x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x10001}, 0x8, 0x2, 0x0, 0x2, 0x7, 0x10001, 0x1331, 0x0, 0xaef5, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0x7, r0, 0x2) io_setup(0x3, &(0x7f0000000200)=0x0) io_cancel(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x800, r0, &(0x7f0000000440)="a165ff7a3f867c9ffe4f3b83eeb2a29d512bc2810a9a8ccd9a8d48f3308611211477f3b45e7e860c28440ab96b78748fec2c3a824e6ba5d0f19738cf292d9dae8ac43bcb866adfa1adde52081f717ec95ec79896d044a79fd221c7a399caf81f51bf09237fd3d4e8c7d6550218ee31d2c15502b8f42d5d1962a27266e2215fb2749388a41b037a1d6d621773c95b7379dce3587e9e797b1bcb56553924a046b98900d03e67716016ae06e1eb05ab95", 0xaf, 0x3, 0x0, 0x2}]) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d53cab92cf27407f6fb62e5887a2c90d0ffe58677ed1eb522f3f4ee592fd102a9c74cf8d8c76c84cb80503014b401268c85467f0d6cc0ec6159402f8abf32599f27fca5cbd2870c2d2a941ec69e2f7795201eaabe9efd1c0f61658007882e7a06a66c33d1a5f59dd779567636261887ca7b67c42886ae86954b00f016581550f03e29433ff6d901eab25486dfeef787adce27d17f68d94173512ef1a2bec98a2d69bed14396a5d65ec264910818394d2b16a6d32e6f7291c763a78d008d95f28e91506d848ebea873a12213bbaf9a3301f1ee3e", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = accept(r3, &(0x7f0000000500)=@generic, &(0x7f0000000280)=0x80) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000600)={"6b804cc9ad048aa844244cfe402574ed", 0x0, 0x0, {0x1, 0x2}, {0x5, 0x601}, 0x400, [0x7, 0xffffffffffff0000, 0x9, 0x8, 0x3ff, 0x80, 0xfff, 0x8bee, 0xa594, 0x4, 0x0, 0x5, 0xeebb, 0x9, 0x6, 0x1]}) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000780)={{r7}, r8, 0x1c, @inherit={0x58, &(0x7f0000000700)={0x0, 0x2, 0x5, 0x1f, {0x27, 0x5, 0x6, 0x1, 0x9}, [0x3, 0x20]}}, @name="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"}) 05:50:43 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7f, 0xda, 0xff, 0x40, 0x0, 0x6, 0x2, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x10001}, 0x8, 0x2, 0x0, 0x2, 0x7, 0x10001, 0x1331, 0x0, 0xaef5, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0x7, r0, 0x2) io_setup(0x3, &(0x7f0000000200)=0x0) io_cancel(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x800, r0, &(0x7f0000000440)="a165ff7a3f867c9ffe4f3b83eeb2a29d512bc2810a9a8ccd9a8d48f3308611211477f3b45e7e860c28440ab96b78748fec2c3a824e6ba5d0f19738cf292d9dae8ac43bcb866adfa1adde52081f717ec95ec79896d044a79fd221c7a399caf81f51bf09237fd3d4e8c7d6550218ee31d2c15502b8f42d5d1962a27266e2215fb2749388a41b037a1d6d621773c95b7379dce3587e9e797b1bcb56553924a046b98900d03e67716016ae06e1eb05ab95", 0xaf, 0x3, 0x0, 0x2}]) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d53cab92cf27407f6fb62e5887a2c90d0ffe58677ed1eb522f3f4ee592fd102a9c74cf8d8c76c84cb80503014b401268c85467f0d6cc0ec6159402f8abf32599f27fca5cbd2870c2d2a941ec69e2f7795201eaabe9efd1c0f61658007882e7a06a66c33d1a5f59dd779567636261887ca7b67c42886ae86954b00f016581550f03e29433ff6d901eab25486dfeef787adce27d17f68d94173512ef1a2bec98a2d69bed14396a5d65ec264910818394d2b16a6d32e6f7291c763a78d008d95f28e91506d848ebea873a12213bbaf9a3301f1ee3e", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = accept(r3, &(0x7f0000000500)=@generic, &(0x7f0000000280)=0x80) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000600)={"6b804cc9ad048aa844244cfe402574ed", 0x0, 0x0, {0x1, 0x2}, {0x5, 0x601}, 0x400, [0x7, 0xffffffffffff0000, 0x9, 0x8, 0x3ff, 0x80, 0xfff, 0x8bee, 0xa594, 0x4, 0x0, 0x5, 0xeebb, 0x9, 0x6, 0x1]}) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000780)={{r7}, r8, 0x1c, @inherit={0x58, &(0x7f0000000700)={0x0, 0x2, 0x5, 0x1f, {0x27, 0x5, 0x6, 0x1, 0x9}, [0x3, 0x20]}}, @name="46ec2117edd3a56aa101b52dddd038b30efd5974d9f757ad008fb476d83912156636ddd998c5a394f41336b38195736240dc2fad18bf137000796f790af144f9c262bd822dc2cce03ac70c96641f67f0720119ac33ecd14d85d86952ad9abc8a6308fd43f9d6b3bdbe100142f0b556956aec62112958fa9864f06c90ace805cd9bcfa535255c8fd89ce7813a6a7be98eb3da8695e2a6b794eff20429c6fd352940fefb490e7350d965b060e0cf9986193a148513579a8df8748388a735c09f1ff124159a58b6bdd9d1618cfd71cec5e848c4b70ad14cab7c1656550b277359d6b138e586059d222040f5e1dd53c71831832a21fb510b60b13261bae2989767101b221403c888be9a6a901eb4d4fba609509e6bc09068ef71c0f73adacd2489c1b3df3cc0e6390e06b3e27aba216e376846bf1bc5ebee89af1423efae9746d7cad7ee640f1eb62569aba8beab02b010510e0a864153eeb4afb82e400f42331ec8c9bf4149e4be1228eff7f70850960c6d71b7295925692fbcdb60cfd4ad700120436e760a564ea4f8d98a645a9d274fe17e862b95702528d0e83f55b5bdc274032f45c86ea62fbd96fb0c6019f20d57755a9301dce9da0558face5419cc933359b6b4943221fa3370bfa66abcfe61f66f4ae7c3f48a33036ad71d196549ae56deedd20cd1f3cbae558d0f96421f3c3c641d9dc7d2cab5bec7c7b54c07d481d5f234481715b758e8ab6bb069ddd22cc4505a2f10eb20f47bcc1e48906db15d7cd22a892b11cc3a5d7e233354b5135116b883ba1106fa3fa4aee578471000919d5fd14de3c90c3a7e7802149a266333ce713abfb372af4bbf9f14962146d8301c563d30217314f95855b16e5c1edf7ae62cc622331a403c6b13b8a46dd04162ac73a44f91c11fc8fd24d01214516920d342fd721c8fc96abea57248036e4be12111433c0859573c066297f5d6b9d424b3e60548f2fb5b777d436f655e0db3af98bb7d57d6fbb29d97c369fc1045ce23299e4618c6be8b1b9398612b3616a5042f913fef1ce9511a0ca052585784e1333c09b97367ee77ab609d4892395c4055657c6219e6d6461a8f247827951ca05b9b1007ba5b6eb044505d2ef3589f9e714cb5746fca69a2dece4d2daa46023c7746c497e193fc5e77b673d5793f7c296d28c7f0694116a31c60e4a4c7559bd718c3208af34834d56cecb0dabcf632beca43ea934ec37bfb6ee62a2f324af6427e396cf5a9f0b2dc036a194dec482a42693c9a0c03e319534f421ef6335e8f3f78cbf232bf157cafa9771248bfc1ac9741ebab3061813a46efd3694d31f4051f5b322f1bc97d5c470becbf91d80418edf3ed7ca54691d7ba6da06c3a666dafa4c01d0a73a6b1fb65e25a732438d0beb5d0436c0dbd231d0c2f146c22c586d33ef4e5ae176a848d0e7aeaf4e0a70d154756376c4f81e20e1e34425caaa8ab2c6a97cac01064f5d0b04b738af2cc4062afd4b551c49bec7d69e3b50f0398b0570195e0969d3864549ca648a66b47108fb192553396a3b287c80ccd43836bbb5eb865d14565b83b0bcc62e4279af0ce2a1dac0af769a109008cbe175761449ac95f821a9e1aa33ae370763a0472c0a0fc54be5164f620babcec39828e4da1a25c7c5921c0551d09dd59f7fe28963e435f20dcd89d40168921b62e227a27e2e624e066b3256ae3d33185058ee8ff6f78cd353bb270603d3d92569f619d2deef7e493d420b39fd960d21325815810a837af125033c1590468d0c462062a86398a3ade891240df294ced87cad487b52534d1b45f0628ea20c3dcc915dc82eab661e23afa3d3cb5417d3d869b77b1c109b65fdb02534718e660a86d480fdc8602110f85d873fb6a8b5a7799fc7c163b39af555b31261f85ba21b66fa9479afec3cbf2c3ee9c0fa7fe92293228aa16d5bcc7fcb41ee2345f4c8e81265b865d4f2f0c6f85b8bc12b1c510b945dd1b464abae3393aab388f0ee40cdcc13ec468afb8c3dc739a82e8468a1d1934a2ad57078c1dcbc9a42012299633adfab9dca2efecda1a77e3fc6390884b5e8da2dffc371d15a5ee235046742e5fce9f6b2fbe1a4a65ba4b6fa8a71950ef1996c0b9ae8a75183a4dcf6e2cb782f3b3225644788b6f377628de4365816f8118793b754eea47e6217cca3443a2606392dc5b3322b8aa2b532de78f22f2687d0ae7b5d46e5aefcf4ed62776e382471837ab2607b2172fb85b1ff90cc6edc9e2c58ac7bb341557c0c7dfc94480b88da966a7ae699fdcc10ded4a40df3e8a0a473030599e27420cd81248fa5aeb90890db05e748454be80e831947edff298551c3fcd99e679299092bc443b0a81ae9e42799dfaed1edefb11e5ce1b41d5c77339a9820ae42fafc048746fc9cd198bf812e52502e530c3c3ebd5319bea85cb64a1ff0fdfe17693bd17f7c782db66049988d71ca5fa4141d1e6742709c26beaae11cf45da70a27ebb46b9799dd49ec8d40ddb53184f064f2cd294936f90c349c0604cab207edbb7cece5852017b837c0a9038469bb69c30d16bc6872fef9f267692e9976b4333913077618fe057ef6030fad3aa4953015c52d36322f6db15bce3192c5c2d7e185a4fdfcaab52bb66cb569aa62891f2416d9f919f51f20a23a9047b30317c351fc51193c24d5169ca5f4de610450ddb88dea3ef120d86370f2d0dc6934bd525465d75e0c433e7c6f7d9f9fe8987dd756c7c3b9f1795b736740d0816dc76191129588e506c16f53bc790e829a852c9a5e3f27bb20c630bd874181d22440ed018bbec8ac09ff413cf4ad159e6c75b953c30a69f2d9db084948d2b1453ceb538eb44fb240a21206098d04ff78bd30e0a431f5b4297ba53fc851a29e6ed427e007057926df89b39b482b95a7d6d5a0687c26dc791e9463b4f640b0cc7691edb2698edba46765aead87664ce85453154c7295e7df6ebc3d1388771404f4a909464f8de77748c213391229298af973b82a0a50a8792c507a8efb83cd54d6e14e19edfdc8954c10d6a8635ac840d97578c659eeec9f065c1a9dc745b32dc58cec6197b3677adf1c5398369ba57464472b953883d7516d0ffbd40aeb4c1bbbe895143118ac33c037fe0d937ef01b66ebd8adfb9eeea657b9badf633c6d1d7195902f0f1e7f0cb8efb06bdf769fe25ce80b99225d73cd5bc541ed306689fee99b360410e66c1385c71d8ba05422b6d8ef0c8a256ca3f0d0ad93d61365f4389a10edef23af3dfa3b60784211511133bcc13446431331b7d43293723394d1efb7d7c3ae7fd552bdf89b0c817b568a5959e85c3d567d9bea1ba9e63ac436113df548a0cc469a819c4b06461a5d750464e2b9da8e36a470b49091f91c3556c52f8fc425b007b5cd955ea1808247334476585b4b0973a10aef41a493d59265c2216f62fc3d098301f4152f5a101ccd48c2cb003171a1bd8884b1113bb1599259d7072a19f386be28c54e17c5178a6790a5b61e71a44857f2955dc5471ebfde1f47ce7a03ac0ff7eff7e27c8ed16c09213b8e85f67de79cf8adfdd9b813ecd2477c5b91a56dfd9834d1c99f03ce4cadf629e782090d6ad8aa16050f1280f2e124a424a040adaccaf58907921ce7929c6486d31f3d884d62c6e92b019125c962e2f3580dae45d1f1dbedb1d373d076d0ba704c3d8127718a4f5587c39355da4e07df86354bdaf1a63fec9c3dafefb7d93589eb363954fe4c4ebb17e0460e6c000373490aa9e193afdb503e542d4137cafe9c05302c91e6e43eec29c26676c307ffbb08461db4885f557244e0421b3bef4e167484bf6ed2e16270a05242d29720c24d6bc44670ff8924c156c44a5dea732d534acf5424443f375525c8a6b09b57bc778704385fa200ed3ea6346daa79782ee8bd47305d8afc86e653fd1a56172f26f6c86af78e214f07d7ca5171feaf8246bbb37736dde1d4f9a1d1b5630ea988c9b2027c964a26071c7a5df31cb60fe30c9b900d5e4c3c8b615d42c2717013ffb9d61c733e4c96bc6f8fc8eb7d709c69454fdb6396d0a345bf37a2f3b0b446f0df940b8241a21ddd9dc51ca54f43ba0d04e0be82cf71479597008a2003c345ac11cf9ac9256cf42c468a2b8022576f8d33b0347d50ecf4c557bf82d1c660d609bab673c8deac7739a237873643d1dd5d5159a3648374222439611c3b1b06515d1d436f25510609648dad76f66c9047ab95a50746528d25703db5635fe07fa4afa2ad17708f6bea11c485f6b64aedf3efde14c2d20dbc00bcf02ed33a0a00103ba99e5ba98439e09ce0ac15ae1d27136fe1e1f709ec994bb9d3b8e90612cb9109595de5dd6abd9c1aaa47b9a6dcfd764a3e8fc07420de9228ac6a4f9511cc842f2adb05a3a95e341c8353d9c193ed79453b386c02e115e99f6a6d5980ff5a52e3d590d170d19478d81788c6b6c1fd623d1ab716149fbc7ac7f3a2d43f263234eeb12990ff306c3c3d2eaea29707966fba32e4eed85162cfcb05718bbcb5fbca52809bbde2c322ded0b31982f6b23d319089f6f404f04036b69f29fb1a9c2e1fe52ce78eef4f751a5210d5aecc2ac2ef86d70889987a4f42581fa58dbd04d8904b1edeafa127e62d00c07c199091184a934ba7ed44127640290dfe586d3d1de5e39ae66ae086960b562f451f255545ff5e521e230b18572b430d90fe5870a457d5bd5db63d8aec22608b3a8d33540d4ebe5ca42d3a01befcc36fd0005067785522b1b58408d3c2ef7f57429ebd4f8b44b307d82235f1345abb02d740e417bb0c903c039353911264e16734becb7faedca9af9918085ec3696279f94e39c56b862bef2d23bc5eb5b3974241a5e0e53625317a4136ef3b6cf7ad9a616114172b9619904f582d24e82f3f4ade5d093d52550f926bff54c366789e08561d33baf93e1134858935a71e2dd48bbbcf4a6e462b24d5eb7a4e60871aa1529af5a29f707ef15671d1af056e6b98d23b25a0147455d40b435c008e2cbb84b0535ddff17721f549cf70cbe089bfe25085349c3f0a6b374d3e4aee54b8ca44c74b702a3bb6930c91c143741121cbb8e074876af8b84fed7ab49408bab05c6025ee8a7da2f8ace15b7424bc95ebd0b15966865b3e5b582347849791b4d48fefae3a8ca8cd5fc6ee416381a67fd1c13b6728755e1b3b2afe82230d7fecdccc48aa503ad19700b835f7856672c5eade13aa23902b273bb5b4abbfa1549ae0de500181d6b7bd7955401c7fe4e04d7f897af1643304f18060c141fc5249430e87899c945f5c5380362aa063dcd0f93c3e9026cf1cdf311d3658c85a9a18e221d611776feaf58c9324dc5e66eaaaba9cc4395ff5320d48ff2aa1e6354a2301c529710a6df7ebabdec6d66fb9361f236cfd6eae435a001d3317abfc3dc4710c27404f1c4bafc0ca5eff981ecc2d8a636f0adb1a66079afd1b4d7a151b69bdb36379db5e7e318c3399036ecc2a55cbfee7b12cec3f7f1b85fd9bf89948b83722e604debfa1c3b379144ef319a2652e37c03abf24bd5fe1febcae190c647eaa0dab24cecc6570f6026300d85c3860886c1f4d477337839eded5bf04ea24cf6831b2ae4de3ba83f7938c6e676a3fb875278a5035a2a04f2642f22c6d283eb5e614982a8c4242484ac00e20acc4d54ff35ba7fffece5b6fcefb3039e5b3c87c3b94529eb88964f8d24ab7492575fc16f8dea5b918531d40d02ba1d49f2d85462617a23a5ea"}) 05:50:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x3f00, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 566.029350] 9pnet_fd: Insufficient options for proto=fd [ 566.038119] 9pnet_fd: Insufficient options for proto=fd 05:50:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f"], 0x40}}, 0x0) [ 566.085728] 9pnet: Could not find request transport: fd0x0000000000000004 05:50:44 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) r2 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r2, 0x3) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:50:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r0]) [ 566.161654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:50:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 566.194996] 9pnet_fd: Insufficient options for proto=fd [ 566.213980] 9pnet_fd: Insufficient options for proto=fd [ 566.292714] 9pnet: Could not find request transport: fd0x0000000000000004 05:50:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f"], 0x40}}, 0x0) 05:50:58 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) r2 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r2, 