372711d41bbe17b9db9e974d0b6b9ad4fa7c90d4bb8919f6b530640a202c15ede36230a55f3e3393bfb2606a5fa0592a34a39ce22899a45ec35d9224", 0x7b}], 0x2, &(0x7f0000002240)=[@cred={{0x1c, 0x1, 0x2, {r5, r6}}}, @rights={{0x24, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x68, 0x40890}}, {{&(0x7f00000022c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000036c0)=[{&(0x7f0000002340)="47b71dcd5b111387c78dd97310ce92ba69f0fcde4bd1a0218f2dba0ac96be1149b1f8901b88e02c76b954b51a526d0ed09237e22078f3ad3d1457947adf41e00831f510fd79330e5d367257514e8814828", 0x51}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f00000033c0)="6f0cb522c139f7a964b2945de9", 0xd}, {&(0x7f0000003400)="23e8756eeeb1", 0x6}, {&(0x7f0000003440)="ba723a0307f1d753bf7656bc1576fa3434d41a0dc595edb8ff38234222ab8c1f03ad93fb952bc93d007e1764afbf5e9481589e1492c946fecea6ea305d362f290d66e9c837d6a33395db60e9dc42c7e73872519fd56edce1b59e3dc60a56a43e787492ef2407fba32076a4c45c325cdcdfa638a6506a6d6612227f4bd7cd1b129507a761de92793c743c80b5e3e0bc1e1c3d5ce9287f333a0f5cedfd3c274279818666c77815ca914fa6593c54ca5ec747ad1bbfae319139c90ac897724143ca5def5a558f4dd0e994d9242b58b140b3f082c78f2d968b7f7ee45d6af86c0e6dfb8e5c78e04108cbc6ce90e7e4378ef61b20386d6b", 0xf5}, {&(0x7f0000003540)="b3db66a929157812c987e63e00f86b4e06a93557398d7befa2ce30298b37189edcaece5cc693e7a652b377f4fbff99a0a6d535af30a448ebe27afe0c2783c0c79b862c9b85fdf00492b10c9b0dec9f7a7f299671aa1bcc61c178fb9399c6400329e14dd29073c27f8c7a5bcaf54cd9939f62c8440a511b7520b95d4e68a4d0589f7e52a3a4f87562972e9ed4a4b4decb45b0f5a15bb3430f330aed18d1ab8ce9dbe3561b12ed6f8df4267a12525d2e492ddee1b246e02b", 0xb7}, {&(0x7f0000003600)="97d2ab1f18974436ca149c08d3e01ab66698c15f198112ff01297694ebfd1c86efbbca94849185fd71b503cbc712e34c346c05f4b2dc2dff1a0a453ae420dc03de944b74bb644f8de9fa61857cba867bff45b11081514fad06c3018173fd504f47ae0a437a27e8c154cd6a587cd44dd8098decbda6a95b83cb22aaa826bd5f4f17fbcb74d25b8facd8cf762ec0e7505bc1f30434f2cd7cbd4865922e62a399ef9b17cb141087efee1848a3eb1086", 0xae}], 0x7, &(0x7f0000003b00)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r10, r2, r3]}}, @rights={{0x2c, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}], 0x108, 0x4000084}}, {{&(0x7f0000003c40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000003cc0)="0f946a868e2599a4b2de69d5eccd7bfcb6711fced750953d466cf07c2dd9f9f3976f39168aad916e2a6b03ff675c02e94655cfa926d35214e32779460dc3d041e78b7c53d642f4a8169a8d15df4a2ae821d34ce7bf2fe0ac051034967a2a53ab9fc946624c5b6a5c1027b2", 0x6b}], 0x1, &(0x7f00000041c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x80, 0x40001}}, {{&(0x7f0000004240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000054c0)=[{&(0x7f00000042c0)="9152ce62570180a31b06c578b813b0fb96545bd8cf423b9734d81cc07f45ae7ecfe46807b866ebd6f7d6b2de46b252d1feace318b4095bb1848ffc99df9cc58d22cf4c129217fe1a5eef0572bd0313bb13944f501b0cb20bb7ee4706e30b0b317aa91618942964bacd1a6d068943", 0x6e}, {&(0x7f0000004340)="28d42101af66bd43724ff4de51bb3883d5780324f1a17240324e8e3a397de4a787fee6abdbe0d8d6f3177ddb718fb90f913cf5a5b71e60d8037e62853a9fdc7b7c59152355a66659dcceb56f341f59b3803cfb66d105ef5b581b723cc6fb0939812ae6a87d9dc64ac189fbb3170068563062e51d312d07ae920ce8b3f8794496acb86500deacb918e955bace96a732d964e2298de56e", 0x96}, {&(0x7f0000004400)="e92c8b920a9e193158cbd7853717c4377ebd18209471f7423f3a9208cec6d5afe329f9142be31f832b8bd7c957", 