0x3) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:50:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:50:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:50:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r0]) 05:50:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:50:58 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7f, 0xda, 0xff, 0x40, 0x0, 0x6, 0x2, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x10001}, 0x8, 0x2, 0x0, 0x2, 0x7, 0x10001, 0x1331, 0x0, 0xaef5, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0x7, r0, 0x2) io_setup(0x3, &(0x7f0000000200)=0x0) io_cancel(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x800, r0, &(0x7f0000000440)="a165ff7a3f867c9ffe4f3b83eeb2a29d512bc2810a9a8ccd9a8d48f3308611211477f3b45e7e860c28440ab96b78748fec2c3a824e6ba5d0f19738cf292d9dae8ac43bcb866adfa1adde52081f717ec95ec79896d044a79fd221c7a399caf81f51bf09237fd3d4e8c7d6550218ee31d2c15502b8f42d5d1962a27266e2215fb2749388a41b037a1d6d621773c95b7379dce3587e9e797b1bcb56553924a046b98900d03e67716016ae06e1eb05ab95", 0xaf, 0x3, 0x0, 0x2}]) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @remote, 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d53cab92cf27407f6fb62e5887a2c90d0ffe58677ed1eb522f3f4ee592fd102a9c74cf8d8c76c84cb80503014b401268c85467f0d6cc0ec6159402f8abf32599f27fca5cbd2870c2d2a941ec69e2f7795201eaabe9efd1c0f61658007882e7a06a66c33d1a5f59dd779567636261887ca7b67c42886ae86954b00f016581550f03e29433ff6d901eab25486dfeef787adce27d17f68d94173512ef1a2bec98a2d69bed14396a5d65ec264910818394d2b16a6d32e6f7291c763a78d008d95f28e91506d848ebea873a12213bbaf9a3301f1ee3e", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = accept(r3, &(0x7f0000000500)=@generic, &(0x7f0000000280)=0x80) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000600)={"6b804cc9ad048aa844244cfe402574ed", 0x0, 0x0, {0x1, 0x2}, {0x5, 0x601}, 0x400, [0x7, 0xffffffffffff0000, 0x9, 0x8, 0x3ff, 0x80, 0xfff, 0x8bee, 0xa594, 0x4, 0x0, 0x5, 0xeebb, 0x9, 0x6, 0x1]}) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000780)={{r7}, r8, 0x1c, @inherit={0x58, &(0x7f0000000700)={0x0, 0x2, 0x5, 0x1f, {0x27, 0x5, 0x6, 0x1, 0x9}, [0x3, 0x20]}}, @name="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"}) 05:50:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) [ 580.297774] 9pnet_fd: Insufficient options for proto=fd [ 580.298990] 9pnet_fd: Insufficient options for proto=fd [ 580.343947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:50:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r0]) [ 580.503868] 9pnet_fd: Insufficient options for proto=fd 05:50:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 580.522204] 9pnet_fd: Insufficient options for proto=fd [ 580.537442] 9pnet_fd: Insufficient options for proto=fd 05:50:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f"], 0x40}}, 0x0) 05:50:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x1517f, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:50:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r0]) 05:50:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 580.731174] 9pnet_fd: Insufficient options for proto=fd [ 580.753984] 9pnet_fd: Insufficient options for proto=fd [ 580.790000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:50:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000020000000000000001100000050505050505000000700000004008e007de7db704c6308465a473942de994bb5c4085a60f16e3ae07f15db007c5baf"], 0x40}}, 0x0) 05:51:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x80000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:51:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:51:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f"], 0x40}}, 0x0) 05:51:13 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) r2 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r2, 0x3) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:51:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:51:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:51:13 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) r2 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r2, 0x3) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:51:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r0]) [ 595.099345] 9pnet_fd: Insufficient options for proto=fd [ 595.104587] 9pnet_fd: Insufficient options for proto=fd [ 595.122330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:51:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xfeffff, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:51:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:51:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r0]) [ 595.182598] 9pnet_fd: Insufficient options for proto=fd [ 595.193546] 9pnet_fd: Insufficient options for proto=fd [ 595.270399] 9pnet_fd: Insufficient options for proto=fd [ 595.278740] 9pnet_fd: Insufficient options for proto=fd 05:51:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:51:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:51:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r0]) 05:51:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:51:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f"], 0x40}}, 0x0) 05:51:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:51:28 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) r2 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r2, 0x3) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:51:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:51:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:51:28 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) r3 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r3, 0x3) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r4 = gettid() ioprio_set$pid(0x2, r4, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r4], 0x1, {r5}}, 0x58) 05:51:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) r2 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r2, 0x3) perf_event_open(0x0, 0x0, 0x1, r0, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:51:28 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) r3 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r3, 0x3) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r4 = gettid() ioprio_set$pid(0x2, r4, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r4], 0x1, {r5}}, 0x58) 05:51:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x8000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 610.163830] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 610.222741] 9pnet_fd: Insufficient options for proto=fd 05:51:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f"], 0x40}}, 0x0) 05:51:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x8100000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:51:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 610.295424] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:51:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:51:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000002000000000000000110000005050505050500000070000000400"], 0x40}}, 0x0) 05:51:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:51:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xa000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:51:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xb000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:51:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) [ 610.520757] 9pnet_fd: Insufficient options for proto=fd 05:51:42 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) r3 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r3, 0x3) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r4 = gettid() ioprio_set$pid(0x2, r4, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r4], 0x1, {r5}}, 0x58) 05:51:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f"], 0x40}}, 0x0) 05:51:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) r2 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r2, 0x3) perf_event_open(0x0, 0x0, 0x1, r0, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:51:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:51:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:51:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:51:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) r2 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r2, 0x3) perf_event_open(0x0, 0x0, 0x1, r0, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:51:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) r2 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r2, 0x3) perf_event_open(0x0, 0x0, 0x1, r0, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) [ 624.606176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:51:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f"], 0x40}}, 0x0) [ 624.640091] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 624.693335] 9pnet_fd: Insufficient options for proto=fd 05:51:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f"], 0x40}}, 0x0) [ 624.784400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:51:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:51:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:51:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:51:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) r2 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r2, 0x3) perf_event_open(0x0, 0x0, 0x1, r0, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:51:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000020000000000000001100"], 0x40}}, 0x0) [ 624.977049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 624.995696] 9pnet_fd: Insufficient options for proto=fd 05:51:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 625.084133] 9pnet_fd: Insufficient options for proto=fd 05:51:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:51:59 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:51:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000020000000000000001100"], 0x40}}, 0x0) 05:51:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:51:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) r2 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r2, 0x3) perf_event_open(0x0, 0x0, 0x1, r0, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:51:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:51:59 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:51:59 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) r3 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r3, 0x3) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r4 = gettid() ioprio_set$pid(0x2, r4, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r4], 0x1, {r5}}, 0x58) [ 641.184536] 9pnet_fd: Insufficient options for proto=fd [ 641.216358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:51:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:51:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:51:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:51:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:51:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000020000000000000001100"], 0x40}}, 0x0) 05:51:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x27000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:51:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x3f000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:52:00 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:52:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:52:16 executing program 7: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:52:16 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:52:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:52:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:52:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) r2 = memfd_secret(0x80000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x81, 0x4, 0x7, 0x0, 0x1, 0x3017, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaf, 0x2, @perf_config_ext={0x3, 0x7fff}, 0x40465, 0xe9, 0x5, 0x2, 0x5, 0xa4, 0x1e2, 0x0, 0x1}, 0x0, 0x10, r2, 0x3) perf_event_open(0x0, 0x0, 0x1, r0, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:52:16 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:52:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x7f510100, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:52:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 658.231988] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:52:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:52:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:52:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 1) 05:52:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000020000000000000001100"], 0x40}}, 0x0) 05:52:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 658.470791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:52:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 2) 05:52:31 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0x40, 0x0, 0x20, 0x0, 0x60, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0xc1, 0x2}, 0x40410, 0x9, 0x4, 0x1, 0x9, 0x8000, 0x20, 0x0, 0xd0, 0x0, 0x4}, r1, 0xffffffffffffffff, r0, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0x8000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) 05:52:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000020000000000000001100"], 0x40}}, 0x0) 05:52:31 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:52:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:52:31 executing program 7: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)=ANY=[@ANYBLOB="01991c6a5b8000000ce0"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r2, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000180)={0x8, 'lo\x00', {'veth0_to_team\x00'}, 0x5}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000392}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)) close_range(r4, 0xffffffffffffffff, 0x0) finit_module(r1, 0x0, 0x1) 05:52:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:52:31 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) [ 673.053965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:52:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xfeffffff, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:52:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000020000000000000001100"], 0x40}}, 0x0) [ 673.129770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 673.239781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 673.273784] FAULT_INJECTION: forcing a failure. [ 673.273784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.274653] CPU: 1 PID: 5764 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 673.275199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 673.275753] Call Trace: [ 673.275935] [ 673.276105] dump_stack_lvl+0xc1/0xf0 [ 673.276392] should_fail_ex+0x4b4/0x5b0 [ 673.276679] _copy_from_user+0x30/0xf0 [ 673.276965] memdup_user+0x72/0xd0 [ 673.277238] strndup_user+0x78/0xe0 [ 673.277511] __x64_sys_mount+0x137/0x310 [ 673.277809] ? __pfx___x64_sys_mount+0x10/0x10 [ 673.278178] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 673.278548] do_syscall_64+0x3f/0x90 [ 673.278818] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 673.279214] RIP: 0033:0x7fecd4edcb19 [ 673.279477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 673.280742] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 673.281256] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 673.281773] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 673.282289] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 673.282797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.283302] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 673.283824] 05:52:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xffff0000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:52:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000002000000000000000110000005050"], 0x40}}, 0x0) 05:52:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 3) 05:52:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xfffffe00, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:52:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000002000000000000000110000005050"], 0x40}}, 0x0) 05:52:46 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:52:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xffffff7f, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:52:46 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:52:46 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:52:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:52:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 4) 05:52:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000002000000000000000110000005050"], 0x40}}, 0x0) 05:52:46 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) [ 688.406322] FAULT_INJECTION: forcing a failure. [ 688.406322] name failslab, interval 1, probability 0, space 0, times 0 [ 688.407825] CPU: 1 PID: 5791 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 688.408649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 688.409448] Call Trace: [ 688.409715] [ 688.409954] dump_stack_lvl+0xc1/0xf0 [ 688.410368] should_fail_ex+0x4b4/0x5b0 [ 688.410793] should_failslab+0x9/0x20 [ 688.411202] __kmem_cache_alloc_node+0x66/0x310 [ 688.411705] ? copy_mount_options+0x55/0x180 [ 688.412182] kmalloc_trace+0x26/0xc0 [ 688.412578] copy_mount_options+0x55/0x180 [ 688.413017] __x64_sys_mount+0x1ac/0x310 [ 688.413444] ? __pfx___x64_sys_mount+0x10/0x10 [ 688.413484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 688.413920] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 688.415038] do_syscall_64+0x3f/0x90 [ 688.415452] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 688.416004] RIP: 0033:0x7fecd4edcb19 [ 688.416380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 688.418156] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 688.418931] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 688.419629] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 688.420343] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 688.421074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.421805] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 688.422559] 05:52:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 5) 05:52:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000020000000000000001100000050505050"], 0x40}}, 0x0) 05:52:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) sendfile(r2, r3, 0x0, 0x8) sendfile(r1, r0, 0x0, 0xfffffdef) [ 688.541358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 688.546266] 9pnet: Could not find request transport: fd0x0000000000000004 05:52:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:52:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:52:47 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:52:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 6) [ 689.928745] 9pnet: Could not find request transport: fd0x0000000000000004 05:52:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:52:48 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:52:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000020000000000000001100000050505050"], 0x40}}, 0x0) 05:52:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:52:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xfffffffe, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:52:48 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:52:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 690.171468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 690.462333] 9pnet: Could not find request transport: fd0x0000000000000004 05:53:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 7) 05:53:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) sendfile(r2, r3, 0x0, 0x8) sendfile(r1, r0, 0x0, 0xfffffdef) 05:53:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:53:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x1000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:53:04 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:53:04 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r2 = gettid() ioprio_set$pid(0x2, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r2], 0x1, {r3}}, 0x58) 05:53:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000020000000000000001100000050505050"], 0x40}}, 0x0) 05:53:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 706.178197] FAULT_INJECTION: forcing a failure. [ 706.178197] name failslab, interval 1, probability 0, space 0, times 0 [ 706.179067] CPU: 0 PID: 5847 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 706.179601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 706.180158] Call Trace: [ 706.180338] [ 706.180503] dump_stack_lvl+0xc1/0xf0 [ 706.180782] should_fail_ex+0x4b4/0x5b0 [ 706.181072] ? getname_flags.part.0+0x50/0x4f0 [ 706.181399] should_failslab+0x9/0x20 [ 706.181672] kmem_cache_alloc+0x61/0x390 [ 706.181973] getname_flags.part.0+0x50/0x4f0 [ 706.182299] getname_flags+0x9e/0xf0 [ 706.182576] user_path_at_empty+0x2f/0x70 [ 706.182877] __x64_sys_mount+0x1ed/0x310 [ 706.183174] ? __pfx___x64_sys_mount+0x10/0x10 [ 706.183503] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 706.183878] do_syscall_64+0x3f/0x90 [ 706.184149] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 706.184517] RIP: 0033:0x7fecd4edcb19 [ 706.184773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 706.185959] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 706.186472] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 706.186959] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 706.187430] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 706.187904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.188370] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 706.188892] [ 706.208836] 9pnet_fd: Insufficient options for proto=fd [ 706.270264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:53:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:53:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 8) 05:53:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000002000000000000000110000005050505050"], 0x40}}, 0x0) 05:53:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x8000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 706.859181] 9pnet_fd: Insufficient options for proto=fd 05:53:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 9) [ 707.280225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 707.314396] FAULT_INJECTION: forcing a failure. [ 707.314396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.315632] CPU: 0 PID: 5872 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 707.316394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 707.317152] Call Trace: [ 707.317407] [ 707.317637] dump_stack_lvl+0xc1/0xf0 [ 707.318029] should_fail_ex+0x4b4/0x5b0 [ 707.318437] strncpy_from_user+0x38/0x340 [ 707.318892] getname_flags.part.0+0x95/0x4f0 [ 707.319344] getname_flags+0x9e/0xf0 [ 707.319724] user_path_at_empty+0x2f/0x70 [ 707.320140] __x64_sys_mount+0x1ed/0x310 [ 707.320559] ? __pfx___x64_sys_mount+0x10/0x10 [ 707.321023] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 707.321550] do_syscall_64+0x3f/0x90 [ 707.321931] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 707.322440] RIP: 0033:0x7fecd4edcb19 [ 707.322811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 707.324478] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 707.325195] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 707.325855] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 707.326514] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 707.327178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.327846] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 707.328555] 05:53:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:53:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:53:19 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:53:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000002000000000000000110000005050505050"], 0x40}}, 0x0) 05:53:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xfeffff00000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:53:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 10) 05:53:19 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@initdev, @in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f00000006c0)=0xe8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000440)={0xffffffffffffffff, 0x7, 0xea, 0x3f}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x140, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x100, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x7f}, {0x5}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x61b1}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x7fff}, {0x5}, {0x6, 0x11, 0x6}, {0x8}}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x0, 0x7f, 0x1f, 0x0, 0x5, 0x0, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x8000, 0x4, 0x101, 0x2, 0x5, 0x1, 0x200, 0x0, 0x5, 0x0, 0x9}, r0, 0x9, r1, 0x1) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x7, 0x0, 0x2, 0xd4, 0x0, 0x100, 0x44040, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x46436, 0xfffffffffffffbb8, 0x8, 0x2, 0x59, 0x5, 0x5a9, 0x0, 0x6, 0x0, 0x98d}, 0x0, 0x10, r4, 0xb) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3ff) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6163733d616e792c00cb94ae1a5a0a28f2cd5a881a41d31389b80ff9e487516aed70f643fef723971ddd73f816aa6c3a0c72d647f26b9457"]) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1d, 