0x2d}, {&(0x7f0000004440)="18b2c70dabbe3a", 0x7}, {&(0x7f0000004480)="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", 0x1000}, {&(0x7f0000005480)="429f3e0d3d92bb84287cee5018b6ab9998598bbe70e7657dc753bd92a7aa85497eb9c3ba1aaab297d08d334ddb5dd778df3b6983d1f1f8bc59d4af6aa4d1a3f4", 0x40}], 0x6, &(0x7f0000006340)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r11, r7}}}], 0x88, 0x20008814}}, {{&(0x7f0000006400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000078c0)=[{&(0x7f0000006480)="b0ab49a424b377c5c2bdf41f79899b30570c51d1573b3339afa6ac37c0c79479fed52ff7878808e64329cfaf39775b6a889873f3565576d34d0ed54da5d8e65b1f6eb8ef6ea8947fc05cba789f4dcac46a3773fa5a6fde21a093246f52eab7ab27aa191649f70fa6a4527aee4d09d46e35e983b7b0787b1f1ced29935cc83673acb067ff1c61d6f8a3ef715ac3d513c6429cb790bb4d3dc0d3bf864e6f88d7703d8b2a3bd73cdef74d78", 0xaa}, {&(0x7f0000006540)="dd3258895349e3eac413825b257f0ef4029a529fe5a4921e35d2eee4542c6c454071aad2eadfd6340befe21d76fc2ba53ebf3ebdda3068206d152871c05c7f72357ce642ca16b1383def08b68f92742c3fa7ab4afaa77b1fc1eca189f5738b98da00d1047d62238ce641898c0f177c807f8eac717e1d0cb3c6b7f3841021b2", 0x7f}, {&(0x7f00000065c0)="974206b93527e49375313bfbb43da72998b38c3f70a543853ea1cff70eb90d15310f929b0e43cd42d8fcab69f6c713c4c0c7a0b1e06fa7990fbc80dff8b399729b533011ee55e18480115c95a8da8dcd0c2b3d1ea31c62cf1232ad3095a6eb8826c7256a59f894cb281ee8d4d68ad872b2cd72a789af9ea34c58d7f4166c3a18378d3cc7721c73f11e308cdd07f7", 0x8e}, {&(0x7f0000006680)="71cb22651746600a73b848152ccb135ed5a22964371bd0a1db35358884a06deb6101d8a023d617f3237286f60dad90dee22d202b09c95cc811a11ad015179158dc561fef292c3a132e2754aa26bce4ef994ae4c6735976342288508a33117ce0b8bfa5f4e8dddc58f7ef2fa4a7be379213d6a8cb602fd1184a6b740af9f0752102d8ace8f70b9799123dd4cfaa3e95951daec21c68d3841874bc8c920efeb8c5dd5837c0c1bb930495f0cbe38062441bcd1971081ba3e048b668b7a0c047127070832799775ec7c8a9e10bcf1f36f755a59e3075f893361d2008fad66e8d47a7947f14", 0xe3}, {&(0x7f0000006780)="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", 0x1000}, {&(0x7f0000007780)="bc64c3f4f601840466a1ee7786a52533a8d8e729e289d183bd9232a4cc06521acec01c2d2cf0348638cb7d850f612c5e686c6a3cb19b367c31260014a96987a9fcf74fbe8112375ea070c9692cbc8373a6f0940330904b48b9f79c4043255a2e4182c19e5c81a4563112032688de5e5ed093d6a4bab26d617ecd56ed6503ad7100bd1eaceda24a9e838a27d95291c0c9746a9e050b101fa192b64e0e2e1280a2a5421bcc0baf", 0xa6}, {&(0x7f0000007840)="a1a790d0", 0x4}, {&(0x7f0000007880)="ebc080bd217848e9004fffcf", 0xc}], 0x8, &(0x7f0000007980)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r7}}}], 0x20, 0x20040000}}], 0x8, 0x41801) symlinkat(&(0x7f0000000440)='./file0\x00', r9, &(0x7f00000004c0)='./file0\x00') 00:31:12 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c502e9c18b26c26"]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@access_user}, {@cache_fscache}, {@access_any}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1000}}, {@posixacl}, {@uname={'uname', 0x3d, 'wfdno'}}], [{@fowner_lt={'fowner<', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@hash}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x4c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac04, 0xfac0f, 0xfac03]}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@cache_fscache}, {@cache_none}, {@uname={'uname', 