0xab, 0x8, 0x1f, 0x0, 0x1, 0x12, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x890, 0x5, 0x2, 0x4, 0x4, 0xb4, 0x5, 0x0, 0x0, 0x0, 0x1c0000}, 0xffffffffffffffff, 0xc, r3, 0xe) 05:53:19 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r2 = gettid() ioprio_set$pid(0x2, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r2], 0x1, {r3}}, 0x58) [ 722.009992] 9pnet_fd: Insufficient options for proto=fd [ 722.015012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:53:20 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r2 = gettid() ioprio_set$pid(0x2, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r2], 0x1, {r3}}, 0x58) 05:53:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 722.077004] FAULT_INJECTION: forcing a failure. [ 722.077004] name failslab, interval 1, probability 0, space 0, times 0 [ 722.078665] CPU: 0 PID: 5891 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 722.079734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.080770] Call Trace: [ 722.081185] [ 722.081549] dump_stack_lvl+0xc1/0xf0 [ 722.082108] should_fail_ex+0x4b4/0x5b0 [ 722.082659] should_failslab+0x9/0x20 [ 722.083168] __kmem_cache_alloc_node+0x66/0x310 [ 722.083794] ? alloc_fs_context+0x58/0x9e0 [ 722.084342] ? __print_lock_name+0x201/0x250 [ 722.084957] kmalloc_trace+0x26/0xc0 [ 722.085493] alloc_fs_context+0x58/0x9e0 [ 722.086091] path_mount+0xa6d/0x1e50 [ 722.086657] ? kasan_quarantine_put+0x81/0x1d0 [ 722.087317] ? __pfx_path_mount+0x10/0x10 [ 722.087902] ? putname+0x102/0x140 [ 722.088366] ? kmem_cache_free+0x10d/0x4d0 [ 722.088958] ? putname+0x102/0x140 [ 722.089474] __x64_sys_mount+0x286/0x310 [ 722.090047] ? __pfx___x64_sys_mount+0x10/0x10 [ 722.090667] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 722.091418] do_syscall_64+0x3f/0x90 [ 722.091989] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 722.092686] RIP: 0033:0x7fecd4edcb19 [ 722.093197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.095516] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 722.096491] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 722.097392] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 722.098325] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 722.099271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 722.100182] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 722.101143] [ 722.131381] 9pnet_fd: Insufficient options for proto=fd 05:53:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000002000000000000000110000005050505050"], 0x40}}, 0x0) 05:53:20 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000180)={0x7}, 0x7) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x140) write$P9_RWALK(r1, &(0x7f0000000040)={0x16, 0x6f, 0x2, {0x1, [{0x1, 0x0, 0x5}]}}, 0x16) close_range(r0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) close_range(r2, r0, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000280)) [ 722.227821] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:53:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:53:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:53:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:53:20 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x301042, 0x0) r2 = openat$incfs(r1, &(0x7f0000000380)='.pending_reads\x00', 0x31b200, 0x44) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x8001) write(r2, &(0x7f0000000000)="4107f3356f1ca567583d9b09db4930fe12488b9ad4c8e556a01afbc53c32b46eb3a36811ffbb34cb1802ade052aec4deb2527605cdfc1d13c5ec23254bf23d0f88c68078a751019a225d5212467080edc00e7c06f3695d70afc43aa28158831aee6f2e329fed1e828719c404", 0x6c) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8083, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:53:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 722.319633] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.6'. [ 722.328014] 9pnet_fd: Insufficient options for proto=fd 05:53:38 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) r2 = gettid() ioprio_set$pid(0x2, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r2], 0x1, {r3}}, 0x58) 05:53:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 11) 05:53:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:53:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:53:38 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000100000000000000000000000000000040000000000000000000000000000000000000000000000000523288b38851b39500000000000000ff070000ff01000006000000000000000700000000000000cc90000000000000080000000000000000000000000000000000000000000c000000000000002e09fb000000ff0700000100000000000a000000000000000000c656786500000000070000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000061133fa6006ee93fe2662ed4e800b2536f726b5aa23d4ff96a8d28c30cfc608084f90880ba4669563ec10bbb2672c50ac2fa93413095a593f471f7baf54741c64099495f53fc00350a6a2ee9aabfd1ba8af8403c5e30a935393101c6c019adcb685f9ce49fe3496ac33e4b707d1ccef10a65b6fffd513f82bac98e389cfd397500d50cad3209eaa83aebd987f874147b8abf82cf4acedfdcb95a1d0f4461cb6db07ad4cfa57ea1f4f8c5644c61c8dbbbe7a03ae5fceb8b1613ea8feab6e1ffc7df72028f68cfbef8fb1276c45e73"]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x301042, 0x0) r2 = openat$incfs(r1, &(0x7f0000000380)='.pending_reads\x00', 0x31b200, 0x44) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x8001) write(r2, &(0x7f0000000000)="4107f3356f1ca567583d9b09db4930fe12488b9ad4c8e556a01afbc53c32b46eb3a36811ffbb34cb1802ade052aec4deb2527605cdfc1d13c5ec23254bf23d0f88c68078a751019a225d5212467080edc00e7c06f3695d70afc43aa28158831aee6f2e329fed1e828719c404", 0x6c) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8083, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:53:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x13, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000028020000028400001b8000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e39333832373135313800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001f4ebd2e6bb144ba8e000d53fbc5896c010000000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000010400)="ff3f000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000e0f4655fe1f4655fe1f4655f00000000000004000800000000000000050000000600"/64, 0x40}, {&(0x7f0000012600)="20000000dc5271addc5271ad00000000e0f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012700)="c041000000300000e0f4655fe0f4655fe0f4655f000000000000020018000000000000000000000007000000080000000900"/64, 0x40, 0x4a00}, {&(0x7f0000012800)="20000000000000000000000000000000e0f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4a80}, {&(0x7f0000012900)="ed4100003c000000e1f4655fe1f4655fe1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000f736dadd00000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4b00}, {&(0x7f0000012a00)="ed8100001a040000e1f4655fe1f4655fe1f4655f00000000000001000800000000000000010000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f024aad600000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000000000000000", 0xa0, 0x4c00}, {&(0x7f0000012b00)="ffa1000026000000e1f4655fe1f4655fe1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3933383237313531382f66696c65302f66696c653000000000000000000000000000000000000000000000543a54af00000000000000000000000000000000000000000000000020000000dc5271addc5271addc5271ade1f4655fdc5271ad0000000000000000", 0xa0, 0x4d00}, {&(0x7f0000012c00)="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", 0x1a0, 0x4e00}, {&(0x7f0000012e00)="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", 0x100, 0x5000}, {&(0x7f0000012f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000013000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x7000}, {&(0x7f0000013100)="00000000001000"/32, 0x20, 0x8000}, {&(0x7f0000001800)="00000000001000"/32, 0x20, 0x9000}, {&(0x7f0000013300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x4}], 0x0, &(0x7f0000013800)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) lstat(&(0x7f0000001840)='./file2\x00', &(0x7f0000001880)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) getresuid(&(0x7f0000001640), &(0x7f0000001680)=0x0, &(0x7f00000016c0)) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x7, 0x6, &(0x7f0000001580)=[{&(0x7f0000000140)="2775c660f36cdf5baf317909f0bd9b57860075709e74fbeb072d9f07e9c02c168975bc7ea5ddcfe835f7fd5d6eda9679de1822c744b6e3e2deeb06ad8223348f231cc99f2e49470ac5", 0x49, 0x7fffffff}, {&(0x7f00000000c0)="f98b2989", 0x4, 0x2}, {&(0x7f0000000400)="7c6d25cc262cce1cba95c9fe8f0d373ed4ba0026f1ae80c04244b2c696e77a306e31faebffbba1842e3a908f69babd5d0d3647e24574fc48e026f234a5788a6b38d9de8be289c983bd9d8d9445e04d3fb6c3252f1bfec909c31a369deb474dff5894936177ccc5541fe83038b485a17aa711cd93f54c1da72ba80400ca9bbeab2ed43975fdb73703f3083e4f6744ef63c351593180d6ac82ef76632ea3397b55bc756714ad312e9c975c4dfd547760fa5f91467bfae640ac2d9799", 0xbb, 0x6}, {&(0x7f00000004c0)="afed6f02bd497ebac9a81109be342009c1fb4fbcad5a5e3d6810e037dfc5970bc663c3c4bf21588a0855d60f0fa822449a2014a041fcaf2ddf5a22fdfbba021787c1bc446d380784f12c17ab490bcc46a7f52d727b50f9a2e1279d12cba659b68651d567c5180347985c5073166b0cf54dbd3ce2e09d9f017ce8886a35716d4aa97779b9763230a52639705898ef4a59d703936e58b2d763c53f4b00468f0befe5624763db4fb72df12c950932efe95c3f9eb2cdb12fcf", 0xb7, 0x4786}, {&(0x7f00000001c0), 0x0, 0xffffffffffffffbe}, {&(0x7f0000000580)="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", 0x1000, 0x9}], 0x0, &(0x7f0000001700)={[{@huge_always}, {@huge_always}, {@nr_blocks={'nr_blocks', 0x3d, [0x31, 0x31, 0x70, 0x78, 0x0, 0x30]}}, {@huge_advise}, {@size={'size', 0x3d, [0x37, 0x67, 0x70, 0x78]}}, {@huge_never}, {@uid={'uid', 0x3d, r0}}, {@nr_blocks={'nr_blocks', 0x3d, [0x37, 0x6b, 0x38, 0x25, 0x35, 0x37]}}, {@mode={'mode', 0x3d, 0x37}}], [{@permit_directio}, {@fowner_lt={'fowner<', r1}}, {@audit}]}) 05:53:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:53:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:53:38 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) r2 = gettid() ioprio_set$pid(0x2, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r2], 0x1, {r3}}, 0x58) [ 740.675440] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.6'. [ 740.683250] loop5: detected capacity change from 0 to 512 [ 740.689236] 9pnet_fd: Insufficient options for proto=fd 05:53:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x700000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 740.700592] EXT4-fs (loop5): Invalid log block size: 1803188595 05:53:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 12) 05:53:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 740.794811] loop5: detected capacity change from 0 to 264192 05:53:38 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) r2 = gettid() ioprio_set$pid(0x2, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r2], 0x1, {r3}}, 0x58) [ 740.802194] tmpfs: Unsupported parameter 'huge' [ 740.885561] FAULT_INJECTION: forcing a failure. [ 740.885561] name failslab, interval 1, probability 0, space 0, times 0 [ 740.886366] CPU: 0 PID: 5954 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 740.886959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 740.887545] Call Trace: [ 740.887740] [ 740.887914] dump_stack_lvl+0xc1/0xf0 [ 740.888217] should_fail_ex+0x4b4/0x5b0 [ 740.888528] should_failslab+0x9/0x20 [ 740.888823] __kmem_cache_alloc_node+0x66/0x310 [ 740.889177] ? legacy_init_fs_context+0x44/0xe0 [ 740.889529] ? lockdep_init_map_type+0x21e/0x7e0 [ 740.889896] kmalloc_trace+0x26/0xc0 [ 740.890182] legacy_init_fs_context+0x44/0xe0 [ 740.890520] ? __pfx_legacy_init_fs_context+0x10/0x10 [ 740.890898] alloc_fs_context+0x571/0x9e0 [ 740.891207] path_mount+0xa6d/0x1e50 [ 740.891501] ? kasan_quarantine_put+0x81/0x1d0 [ 740.891853] ? __pfx_path_mount+0x10/0x10 [ 740.892171] ? putname+0x102/0x140 [ 740.892448] ? kmem_cache_free+0x10d/0x4d0 [ 740.892770] ? putname+0x102/0x140 [ 740.893055] __x64_sys_mount+0x286/0x310 [ 740.893373] ? __pfx___x64_sys_mount+0x10/0x10 [ 740.893728] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 740.894124] do_syscall_64+0x3f/0x90 [ 740.894414] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 740.894773] RIP: 0033:0x7fecd4edcb19 [ 740.895062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 740.896351] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 740.896889] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 740.897404] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 740.897911] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 740.898414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 740.898913] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 740.899450] [ 740.912428] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.6'. 