0x3d, 'cache=fscache'}}], [{@pcr={'pcr', 0x3d, 0x3}}, {@fowner_gt={'fowner>', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@seclabel}, {@uid_gt}, {@euid_eq}, {@obj_user={'obj_user', 0x3d, 'hash'}}, {@euid_lt={'euid<', 0xee00}}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r9, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x29}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x30, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:12 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="6fbb0b56280509ea911c6eaa281dfdc26130ed814f6053fd527ea5bf15de4281dd4c0ff34544f1326e1af69d6dfdc49986bfd3371f16405c9c7ad1c33c23d8ac809a8ab2ea919887c87b9f3c581d64ee07dbf417164082a96fec23deba5ec90026e6a1bc32ecb1ea5a8bfe77a1", 0x6d}, {&(0x7f0000000180)="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", 0xfa}], 0x2, 0x0, 0x20, 0x2e) fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:31:12 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@obj_type={'obj_type', 0x3d, '[(\\\xdf/!'}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)=[&(0x7f00000002c0)=',\'$T.\\&&\x82\\\x00', &(0x7f0000000300)='9p\x00'], &(0x7f0000000440)=[&(0x7f0000000380)='net/arp\x00', &(0x7f00000003c0)='*::\x00', &(0x7f0000000400)='rfdno']) openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x8) close(r3) 00:31:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:12 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:31:12 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x40, 0x9, 0xc4, 0xfe, 0x0, 0x6, 0xc4014, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x92fb, 0x4, @perf_config_ext={0x3, 0x2}, 0x54209, 0x80000000, 0x80, 0x9, 0x0, 0x81, 0x401, 0x0, 0x0, 0x0, 0x18}, 0x0, 0xf, 0xffffffffffffffff, 0x2) sync() sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) 00:31:12 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',noexteZd,\x00']) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:31:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug', 0x200, 0x1b) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000300)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@uid_eq={'uid', 0x3d, r3}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1020002, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r4, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:31:12 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x84800) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:12 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c502e9c18b26c26"]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@access_user}, {@cache_fscache}, {@access_any}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1000}}, {@posixacl}, {@uname={'uname', 0x3d, 'wfdno'}}], [{@fowner_lt={'fowner<', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@hash}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x4c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac04, 0xfac0f, 0xfac03]}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@cache_fscache}, {@cache_none}, {@uname={'uname', 0x3d, 'cache=fscache'}}], [{@pcr={'pcr', 0x3d, 0x3}}, {@fowner_gt={'fowner>', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@seclabel}, {@uid_gt}, {@euid_eq}, {@obj_user={'obj_user', 0x3d, 'hash'}}, {@euid_lt={'euid<', 