05:53:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:53:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:53:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 1) 05:53:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x800000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 740.970225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:53:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 13) 05:53:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000040)="7694fb", 0x3}, {&(0x7f0000000240)="8a2218feb2b269e8226bfee963d54aa27490422b62b2524476faf9ebf75c44f431f57767d6d3298eb6c5c6d46f268f622c45f72172bc90eb9b1df237efa549ed224c", 0x42}, {&(0x7f00000002c0)="1fe23300d7bceee87ccc53f7747b1c8fd20ab8e1a197a01901203ad7a59f1a3fb0fdfde700b7ea6fee409b5e85703fa2d5c90a482d23b7047a24d583454ec290ff82b78422640e4ff55fee760bbf30c99beda02a937deb7c3208e7089879a1e1b72071ad065626af8e6705d78bc0fdcfc4bb6d274acf85a4bc68cee555a2f82ddfb4df03e98c9bcc6518", 0x8a}, {&(0x7f0000000380)="2b09e094548553c2e270f6cc94b9da0b5b12ab4d913e72f21b725b7d9a5f42d71dcc31f7e8bb114ca5baeb7e43ea3fc9e9cfe7274586793ba0d00378ee20ab826ec8fca42b4be14d2375d937b355655817f5509ad26c224d5867ba9c93d92a2c3e49424a3ae149dd1788be23dbe80e6468175cf4", 0x74}], 0x4, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x20040000) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, r2) ptrace(0x10, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x0, 0x4, 0x0, 0x0, 0x7, 0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000180), 0xa}, 0x0, 0x9, 0x3, 0x0, 0xffffffff80000000, 0x7, 0x7c00, 0x0, 0x200, 0x0, 0x9}, 0x0, 0xf, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 05:53:51 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x301042, 0x0) r2 = openat$incfs(r1, &(0x7f0000000380)='.pending_reads\x00', 0x31b200, 0x44) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x8001) write(r2, &(0x7f0000000000)="4107f3356f1ca567583d9b09db4930fe12488b9ad4c8e556a01afbc53c32b46eb3a36811ffbb34cb1802ade052aec4deb2527605cdfc1d13c5ec23254bf23d0f88c68078a751019a225d5212467080edc00e7c06f3695d70afc43aa28158831aee6f2e329fed1e828719c404", 0x6c) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8083, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:53:51 executing program 2: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x1, r0, 0x2) r2 = gettid() ioprio_set$pid(0x2, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r2], 0x1, {r3}}, 0x58) 05:53:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:53:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x810000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:53:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:53:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 2) 05:53:51 executing program 2: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x1, r0, 0x2) r2 = gettid() ioprio_set$pid(0x2, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r2], 0x1, {r3}}, 0x58) [ 753.851436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:53:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:53:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x900000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:53:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 3) 05:53:51 executing program 2: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r1, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x1, r0, 0x2) r2 = gettid() ioprio_set$pid(0x2, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r2], 0x1, {r3}}, 0x58) 05:53:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 14) [ 754.038840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 754.048965] FAULT_INJECTION: forcing a failure. [ 754.048965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.049770] CPU: 1 PID: 6001 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 754.050328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 754.050903] Call Trace: [ 754.051080] [ 754.051251] dump_stack_lvl+0xc1/0xf0 [ 754.051531] should_fail_ex+0x4b4/0x5b0 [ 754.051810] _copy_from_user+0x30/0xf0 [ 754.052098] memdup_user+0x72/0xd0 [ 754.052388] strndup_user+0x78/0xe0 [ 754.052654] __x64_sys_mount+0x137/0x310 [ 754.052956] ? __pfx___x64_sys_mount+0x10/0x10 [ 754.053277] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 754.053638] do_syscall_64+0x3f/0x90 [ 754.053898] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 754.054254] RIP: 0033:0x7f8ba8383b19 [ 754.054507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 754.055695] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 754.056222] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 754.056708] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 754.057187] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 754.057684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.058166] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 754.058644] [ 754.120037] FAULT_INJECTION: forcing a failure. [ 754.120037] name failslab, interval 1, probability 0, space 0, times 0 [ 754.121763] CPU: 0 PID: 6006 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 754.122798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 754.123808] Call Trace: [ 754.124148] [ 754.124447] dump_stack_lvl+0xc1/0xf0 [ 754.124958] should_fail_ex+0x4b4/0x5b0 [ 754.125487] should_failslab+0x9/0x20 [ 754.126005] __kmem_cache_alloc_node+0x66/0x310 [ 754.126621] ? v9fs_mount+0x9e/0xbd0 [ 754.127138] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 754.127865] kmalloc_trace+0x26/0xc0 [ 754.128385] v9fs_mount+0x9e/0xbd0 [ 754.128880] ? __pfx_v9fs_mount+0x10/0x10 [ 754.129439] ? cap_capable+0x1be/0x220 [ 754.129982] ? __pfx_v9fs_mount+0x10/0x10 [ 754.130542] legacy_get_tree+0x109/0x220 [ 754.131100] vfs_get_tree+0x92/0x360 05:53:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) [ 754.131647] path_mount+0x133c/0x1e50 [ 754.132342] ? kasan_quarantine_put+0x81/0x1d0 [ 754.132957] ? __pfx_path_mount+0x10/0x10 [ 754.133502] ? putname+0x102/0x140 [ 754.133986] ? kmem_cache_free+0x10d/0x4d0 [ 754.134539] ? putname+0x102/0x140 [ 754.135035] __x64_sys_mount+0x286/0x310 [ 754.135611] ? __pfx___x64_sys_mount+0x10/0x10 [ 754.136216] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 754.136907] do_syscall_64+0x3f/0x90 [ 754.137423] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 754.138091] RIP: 0033:0x7fecd4edcb19 [ 754.138560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 754.140758] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 754.141716] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 754.142592] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 754.143486] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 754.144357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.145240] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 754.146185] 05:54:08 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x301042, 0x0) r2 = openat$incfs(r1, &(0x7f0000000380)='.pending_reads\x00', 0x31b200, 0x44) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x8001) write(r2, &(0x7f0000000000)="4107f3356f1ca567583d9b09db4930fe12488b9ad4c8e556a01afbc53c32b46eb3a36811ffbb34cb1802ade052aec4deb2527605cdfc1d13c5ec23254bf23d0f88c68078a751019a225d5212467080edc00e7c06f3695d70afc43aa28158831aee6f2e329fed1e828719c404", 0x6c) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x1010, r1, 0x29287000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8083, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x50550, 0x0, 0x0, 0x1, 0xbb63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 05:54:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:54:08 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:54:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 4) 05:54:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000040)="7694fb", 0x3}, {&(0x7f0000000240)="8a2218feb2b269e8226bfee963d54aa27490422b62b2524476faf9ebf75c44f431f57767d6d3298eb6c5c6d46f268f622c45f72172bc90eb9b1df237efa549ed224c", 0x42}, {&(0x7f00000002c0)="1fe23300d7bceee87ccc53f7747b1c8fd20ab8e1a197a01901203ad7a59f1a3fb0fdfde700b7ea6fee409b5e85703fa2d5c90a482d23b7047a24d583454ec290ff82b78422640e4ff55fee760bbf30c99beda02a937deb7c3208e7089879a1e1b72071ad065626af8e6705d78bc0fdcfc4bb6d274acf85a4bc68cee555a2f82ddfb4df03e98c9bcc6518", 0x8a}, {&(0x7f0000000380)="2b09e094548553c2e270f6cc94b9da0b5b12ab4d913e72f21b725b7d9a5f42d71dcc31f7e8bb114ca5baeb7e43ea3fc9e9cfe7274586793ba0d00378ee20ab826ec8fca42b4be14d2375d937b355655817f5509ad26c224d5867ba9c93d92a2c3e49424a3ae149dd1788be23dbe80e6468175cf4", 0x74}], 0x4, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x20040000) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, r2) ptrace(0x10, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x0, 0x4, 0x0, 0x0, 0x7, 0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000180), 0xa}, 0x0, 0x9, 0x3, 0x0, 0xffffffff80000000, 0x7, 0x7c00, 0x0, 0x200, 0x0, 0x9}, 0x0, 0xf, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 05:54:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xa00000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:54:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:54:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 15) 05:54:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 16) [ 770.924288] FAULT_INJECTION: forcing a failure. [ 770.924288] name failslab, interval 1, probability 0, space 0, times 0 [ 770.925820] CPU: 1 PID: 6029 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 770.926862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 770.927943] Call Trace: [ 770.928290] [ 770.928598] dump_stack_lvl+0xc1/0xf0 [ 770.929124] should_fail_ex+0x4b4/0x5b0 [ 770.929668] should_failslab+0x9/0x20 [ 770.930186] __kmem_cache_alloc_node+0x66/0x310 [ 770.930814] ? copy_mount_options+0x55/0x180 [ 770.931422] kmalloc_trace+0x26/0xc0 [ 770.931930] copy_mount_options+0x55/0x180 [ 770.932503] __x64_sys_mount+0x1ac/0x310 [ 770.933059] ? __pfx___x64_sys_mount+0x10/0x10 [ 770.933689] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 770.934401] do_syscall_64+0x3f/0x90 [ 770.934933] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 770.935653] RIP: 0033:0x7f8ba8383b19 [ 770.936163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 770.938520] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 770.939543] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 770.940651] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 770.941622] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 770.942559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.943496] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 770.944452] 05:54:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xb00000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 771.074839] FAULT_INJECTION: forcing a failure. [ 771.074839] name failslab, interval 1, probability 0, space 0, times 0 [ 771.075636] CPU: 0 PID: 6034 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 771.076169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 771.076712] Call Trace: [ 771.076901] [ 771.077069] dump_stack_lvl+0xc1/0xf0 [ 771.077353] should_fail_ex+0x4b4/0x5b0 [ 771.077650] should_failslab+0x9/0x20 [ 771.077932] __kmem_cache_alloc_node+0x66/0x310 [ 771.078261] ? kasan_save_stack+0x32/0x50 [ 771.078555] ? v9fs_session_init+0xab/0x17b0 [ 771.078873] ? __kasan_kmalloc+0x7f/0x90 [ 771.079162] ? v9fs_mount+0x9e/0xbd0 [ 771.079445] ? v9fs_session_init+0xab/0x17b0 [ 771.079767] __kmalloc_node_track_caller+0x4e/0x160 [ 771.080126] kstrdup+0x3f/0x80 [ 771.080375] v9fs_session_init+0xab/0x17b0 [ 771.080671] ? __kmem_cache_alloc_node+0x20b/0x310 [ 771.081020] ? __pfx_lock_release+0x10/0x10 [ 771.081343] ? __pfx_v9fs_session_init+0x10/0x10 [ 771.081681] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 771.082047] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 771.082405] ? v9fs_mount+0x9e/0xbd0 [ 771.082682] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 771.083088] v9fs_mount+0xbd/0xbd0 [ 771.083355] ? __pfx_v9fs_mount+0x10/0x10 [ 771.083669] ? cap_capable+0x1be/0x220 [ 771.083962] ? __pfx_v9fs_mount+0x10/0x10 [ 771.084275] legacy_get_tree+0x109/0x220 [ 771.084565] vfs_get_tree+0x92/0x360 [ 771.084862] path_mount+0x133c/0x1e50 [ 771.085174] ? kasan_quarantine_put+0x81/0x1d0 [ 771.085532] ? __pfx_path_mount+0x10/0x10 [ 771.085850] ? putname+0x102/0x140 [ 771.086138] ? kmem_cache_free+0x10d/0x4d0 [ 771.086450] ? putname+0x102/0x140 [ 771.086742] __x64_sys_mount+0x286/0x310 [ 771.087050] ? __pfx___x64_sys_mount+0x10/0x10 [ 771.087387] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 771.087802] do_syscall_64+0x3f/0x90 [ 771.088078] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 771.088467] RIP: 0033:0x7fecd4edcb19 [ 771.088727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 771.089999] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 771.090510] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 771.091024] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 