0xee00}}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r9, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x29}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x30, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1540.971278] 9pnet_fd: Insufficient options for proto=fd 00:31:22 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x0, 0x37]}}}, {@uid_eq}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x9, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x6, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@cache_fscache}], [{@appraise}, {@subj_role={'subj_role', 0x3d, 'fsuuid'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@uid_lt={'uid<', r4}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') openat(r5, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:31:22 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c502e9c18b26c26"]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@access_user}, {@cache_fscache}, {@access_any}, {@cache_mmap}, {@debug={'debug', 0x3d, 0x1000}}, {@posixacl}, {@uname={'uname', 0x3d, 'wfdno'}}], [{@fowner_lt={'fowner<', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@hash}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x4c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac04, 0xfac0f, 0xfac03]}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}, {@cache_fscache}, {@cache_none}, {@uname={'uname', 0x3d, 'cache=fscache'}}], [{@pcr={'pcr', 0x3d, 0x3}}, {@fowner_gt={'fowner>', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@seclabel}, {@uid_gt}, {@euid_eq}, {@obj_user={'obj_user', 0x3d, 'hash'}}, {@euid_lt={'euid<', 0xee00}}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r9, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x29}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x30, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:22 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() pipe(&(0x7f0000000000)) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r2, 0x400, 0x0) fcntl$setown(r0, 0x8, r1) fcntl$setlease(r2, 0x9, 0x2) 00:31:22 executing program 1: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7f, 0x0, 0xfd, 0x0, 0x0, 0x5, 0x1001, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3898, 0x7f}, 0x0, 0x3ff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000080)) sync() syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(0xffffffffffffffff, 0x9, 0x2) sync() 00:31:22 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [0x0, 0x0, 0x0, 0x65], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x0, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') setxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000002c0)=@v2={0xf0aa158f45379356, 0x3, 0xa, 0x9, 0x9, "64bdb5998f2a3f1d14"}, 0x12, 0x2) openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) 00:31:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002340), 0x2060c0, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000002780)={0x1, 0x0, 0x12, 0xd, 0xb6, &(0x7f0000002380)}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x34, 0x0, 0x34], 0x2d, [], 0x2d, [0x36, 0x64, 0x61], 0x2d, [0x33, 0x35, 0x61, 0x37], 0x2d, [0x39, 0x64, 0x62, 0x31, 0x36, 0x38, 0x37, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77842dd29c31a32666646e6f3d99ac789392846baf065834c68b6a0a7b33cf3eaa6de5b55371c7c5d91bf737cb40f6cb0012bfe9e186cdfe1ba4901c575b2caeaf6e755e6051bff7a28bf5b476f1d54bfc34", @ANYRESHEX=r2, @ANYBLOB=',noextend,\x00']) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001840), 0x4000, 0x0) ioctl$CDROMGETSPINDOWN(r2, 0x531d, &(0x7f0000002300)) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000002280)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002240)={&(0x7f00000018c0)={0x964, 0x1, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0xfff}, [{{0x254, 0x1, {{0x0, 0xfffffe00}, 0x0, 0x20, 0x0, 0x2, 0x2, 'syz1\x00', "2bc73b5c947c0bde8510f188974b7402a99af398017fb0ab590400a9e4ce9e78", "9cb38ac10406c77e4239db4eaafd298a5dffe4b6c09bc0d1cdf4205bc349762c", [{0x8bd8, 0xc74, {0x0, 0x401}}, {0x0, 0x4, {0x2, 0x4}}, {0x5, 0x4, {0x3, 0x3}}, {0x1ff, 0x39dc, {0x2, 0xb17}}, {0x9, 0x8, {0x3, 0x9}}, {0xad6d, 0x1, {0x1, 0x3}}, {0x400, 0x68a, {0x3, 0x46}}, {0x0, 0x0, {0x3, 0x354a}}, {0x2, 0x0, {0x0, 0x1fb8}}, {0x1ff, 0x6ed, {0x1, 0xb8a0}}, {0x1, 0x200, {0x1, 0x80000000}}, {0x8, 0xc093, {0x2, 0x5db5abd}}, {0x6, 0x8000, {0x3, 0x8}}, {0x2, 0x1, {0x2, 0x80000}}, {0x0, 0xff, {0x3, 0x8}}, {0x80, 0x3, {0x0, 0xba3}}, {0x800, 0x5}, {0x8, 0xe1c, {0x2, 0x4}}, {0x40, 0x3, {0x3, 0x80}}, {0xff, 0x6, {0x3, 0x4}}, {0x0, 0x3ff, {0x1, 0x101}}, {0x2, 0x8000, {0x3, 0x200}}, {0xad8, 0x8001, {0x0, 0x401}}, {0x20, 0x7, {0x1, 0x529}}, {0x3, 0xc82, {0x2, 0x856b}}, {0xf001, 0x8, {0x2, 0x381}}, {0x9, 0x32, {0x0, 0x46cd}}, {0x3, 0x4, {0x1, 0x5}}, {0xb0a, 0x0, {0x2, 0x8}}, {0x6, 0x7ff, {0x2}}, {0x8722, 0x0, {0x2, 0x9}}, {0x4ae, 0xfffb, {0x2, 0x2}}, {0x55, 0x4f, {0x3, 0xffffca0b}}, {0x9, 0x6415, {0x3, 0x9}}, {0x43, 0x4ae, {0x0, 0xffffffff}}, {0x4, 0x8, {0x2, 0x4015}}, {0x4, 0x5, {0x0, 0x8000}}, {0x80, 0x1000, {0x3}}, {0x6, 0x3, {0x0, 0x8}}, {0xfffa, 0x6, {0x0, 0x422}}]}}}, {{0x254, 0x1, {{0x2}, 0xe6, 0x20, 0x1, 0x400, 0x11, 'syz1\x00', "edb736bdf113733949b81a00ec0fb0eb445fe6f8f9149ba91c9ab4dbf15dfd73", "dc733c8f570c7a8edd210fc5459547881a62998f17f0d51e452f57326e0d5854", [{0xfc00, 0x800, {0x1, 0x7}}, {0x3, 0xb7c, {0x0, 0x4}}, {0x6, 0x800, {0x0, 0x1}}, {0x6, 0x1000, {0x2, 0x3f}}, {0xffb9, 0x500, {0x3, 0x2}}, {0x3, 0x9, {0x3, 0x1}}, {0x7, 0x800, {0x1, 0x4}}, {0x7f, 0x2, {0x1, 0xdc15}}, {0x56f0, 0x8, {0x3, 0x9}}, {0x20, 0x2, {0x2, 0x2}}, {0x9, 0xfa16, {0x3, 0x7}}, {0x3, 0x0, {0x0, 0x3}}, {0x9, 0x0, {0x1, 0x1}}, {0x6, 0x1f, {0x3, 0x4}}, {0xfffa, 0x1, {0x1, 0x5}}, {0x101, 0x40, {0x0, 0x5}}, {0x6838, 0xce, {0x2, 0x2}}, {0x8000, 0x7, {0x3}}, {0x3ff, 0x20, {0x2, 0x6f70}}, {0x7, 0x4, {0x1}}, {0x7035, 0x5, {0x1, 0x18b2df41}}, {0x4, 0xfd7, {0x0, 0x3ff}}, {0x101, 0x2, {0x1}}, {0x3, 0x8000, {0x3, 0x9}}, {0x29a, 0x25a, {0x0, 0xca}}, {0x4d6, 0x7715, {0x1, 0x9}}, {0xb8, 0x8, {0x2, 0x2}}, {0x7fff, 0x3, {0x0, 0x330}}, {0x2, 0x1, {0x2, 0x7fffffff}}, {0x3, 0x5, {0x2, 0x66}}, {0xffff, 0x2, {0x0, 0x1}}, {0xff, 0x1f, {0x1, 0x8000}}, {0x3, 0x1f36, {0x3, 0x1f}}, {0x7e6a, 0x662, {0x0, 0x3}}, {0x8, 0x6, {0x0, 0x5}}, {0xff, 0x7, {0x1}}, {0x5, 0x5, {0x2, 0x400}}, {0x0, 0x3, {0x1, 0x4}}, {0x9e6d, 0x6, {0x0, 0xcdf}}, {0x68, 0x4df, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0xdc}, 0xff, 0x6b, 0x83f, 0x9, 0x4, 'syz0\x00', "e997674851add8a23ea694693748f45ee5a1c0ffd429746b4705a090f5b33335", "d45adf19b856361996e737b7149d068152626031f012df079060d8f2bcf91f6f", [{0x0, 