771.091520] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 771.092038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 771.092521] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 771.093063] 05:54:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 5) 05:54:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:54:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:54:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:54:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 17) 05:54:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:54:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 6) 05:54:22 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:54:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000040)="7694fb", 0x3}, {&(0x7f0000000240)="8a2218feb2b269e8226bfee963d54aa27490422b62b2524476faf9ebf75c44f431f57767d6d3298eb6c5c6d46f268f622c45f72172bc90eb9b1df237efa549ed224c", 0x42}, {&(0x7f00000002c0)="1fe23300d7bceee87ccc53f7747b1c8fd20ab8e1a197a01901203ad7a59f1a3fb0fdfde700b7ea6fee409b5e85703fa2d5c90a482d23b7047a24d583454ec290ff82b78422640e4ff55fee760bbf30c99beda02a937deb7c3208e7089879a1e1b72071ad065626af8e6705d78bc0fdcfc4bb6d274acf85a4bc68cee555a2f82ddfb4df03e98c9bcc6518", 0x8a}, {&(0x7f0000000380)="2b09e094548553c2e270f6cc94b9da0b5b12ab4d913e72f21b725b7d9a5f42d71dcc31f7e8bb114ca5baeb7e43ea3fc9e9cfe7274586793ba0d00378ee20ab826ec8fca42b4be14d2375d937b355655817f5509ad26c224d5867ba9c93d92a2c3e49424a3ae149dd1788be23dbe80e6468175cf4", 0x74}], 0x4, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x20040000) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, r2) ptrace(0x10, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x0, 0x4, 0x0, 0x0, 0x7, 0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000180), 0xa}, 0x0, 0x9, 0x3, 0x0, 0xffffffff80000000, 0x7, 0x7c00, 0x0, 0x200, 0x0, 0x9}, 0x0, 0xf, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 05:54:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:54:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000040)="7694fb", 0x3}, {&(0x7f0000000240)="8a2218feb2b269e8226bfee963d54aa27490422b62b2524476faf9ebf75c44f431f57767d6d3298eb6c5c6d46f268f622c45f72172bc90eb9b1df237efa549ed224c", 0x42}, {&(0x7f00000002c0)="1fe23300d7bceee87ccc53f7747b1c8fd20ab8e1a197a01901203ad7a59f1a3fb0fdfde700b7ea6fee409b5e85703fa2d5c90a482d23b7047a24d583454ec290ff82b78422640e4ff55fee760bbf30c99beda02a937deb7c3208e7089879a1e1b72071ad065626af8e6705d78bc0fdcfc4bb6d274acf85a4bc68cee555a2f82ddfb4df03e98c9bcc6518", 0x8a}, {&(0x7f0000000380)="2b09e094548553c2e270f6cc94b9da0b5b12ab4d913e72f21b725b7d9a5f42d71dcc31f7e8bb114ca5baeb7e43ea3fc9e9cfe7274586793ba0d00378ee20ab826ec8fca42b4be14d2375d937b355655817f5509ad26c224d5867ba9c93d92a2c3e49424a3ae149dd1788be23dbe80e6468175cf4", 0x74}], 0x4, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x20040000) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, r2) ptrace(0x10, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x0, 0x4, 0x0, 0x0, 0x7, 0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000180), 0xa}, 0x0, 0x9, 0x3, 0x0, 0xffffffff80000000, 0x7, 0x7c00, 0x0, 0x200, 0x0, 0x9}, 0x0, 0xf, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 05:54:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 784.234463] FAULT_INJECTION: forcing a failure. [ 784.234463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.236314] CPU: 1 PID: 6070 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 784.237298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 784.238290] Call Trace: [ 784.238616] [ 784.238908] dump_stack_lvl+0xc1/0xf0 [ 784.239409] should_fail_ex+0x4b4/0x5b0 [ 784.239931] _copy_from_user+0x30/0xf0 [ 784.240432] copy_mount_options+0x76/0x180 [ 784.240976] __x64_sys_mount+0x1ac/0x310 [ 784.241512] ? __pfx___x64_sys_mount+0x10/0x10 [ 784.242128] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 784.242790] do_syscall_64+0x3f/0x90 [ 784.243265] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 784.243924] RIP: 0033:0x7f8ba8383b19 [ 784.244396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 784.246591] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 784.247519] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 784.248445] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 784.249344] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 784.250205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.251100] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 784.252029] 05:54:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:54:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000040)="7694fb", 0x3}, {&(0x7f0000000240)="8a2218feb2b269e8226bfee963d54aa27490422b62b2524476faf9ebf75c44f431f57767d6d3298eb6c5c6d46f268f622c45f72172bc90eb9b1df237efa549ed224c", 0x42}, {&(0x7f00000002c0)="1fe23300d7bceee87ccc53f7747b1c8fd20ab8e1a197a01901203ad7a59f1a3fb0fdfde700b7ea6fee409b5e85703fa2d5c90a482d23b7047a24d583454ec290ff82b78422640e4ff55fee760bbf30c99beda02a937deb7c3208e7089879a1e1b72071ad065626af8e6705d78bc0fdcfc4bb6d274acf85a4bc68cee555a2f82ddfb4df03e98c9bcc6518", 0x8a}, {&(0x7f0000000380)="2b09e094548553c2e270f6cc94b9da0b5b12ab4d913e72f21b725b7d9a5f42d71dcc31f7e8bb114ca5baeb7e43ea3fc9e9cfe7274586793ba0d00378ee20ab826ec8fca42b4be14d2375d937b355655817f5509ad26c224d5867ba9c93d92a2c3e49424a3ae149dd1788be23dbe80e6468175cf4", 0x74}], 0x4, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x20040000) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, r2) ptrace(0x10, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x0, 0x4, 0x0, 0x0, 0x7, 0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000180), 0xa}, 0x0, 0x9, 0x3, 0x0, 0xffffffff80000000, 0x7, 0x7c00, 0x0, 0x200, 0x0, 0x9}, 0x0, 0xf, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 05:54:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 18) 05:54:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:54:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 7) 05:54:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000040)="7694fb", 0x3}, {&(0x7f0000000240)="8a2218feb2b269e8226bfee963d54aa27490422b62b2524476faf9ebf75c44f431f57767d6d3298eb6c5c6d46f268f622c45f72172bc90eb9b1df237efa549ed224c", 0x42}, {&(0x7f00000002c0)="1fe23300d7bceee87ccc53f7747b1c8fd20ab8e1a197a01901203ad7a59f1a3fb0fdfde700b7ea6fee409b5e85703fa2d5c90a482d23b7047a24d583454ec290ff82b78422640e4ff55fee760bbf30c99beda02a937deb7c3208e7089879a1e1b72071ad065626af8e6705d78bc0fdcfc4bb6d274acf85a4bc68cee555a2f82ddfb4df03e98c9bcc6518", 0x8a}, {&(0x7f0000000380)="2b09e094548553c2e270f6cc94b9da0b5b12ab4d913e72f21b725b7d9a5f42d71dcc31f7e8bb114ca5baeb7e43ea3fc9e9cfe7274586793ba0d00378ee20ab826ec8fca42b4be14d2375d937b355655817f5509ad26c224d5867ba9c93d92a2c3e49424a3ae149dd1788be23dbe80e6468175cf4", 0x74}], 0x4, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x20040000) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, r2) ptrace(0x10, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x0, 0x4, 0x0, 0x0, 0x7, 0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000180), 0xa}, 0x0, 0x9, 0x3, 0x0, 0xffffffff80000000, 0x7, 0x7c00, 0x0, 0x200, 0x0, 0x9}, 0x0, 0xf, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 05:54:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 784.410272] FAULT_INJECTION: forcing a failure. [ 784.410272] name failslab, interval 1, probability 0, space 0, times 0 [ 784.411108] CPU: 0 PID: 6081 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 784.411662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 784.412208] Call Trace: [ 784.412393] [ 784.412557] dump_stack_lvl+0xc1/0xf0 [ 784.412844] should_fail_ex+0x4b4/0x5b0 [ 784.413143] should_failslab+0x9/0x20 [ 784.413418] __kmem_cache_alloc_node+0x66/0x310 [ 784.413743] ? kasan_save_stack+0x32/0x50 [ 784.414039] ? v9fs_session_init+0xec/0x17b0 [ 784.414361] ? v9fs_session_init+0xec/0x17b0 [ 784.414673] __kmalloc_node_track_caller+0x4e/0x160 [ 784.415037] kstrdup+0x3f/0x80 [ 784.415290] v9fs_session_init+0xec/0x17b0 [ 784.415596] ? __pfx_lock_release+0x10/0x10 [ 784.415919] ? __pfx_v9fs_session_init+0x10/0x10 [ 784.416254] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 784.416628] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 784.416992] ? v9fs_mount+0x9e/0xbd0 [ 784.417275] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 784.417673] v9fs_mount+0xbd/0xbd0 [ 784.417950] ? __pfx_v9fs_mount+0x10/0x10 [ 784.418255] ? cap_capable+0x1be/0x220 [ 784.418555] ? __pfx_v9fs_mount+0x10/0x10 [ 784.418852] legacy_get_tree+0x109/0x220 [ 784.419147] vfs_get_tree+0x92/0x360 [ 784.419422] path_mount+0x133c/0x1e50 [ 784.419728] ? kasan_quarantine_put+0x81/0x1d0 [ 784.420068] ? __pfx_path_mount+0x10/0x10 [ 784.420365] ? putname+0x102/0x140 [ 784.420637] ? kmem_cache_free+0x10d/0x4d0 [ 784.420939] ? putname+0x102/0x140 [ 784.421225] __x64_sys_mount+0x286/0x310 [ 784.421513] ? __pfx___x64_sys_mount+0x10/0x10 [ 784.421866] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 784.422229] do_syscall_64+0x3f/0x90 [ 784.422518] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 784.422883] RIP: 0033:0x7fecd4edcb19 [ 784.423163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 784.424332] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 784.424886] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 784.425353] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 784.425814] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 784.426275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 784.426744] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 784.427232] [ 784.444279] FAULT_INJECTION: forcing a failure. [ 784.444279] name failslab, interval 1, probability 0, space 0, times 0 [ 784.445824] CPU: 1 PID: 6084 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 784.446806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 784.447807] Call Trace: [ 784.448139] [ 784.448440] dump_stack_lvl+0xc1/0xf0 [ 784.448959] should_fail_ex+0x4b4/0x5b0 [ 784.449494] ? getname_flags.part.0+0x50/0x4f0 [ 784.450094] should_failslab+0x9/0x20 [ 784.450583] kmem_cache_alloc+0x61/0x390 [ 784.451113] getname_flags.part.0+0x50/0x4f0 [ 784.451718] getname_flags+0x9e/0xf0 [ 784.452206] user_path_at_empty+0x2f/0x70 05:54:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x2700000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 784.452734] __x64_sys_mount+0x1ed/0x310 [ 784.453364] ? __pfx___x64_sys_mount+0x10/0x10 05:54:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) [ 784.453971] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 784.454724] do_syscall_64+0x3f/0x90 [ 784.455232] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 784.455913] RIP: 0033:0x7f8ba8383b19 [ 784.456389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 784.458570] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 784.459516] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 784.460408] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 784.461277] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 784.462145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.463023] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 784.463930] 05:54:22 executing program 7: syz_mount_image$tmpfs(&(0x7f0000008840), &(0x7f0000008880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f000000ac40)=ANY=[@ANYBLOB="6d706f6c3d7072656665723d73746104000000360a2c00"]) [ 784.576454] tmpfs: Bad value for 'mpol' [ 784.590709] tmpfs: Bad value for 'mpol' 05:54:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x3f00000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:54:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:54:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 8) 05:54:22 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:54:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 19) 05:54:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:54:22 executing program 7: symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r0, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='timerslack_ns\x00') recvfrom$inet6(r2, &(0x7f0000000040)=""/234, 0xea, 0x40000122, &(0x7f0000000140)={0xa, 0x4e20, 0xfde0, @loopback, 0xe06}, 0x1c) setuid(r1) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 05:54:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:54:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x7f51010000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:54:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 9) [ 784.842058] FAULT_INJECTION: forcing a failure. [ 784.842058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.843712] CPU: 1 PID: 6119 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 784.845000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 784.846246] Call Trace: [ 784.846634] [ 