0x9, {0x1, 0x20}}, {0x8, 0x8, {0x0, 0x6}}, {0x0, 0x80, {0x1, 0x80}}, {0x40, 0x1000, {0x1, 0x5}}, {0x3f, 0x40, {0x2}}, {0x8, 0x1f, {0x1, 0xabe}}, {0x9, 0xffff, {0x3, 0x6633}}, {0x200, 0x0, {0x3, 0x8001}}, {0x0, 0x4cf, {0x2, 0xd517}}, {0x0, 0x6, {0x1, 0x6}}, {0x4, 0x3, {0x2, 0x7f}}, {0xfaa2, 0xb4b3, {0x0, 0x800}}, {0x0, 0xb74c, {0x2}}, {0xb7, 0x8, {0x0, 0x80000000}}, {0x9, 0x3, {0x2, 0x7c52}}, {0x0, 0x3, {0x1, 0x400}}, {0x7fff, 0x8, {0x1, 0x5}}, {0x2, 0x3ff, {0x2, 0x4}}, {0x8001, 0x6, {0x1}}, {0x200, 0x3f, {0x0, 0x5}}, {0x1ce5, 0xc16, {0x2, 0x4}}, {0xe2, 0x5, {0x1, 0x1ff}}, {0x8001, 0x9, {0x3}}, {0x1ff, 0x2, {0x0, 0x3}}, {0x9, 0x138, {0x2, 0x3}}, {0x6, 0x2, {0x1}}, {0x7, 0x3ff, {0x2, 0x1}}, {0x6d0, 0x5b43, {0x1}}, {0x1ff, 0x1, {0x1, 0x4}}, {0x35ee, 0x100, {0x0, 0x7}}, {0x8, 0x1, {0x1, 0x91}}, {0x1f, 0x5, {0x1, 0x1}}, {0x12a8, 0xffff}, {0xfff8, 0x4, {0x1, 0x9}}, {0x4, 0x8, {0x2, 0x7}}, {0x1, 0x0, {0x1, 0x5}}, {0xa3, 0x6, {0x0, 0x1}}, {0x2, 0xd117}, {0x97e, 0x9c48, {0x0, 0x1}}, {0x200, 0x4, {0x2, 0xeb6}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x4d, 0x6, 0x81, 0x2, 0x1c, 'syz0\x00', "b2c112ac4a77a1285ea3eecbaa821ed7bbb3b5bc39114548a05c27a9a6b00656", "76dee8aac552047547ad7ebf6babd5b6c84106ed893122014b6005be01c81a66", [{0x1, 0x7, {0x2, 0xfffffff8}}, {0x800}, {0x0, 0x2, {0x3, 0x401}}, {0x8, 0x1, {0x2, 0x1}}, {0x0, 0x1f, {0x2, 0x1f}}, {0x5, 0x9, {0x0, 0x5}}, {0xf801, 0x8, {0x0, 0x6}}, {0x6, 0x1ff, {0x2, 0x2}}, {0xe9d5, 0x200, {0x1, 0x9}}, {0x5, 0x17, {0x6, 0x81}}, {0x5, 0x920a, {0x2, 0x8}}, {0x8000, 0x7, {0x1, 0x1f}}, {0x2, 0x1, {0x1, 0x5}}, {0x8, 0x100, {0x3, 0x400}}, {0xce7, 0x3, {0x1, 0x1f}}, {0x8, 0x9, {0x2, 0x10000}}, {0x7fff, 0x0, {0x3, 0x5159}}, {0x7, 0x5bbb, {0x2}}, {0x20, 0x40, {0x0, 0xc45}}, {0x2000, 0x6, {0x2}}, {0x2125, 0x0, {0x3, 0x6}}, {0x2000, 0x6, {0x1, 0x9}}, {0x6, 0x400, {0x1, 0xfffffff8}}, {0x4, 0x0, {0x1, 0x100}}, {0x795, 0xfffb, {0x3, 0x8}}, {0x6, 0x0, {0x3}}, {0x1f, 0x7, {0x3}}, {0x200, 0x4, {0x1, 0xff}}, {0x3, 0x5, {0x2, 0x5}}, {0x7, 0x1, {0x0, 0xfffffffa}}, {0x80, 0x9, {0x2, 0x8}}, {0x8, 0x1fbc, {0x3, 0x9}}, {0x2, 0x7420, {0x0, 0x3}}, {0x4, 0xbf, {0x3, 0x9}}, {0x6, 0xc68, {0x3, 0x2bfb}}, {0xffff, 0x81, {0x1, 0x8000}}, {0x7ff, 0x5, {0x2, 0x7}}, {0x1f, 0x0, {0x0, 0x8}}, {0x800, 0x1, {0x1, 0xffffffff}}, {0x9, 0x9, {0x3, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x44014}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000028c0)=ANY=[@ANYBLOB="fd02c260a84232c77d81ebe08f30786a8943eec26229d8cda5b02209d606d4523274e0f8c364c3f872bf578d1f3cbb00f847c6e4c5911d4d4d92e06ad3e7b6476ab983c05ec21e97472092c20b0a70441d633cd49520c52da27267f04cf477e94f4c0463b4b7fd3c30e63bfcb420a4ef629b6b16688ea9ad76b469", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) recvmmsg$unix(r1, &(0x7f0000001740)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000000600)=""/19, 0x13}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/61, 0x3d}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x40}}], 0x1, 0x40002020, 0x0) mknodat$loop(r3, &(0x7f00000022c0)='./file0\x00', 0xc000, 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r8) r9 = getuid() mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x180802, &(0x7f0000001780)={'trans=unix,', {[{@mmap}, {@dfltgid}, {@mmap}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@cache_none}, {@dfltuid={'dfltuid', 