784.846978] dump_stack_lvl+0xc1/0xf0 [ 784.847586] should_fail_ex+0x4b4/0x5b0 [ 784.848191] strncpy_from_user+0x38/0x340 [ 784.848844] getname_flags.part.0+0x95/0x4f0 [ 784.849550] getname_flags+0x9e/0xf0 [ 784.850136] user_path_at_empty+0x2f/0x70 [ 784.850776] __x64_sys_mount+0x1ed/0x310 [ 784.851425] ? __pfx___x64_sys_mount+0x10/0x10 [ 784.852155] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 784.852963] do_syscall_64+0x3f/0x90 [ 784.853530] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 784.854327] RIP: 0033:0x7f8ba8383b19 [ 784.854899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 784.857561] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 784.858687] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 784.859743] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 784.860785] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 784.861844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.862900] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 784.863986] 05:54:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:54:36 executing program 5: mlock2(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x16038000) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002800)={0x0, "b74019cd8441d38f1b68a371098837a1"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$packet(0x11, 0x3, 0x300) accept(r2, 0x0, &(0x7f0000000000)) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000001700)=""/198) mlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x6, @inherit={0x50, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000000026116fd77555775d83929af52f57ab30c5a7ebc39ddc37851f965063108c37301c14af185132df98607580ca000000000000000ff000028d5bf0000000000270000000000000001010000844bc3ab482300000083b203003f0000000000009ad6547800000000000000000000000000000000dbfb4533394ad01df7e7082ece724dad34bc1c516f95fec99d4ed8b2cc14844556e1"]}, @subvolid}) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) pread64(0xffffffffffffffff, &(0x7f0000000640)=""/221, 0xdd, 0xffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000010000fcffffff00", @ANYRES32, @ANYBLOB="feeb8943efa40300361902cacacafc29b23403af13201e013a73c00a03632b91f1809e1f9f56b2240b0066f263abb7b968828151a6242b08111799da96ef9617e82cc7b4edeffd26b339510528ba584b8d7c019bd38a1edfcbb3ea000000008800000000"]) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 05:54:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:54:36 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:54:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 20) 05:54:36 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) pidfd_send_signal(r2, 0x20, &(0x7f0000000140)={0x3f, 0x9}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/326]) getgid() perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x3, 0xbc, 0x2, 0x0, 0x10000, 0x25010, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4020, 0x4b, 0xff, 0x2, 0x684, 0x1, 0x9, 0x0, 0x5, 0x0, 0x40}, 0xffffffffffffffff, 0x7, r0, 0xa) 05:54:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:54:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 10) [ 798.270189] FAULT_INJECTION: forcing a failure. [ 798.270189] name failslab, interval 1, probability 0, space 0, times 0 [ 798.271188] CPU: 0 PID: 6132 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 798.271913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 798.272609] Call Trace: [ 798.272835] [ 798.273041] dump_stack_lvl+0xc1/0xf0 [ 798.273406] should_fail_ex+0x4b4/0x5b0 [ 798.273792] should_failslab+0x9/0x20 [ 798.274145] __kmem_cache_alloc_node+0x66/0x310 [ 798.274562] ? find_held_lock+0x2c/0x110 [ 798.274943] ? p9_client_create+0xb3/0x1260 [ 798.275337] ? __kmem_cache_alloc_node+0x20b/0x310 [ 798.275796] kmalloc_trace+0x26/0xc0 [ 798.276146] p9_client_create+0xb3/0x1260 [ 798.276534] ? __pfx_p9_client_create+0x10/0x10 [ 798.276958] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 798.277386] ? kasan_save_stack+0x32/0x50 [ 798.277764] ? v9fs_session_init+0xec/0x17b0 [ 798.278159] ? lockdep_init_map_type+0x21e/0x7e0 [ 798.278605] ? __kasan_kmalloc+0x7f/0x90 [ 798.278971] ? __raw_spin_lock_init+0x3a/0x110 [ 798.279403] v9fs_session_init+0x1e0/0x17b0 [ 798.279816] ? __pfx_v9fs_session_init+0x10/0x10 [ 798.280246] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 798.280711] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 798.281147] ? v9fs_mount+0x9e/0xbd0 [ 798.281491] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 798.281998] v9fs_mount+0xbd/0xbd0 [ 798.282326] ? __pfx_v9fs_mount+0x10/0x10 [ 798.282709] ? cap_capable+0x1be/0x220 [ 798.283072] ? __pfx_v9fs_mount+0x10/0x10 [ 798.283457] legacy_get_tree+0x109/0x220 [ 798.283834] vfs_get_tree+0x92/0x360 [ 798.284193] path_mount+0x133c/0x1e50 [ 798.284544] ? kasan_quarantine_put+0x81/0x1d0 [ 798.284962] ? __pfx_path_mount+0x10/0x10 [ 798.285331] ? putname+0x102/0x140 [ 798.285669] ? kmem_cache_free+0x10d/0x4d0 [ 798.286051] ? putname+0x102/0x140 [ 798.286398] __x64_sys_mount+0x286/0x310 [ 798.286765] ? __pfx___x64_sys_mount+0x10/0x10 [ 798.287182] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 798.287643] do_syscall_64+0x3f/0x90 [ 798.288008] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 798.288463] RIP: 0033:0x7fecd4edcb19 [ 798.288796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 798.290246] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 798.290909] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 798.291509] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 798.292158] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 798.292759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.293396] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 798.294047] [ 798.346203] FAULT_INJECTION: forcing a failure. [ 798.346203] name failslab, interval 1, probability 0, space 0, times 0 [ 798.347180] CPU: 0 PID: 6139 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 798.347862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 798.348529] Call Trace: [ 798.348744] [ 798.348952] dump_stack_lvl+0xc1/0xf0 [ 798.349287] should_fail_ex+0x4b4/0x5b0 [ 798.349637] should_failslab+0x9/0x20 [ 798.349970] __kmem_cache_alloc_node+0x66/0x310 [ 798.350376] ? alloc_fs_context+0x58/0x9e0 [ 798.350750] ? __print_lock_name+0x201/0x250 [ 798.351158] kmalloc_trace+0x26/0xc0 [ 798.351486] alloc_fs_context+0x58/0x9e0 [ 798.351859] path_mount+0xa6d/0x1e50 [ 798.352202] ? kasan_quarantine_put+0x81/0x1d0 [ 798.352601] ? __pfx_path_mount+0x10/0x10 [ 798.352962] ? putname+0x102/0x140 [ 798.353271] ? kmem_cache_free+0x10d/0x4d0 [ 798.353647] ? putname+0x102/0x140 [ 798.353974] __x64_sys_mount+0x286/0x310 [ 798.354345] ? __pfx___x64_sys_mount+0x10/0x10 [ 798.354762] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 798.355229] do_syscall_64+0x3f/0x90 [ 798.355558] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 798.356019] RIP: 0033:0x7f8ba8383b19 [ 798.356346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 798.357806] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 798.358429] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 798.359000] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 798.359577] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 798.360189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.360796] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 798.361474] 05:54:36 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:54:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 21) 05:54:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 11) 05:54:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:54:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:54:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 22) [ 798.516277] FAULT_INJECTION: forcing a failure. [ 798.516277] name failslab, interval 1, probability 0, space 0, times 0 [ 798.517155] CPU: 0 PID: 6154 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 798.517747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 798.518345] Call Trace: [ 798.518542] [ 798.518722] dump_stack_lvl+0xc1/0xf0 [ 798.519027] should_fail_ex+0x4b4/0x5b0 [ 798.519347] should_failslab+0x9/0x20 [ 798.519648] __kmem_cache_alloc_node+0x66/0x310 [ 798.520031] ? p9_client_create+0x473/0x1260 [ 798.520381] ? find_held_lock+0x2c/0x110 [ 798.520710] ? p9_client_create+0x473/0x1260 [ 798.521051] __kmalloc_node_track_caller+0x4e/0x160 [ 798.521440] kstrdup+0x3f/0x80 [ 798.521707] p9_client_create+0x473/0x1260 [ 798.522058] ? __pfx_p9_client_create+0x10/0x10 [ 798.522424] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 798.522793] ? kasan_save_stack+0x32/0x50 [ 798.523111] ? v9fs_session_init+0xec/0x17b0 [ 798.523456] ? lockdep_init_map_type+0x21e/0x7e0 [ 798.523835] ? __kasan_kmalloc+0x7f/0x90 [ 798.524155] ? __raw_spin_lock_init+0x3a/0x110 [ 798.524520] v9fs_session_init+0x1e0/0x17b0 [ 798.524874] ? __pfx_v9fs_session_init+0x10/0x10 [ 798.525233] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 798.525639] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 798.526010] ? v9fs_mount+0x9e/0xbd0 [ 798.526306] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 798.526728] v9fs_mount+0xbd/0xbd0 [ 798.527013] ? __pfx_v9fs_mount+0x10/0x10 [ 798.527333] ? cap_capable+0x1be/0x220 [ 798.527649] ? __pfx_v9fs_mount+0x10/0x10 [ 798.527977] legacy_get_tree+0x109/0x220 [ 798.528294] vfs_get_tree+0x92/0x360 [ 798.528592] path_mount+0x133c/0x1e50 [ 798.528900] ? kasan_quarantine_put+0x81/0x1d0 [ 798.529250] ? __pfx_path_mount+0x10/0x10 [ 798.529563] ? putname+0x102/0x140 [ 798.529836] ? kmem_cache_free+0x10d/0x4d0 [ 798.530160] ? putname+0x102/0x140 [ 798.530456] __x64_sys_mount+0x286/0x310 [ 798.530773] ? __pfx___x64_sys_mount+0x10/0x10 [ 798.531133] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 798.531665] do_syscall_64+0x3f/0x90 [ 798.531967] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 798.532362] RIP: 0033:0x7fecd4edcb19 [ 798.532642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 798.533904] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 798.534444] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 798.534955] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 798.535466] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 798.535988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.536498] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 798.537038] 05:54:36 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xfffffffffffff142) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0x4, 0x80, 0x7, 0x0, 0x1ff, 0x120008, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xbb7a, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x4000, 0x6, 0x3, 0x7, 0x7f, 0x1, 0x0, 0x0, 0x95c, 0x0, 0x65c}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) write$binfmt_script(r1, 0x0, 0xffff8000) 05:54:36 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:54:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:54:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xfeffffff00000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:54:49 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:54:49 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xfffffffffffff142) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0x4, 0x80, 0x7, 0x0, 0x1ff, 0x120008, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xbb7a, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x4000, 0x6, 0x3, 0x7, 0x7f, 0x1, 0x0, 0x0, 0x95c, 0x0, 0x65c}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) write$binfmt_script(r1, 0x0, 0xffff8000) 05:54:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 12) 05:54:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lchown(0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) 05:54:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 23) 05:54:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) [ 811.088260] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 811.142450] FAULT_INJECTION: forcing a failure. [ 811.142450] name failslab, interval 1, probability 0, space 0, times 0 [ 811.143224] CPU: 0 PID: 6182 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 811.143750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 811.144298] Call Trace: [ 811.144480] [ 811.144642] dump_stack_lvl+0xc1/0xf0 [ 811.144922] should_fail_ex+0x4b4/0x5b0 [ 811.145218] should_failslab+0x9/0x20 [ 811.145482] __kmem_cache_alloc_node+0x66/0x310 [ 811.145815] ? legacy_init_fs_context+0x44/0xe0 [ 811.146139] ? lockdep_init_map_type+0x21e/0x7e0 [ 811.146482] kmalloc_trace+0x26/0xc0 [ 811.146754] legacy_init_fs_context+0x44/0xe0 [ 811.147072] ? __pfx_legacy_init_fs_context+0x10/0x10 [ 811.147435] alloc_fs_context+0x571/0x9e0 [ 811.147745] path_mount+0xa6d/0x1e50 [ 811.148030] ? kasan_quarantine_put+0x81/0x1d0 [ 