0x3d, r8}}], [{@pcr={'pcr', 0x3d, 0x11}}, {@euid_gt={'euid>', r9}}]}}) sendmsg$AUDIT_SET(r0, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x38, 0x3e9, 0x300, 0x70bd26, 0x25dfdbff, {0x4, 0x0, 0x1, 0x0, 0x9, 0x9, 0x3ff, 0x6, 0x0, 0x400}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4009000}, 0x400c001) openat(r5, &(0x7f00000001c0)='./file0\x00', 0x80001, 0x20) 00:31:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x3, 0x0, 0x0, 0x2000010, 0x0) bind(0xffffffffffffffff, &(0x7f0000000200)=@xdp={0x2c, 0x1, 0x0, 0xd}, 0x80) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYRES32=r1]) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1550.551802] 9pnet_fd: Insufficient options for proto=fd [ 1550.598909] 9pnet_fd: Insufficient options for proto=fd [ 1550.636349] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 00:31:22 executing program 0: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r3 = fork() process_vm_readv(r3, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) process_vm_readv(r3, &(0x7f0000000700)=[{&(0x7f0000000080)=""/83, 0x53}, {&(0x7f0000000440)=""/132, 0x84}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000600)=""/225, 0xe1}], 0x5, &(0x7f0000000b00)=[{&(0x7f0000000140)=""/35, 0x23}, {&(0x7f0000000780)=""/137, 0x89}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/90, 0x5a}, {&(0x7f0000000980)=""/105, 0x69}, {&(0x7f0000000a00)=""/15, 0xf}, {&(0x7f0000000a40)=""/168, 0xa8}], 0x7, 0x0) fcntl$setlease(r2, 0x400, 0x0) r4 = dup(0xffffffffffffffff) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r4}) fcntl$setlease(r2, 0x9, 0x2) 00:31:22 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x1000000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@cache_loose}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x61, 0x34, 0x62, 0x64, 0x0, 0x64], 0x2d, [], 0x2d, [0x61, 0x64, 0x61], 0x2d, [0x32, 0x35, 0x32, 0x37], 0x2d, [0x39, 0x64, 0x65, 0x31, 0x36, 0x38, 0x36, 0x64]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000180)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000002c0)=0x28) mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0x84) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') 00:31:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@cache_loose}]}}) r2 = syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = signalfd4(r2, &(0x7f0000000080)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) 00:31:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:31:23 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100200018000000", @ANYRES32=r2, @ANYRESHEX=r0]) fcntl$setlease(r1, 0x9, 0x2) 00:31:23 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7432616e73602e1ba7", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fsuuid=f\x00\x004\x00d\x00\x00-\x00\x00\x00\x00-6da4-3\x00\x007-9d51\x00\x007\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:sudo_exec_t:s0\x00', 0x21, 0x3) openat(r2, &(0x7f0000000540)='./file0\x00', 0x2601, 0x63) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000003c0), 0x7fff, 0x109000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r6}], 0x1, 0x8) ppoll(&(0x7f0000000440)=[{r4, 0x10}, {r0, 0x10}, {r5, 0x221}, {r6, 0x200}], 0x4, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x791]}, 0x8) renameat(r0, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000002c0)='./file0\x00') 00:31:23 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() process_vm_readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/96, 0x60}], 0x2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/27, 0x1e}, {&(0x7f00000011c0)=""/4096, 0xffffffde}], 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x9, 0x2) 00:31:23 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x0, 0x34, 0x0, 0x64], 0x2d, [], 0x2d, [0x36, 0x64, 0x61, 0x34], 0x2d, [0x33, 0x0, 0x0, 0x37], 0x2d, [0x66, 0x64, 0x62, 0x31, 0x62, 0x0, 0x37]}}}, {@uid_eq}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') r3 = openat(r2, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) r4 = syz_open_dev$evdev(&(0x7f0000000580), 0x4, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000300)=[{r5}], 0x1, 0x8) statx(r0, &(0x7f0000000340)='./file0\x00', 0x800, 0x40, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x889, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="00060000000000000064336026251b2277748018f9af680d468b5bd2267f0f97e7b67f53d1da947a2569ed1be78874e02966f698ab457107266bf7bdc660ad8c79c9c52afb8ba48ff4e94a96688c62f1", @ANYRESHEX=r6, @ANYBLOB=',posixacl,afid=0x000000000000007e,afid=0xffffffff80000000,func=FILE_MMAP,smackfshat=9p\x00,func=POLICY_CHECK,\x00']) poll(&(0x7f0000000300)=[{r4}], 0x1, 0x8) fcntl$notify(r4, 0x402, 0xc) [ 1551.080910] 9pnet_fd: Insufficient options for proto=fd [ 1693.110747] kworker/u9:0 (25) used greatest stack depth: 23776 bytes left [ 1820.097472] kworker/u9:1 (34) used greatest stack depth: 23168 bytes left VM DIAGNOSIS: 00:36:25 Registers: info registers vcpu 0 RAX=0000000000848847 RBX=0000000000000000 RCX=ffffffff84b8e167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c7874 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff8643a150 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b8ce9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55ea000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fca0e9be7e0 CR3=000000000e754000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000006000000030000000200000000 XMM02=61746f7420636578650a0a0100010101 XMM03=6578650b006e6567206365786508006c XMM04=6820636578650a006567616972742063 XMM05=736465657320636578650a0073746e69 XMM06=617473657220726f7475636578651100 XMM07=0e007a7a756620636578650900737472 XMM08=6e6567206365786508006c61746f7420 XMM09=650a0065676169727420636578650b00 XMM10=20636578650a0073746e696820636578 XMM11=20726f74756365786511007364656573 XMM12=66206365786509007374726174736572 XMM13=6469646e616320636578650e007a7a75 XMM14=696d696e696d20636578650d00657461 XMM15=00006873616d7320636578650a00657a info registers vcpu 1 RAX=0000000000695b99 RBX=0000000000000001 RCX=ffffffff84b8e167 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c7874 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff8643a150 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b8ce9e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56ea000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fca0fe9d010 CR3=000000000e754000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004180922940000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000