811.148362] ? __pfx_path_mount+0x10/0x10 [ 811.148662] ? putname+0x102/0x140 [ 811.148919] ? kmem_cache_free+0x10d/0x4d0 [ 811.149223] ? putname+0x102/0x140 [ 811.149497] __x64_sys_mount+0x286/0x310 [ 811.149796] ? __pfx___x64_sys_mount+0x10/0x10 [ 811.150135] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 811.150510] do_syscall_64+0x3f/0x90 [ 811.150790] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 811.151156] RIP: 0033:0x7f8ba8383b19 [ 811.151423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 811.152603] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 811.153108] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 811.153582] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 811.154049] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 811.154515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 811.154988] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 811.155519] 05:55:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:55:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:55:02 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xfffffffffffff142) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0x4, 0x80, 0x7, 0x0, 0x1ff, 0x120008, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xbb7a, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x4000, 0x6, 0x3, 0x7, 0x7f, 0x1, 0x0, 0x0, 0x95c, 0x0, 0x65c}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) write$binfmt_script(r1, 0x0, 0xffff8000) 05:55:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 24) 05:55:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xffff000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:55:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000010005f6ff00"], 0x14}}, 0x8080) r1 = syz_io_uring_setup(0x123, &(0x7f0000000040)={0x0, 0x28d1, 0x0, 0x1, 0x1ab}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) readahead(r1, 0x401, 0x10000) 05:55:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 13) 05:55:02 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:55:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 14) [ 824.292145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 824.296484] FAULT_INJECTION: forcing a failure. [ 824.296484] name failslab, interval 1, probability 0, space 0, times 0 [ 824.297381] CPU: 0 PID: 6208 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 824.298034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 824.298554] Call Trace: [ 824.298733] [ 824.298894] dump_stack_lvl+0xc1/0xf0 [ 824.299166] should_fail_ex+0x4b4/0x5b0 [ 824.299453] should_failslab+0x9/0x20 [ 824.299720] __kmem_cache_alloc_node+0x66/0x310 [ 824.300054] ? match_token+0x361/0x570 [ 824.300324] ? p9_client_create+0x574/0x1260 [ 824.300642] ? p9_client_create+0x574/0x1260 [ 824.300952] __kmalloc_node_track_caller+0x4e/0x160 [ 824.301294] kmemdup_nul+0x36/0xb0 [ 824.301554] p9_client_create+0x574/0x1260 [ 824.301865] ? __pfx_p9_client_create+0x10/0x10 [ 824.302191] ? kasan_save_stack+0x32/0x50 [ 824.302481] ? v9fs_session_init+0xec/0x17b0 [ 824.302793] ? lockdep_init_map_type+0x21e/0x7e0 [ 824.303125] ? __kasan_kmalloc+0x7f/0x90 [ 824.303415] ? __raw_spin_lock_init+0x3a/0x110 [ 824.303747] v9fs_session_init+0x1e0/0x17b0 [ 824.304085] ? __pfx_v9fs_session_init+0x10/0x10 [ 824.304412] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 824.304778] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 824.305119] ? v9fs_mount+0x9e/0xbd0 [ 824.305389] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 824.305779] v9fs_mount+0xbd/0xbd0 [ 824.306039] ? __pfx_v9fs_mount+0x10/0x10 [ 824.306329] ? cap_capable+0x1be/0x220 [ 824.306623] ? __pfx_v9fs_mount+0x10/0x10 [ 824.306913] legacy_get_tree+0x109/0x220 [ 824.307202] vfs_get_tree+0x92/0x360 [ 824.307473] path_mount+0x133c/0x1e50 [ 824.307754] ? kasan_quarantine_put+0x81/0x1d0 [ 824.308090] ? __pfx_path_mount+0x10/0x10 [ 824.308387] ? putname+0x102/0x140 [ 824.308637] ? kmem_cache_free+0x10d/0x4d0 [ 824.308936] ? putname+0x102/0x140 [ 824.309203] __x64_sys_mount+0x286/0x310 [ 824.309494] ? __pfx___x64_sys_mount+0x10/0x10 [ 824.309819] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 824.310184] do_syscall_64+0x3f/0x90 [ 824.310450] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 824.310798] RIP: 0033:0x7fecd4edcb19 [ 824.311060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 824.312295] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 824.312838] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 824.313345] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 824.313845] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 824.314345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 824.314847] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 824.315371] 05:55:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xffffff7f00000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 824.329495] FAULT_INJECTION: forcing a failure. [ 824.329495] name failslab, interval 1, probability 0, space 0, times 0 [ 824.330984] CPU: 1 PID: 6212 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 824.332011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 824.333081] Call Trace: [ 824.333444] [ 824.333752] dump_stack_lvl+0xc1/0xf0 [ 824.334290] should_fail_ex+0x4b4/0x5b0 [ 824.334835] should_failslab+0x9/0x20 [ 824.335363] __kmem_cache_alloc_node+0x66/0x310 [ 824.335978] ? v9fs_mount+0x9e/0xbd0 [ 824.336533] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 824.337260] kmalloc_trace+0x26/0xc0 [ 824.337782] v9fs_mount+0x9e/0xbd0 [ 824.338291] ? __pfx_v9fs_mount+0x10/0x10 [ 824.338875] ? cap_capable+0x1be/0x220 [ 824.339428] ? __pfx_v9fs_mount+0x10/0x10 [ 824.340008] legacy_get_tree+0x109/0x220 [ 824.340580] vfs_get_tree+0x92/0x360 [ 824.341116] path_mount+0x133c/0x1e50 [ 824.341664] ? kasan_quarantine_put+0x81/0x1d0 [ 824.342295] ? __pfx_path_mount+0x10/0x10 [ 824.342867] ? putname+0x102/0x140 [ 824.343372] ? kmem_cache_free+0x10d/0x4d0 [ 824.343954] ? putname+0x102/0x140 [ 824.344488] __x64_sys_mount+0x286/0x310 [ 824.345053] ? __pfx___x64_sys_mount+0x10/0x10 [ 824.345692] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 824.346411] do_syscall_64+0x3f/0x90 [ 824.346964] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 824.347665] RIP: 0033:0x7f8ba8383b19 [ 824.348175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 824.350481] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 824.351479] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 824.352408] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 824.353329] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 824.354244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 824.355166] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 824.356129] 05:55:02 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xfffffffffffff142) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0x4, 0x80, 0x7, 0x0, 0x1ff, 0x120008, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xbb7a, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x4000, 0x6, 0x3, 0x7, 0x7f, 0x1, 0x0, 0x0, 0x95c, 0x0, 0x65c}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) write$binfmt_script(r1, 0x0, 0xffff8000) 05:55:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:55:02 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:55:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xce, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffff26, 0x0, 0x1}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x2, 0x1, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0xd70e, 0x200000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x105802, 0x0) mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = fsmount(r1, 0x0, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) r4 = inotify_init() dup3(r3, 0xffffffffffffffff, 0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/nf_conntrack_sip', 0x426682, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000000)={0x0, r5, 0x800, 0x7ff, 0xae0e, 0x1}) pread64(r0, &(0x7f0000000240)=""/97, 0x61, 0x3f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dab8e9d741e6e8e8b387ef38afffb32901a050fe4403e6cd8f7848ea95d89028555c8da9071b67938880f978dba48ea40a5e20c30f6a22fa0617149415ed07703ac04f1", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='%/\x00', &(0x7f0000000200)='sysfs\x00', 0x0) 05:55:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 25) [ 824.472420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 824.489245] 9pnet_fd: Insufficient options for proto=fd [ 824.502583] 9pnet_fd: Insufficient options for proto=fd 05:55:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 15) 05:55:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:55:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:55:15 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:55:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xffffffff00000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:55:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=0000000000000000']) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002b80)=ANY=[@ANYBLOB="0100000036000000848595976acc1ef000003e10045a60c304821df7000099", @ANYRES32=r1, @ANYBLOB="1f000000000000002e2f66696c653100"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000002ac0)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000400)=""/225, 0xe1}], 0x4, &(0x7f0000000500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f0000001740)=""/91, 0x5b}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/236, 0xec}, {&(0x7f00000028c0)=""/168, 0xa8}], 0x5, &(0x7f0000002a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x2, 0x20, &(0x7f0000002b40)={r3, r4+10000000}) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7f, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffec36, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4f6, 0x2, @perf_config_ext={0x6, 0x4}, 0x54, 0x3, 0x2, 0x3, 0x5, 0xfffffc00, 0x2, 0x0, 0x2ac, 0x0, 0xfffffffffffffffc}, r5, 0x5, r2, 0x2) fallocate(r2, 0x0, 0x0, 0x87ffffc) 05:55:15 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xfffffffffffff142) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0x4, 0x80, 0x7, 0x0, 0x1ff, 0x120008, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xbb7a, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x4000, 0x6, 0x3, 0x7, 0x7f, 0x1, 0x0, 0x0, 0x95c, 0x0, 0x65c}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) 05:55:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 26) [ 837.946041] FAULT_INJECTION: forcing a failure. [ 837.946041] name failslab, interval 1, probability 0, space 0, times 0 [ 837.947031] CPU: 0 PID: 6248 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 837.947573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 837.948141] Call Trace: [ 837.948635] [ 837.949008] dump_stack_lvl+0xc1/0xf0 [ 837.949634] should_fail_ex+0x4b4/0x5b0 [ 837.950285] should_failslab+0x9/0x20 [ 837.950893] __kmem_cache_alloc_node+0x66/0x310 [ 837.951631] ? v9fs_session_init+0x1e0/0x17b0 [ 837.952371] ? parse_opts.part.0+0x8e/0x340 [ 837.953060] ? vfs_get_tree+0x92/0x360 [ 837.953686] ? path_mount+0x133c/0x1e50 [ 837.954336] ? parse_opts.part.0+0x8e/0x340 [ 837.955032] __kmalloc_node_track_caller+0x4e/0x160 [ 837.955830] kstrdup+0x3f/0x80 [ 837.956390] parse_opts.part.0+0x8e/0x340 [ 837.957058] ? lock_acquire+0x19a/0x4c0 [ 837.957693] ? __pfx_parse_opts.part.0+0x10/0x10 [ 837.958454] ? __delete_object+0xb3/0x100 [ 837.959124] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 837.960042] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 837.960960] ? __pfx_lock_release+0x10/0x10 [ 837.961643] ? __pfx_lock_release+0x10/0x10 [ 837.962319] ? __virt_addr_valid+0x102/0x340 [ 837.963043] p9_fd_create+0x9c/0x540 [ 837.963647] ? __pfx_p9_fd_create+0x10/0x10 05:55:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 837.964355] ? verify_cpu+0x54/0x100 [ 837.965088] ? p9_client_create+0x81c/0x1260 [ 837.965817] p9_client_create+0x883/0x1260 [ 837.966521] ? __pfx_p9_client_create+0x10/0x10 [ 837.967261] ? kasan_save_stack+0x32/0x50 [ 837.967916] ? v9fs_session_init+0xec/0x17b0 [ 837.968634] ? lockdep_init_map_type+0x21e/0x7e0 [ 837.969379] ? __kasan_kmalloc+0x7f/0x90 [ 837.970050] ? __raw_spin_lock_init+0x3a/0x110 [ 837.970795] v9fs_session_init+0x1e0/0x17b0 [ 837.971526] ? __pfx_v9fs_session_init+0x10/0x10 [ 837.972272] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 837.973100] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 837.973871] ? v9fs_mount+0x9e/0xbd0 [ 837.974476] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 837.975340] v9fs_mount+0xbd/0xbd0 [ 837.975933] ? __pfx_v9fs_mount+0x10/0x10 [ 837.976620] ? cap_capable+0x1be/0x220 [ 837.976991] ? __pfx_v9fs_mount+0x10/0x10 [ 837.977301] legacy_get_tree+0x109/0x220 [ 837.977604] vfs_get_tree+0x92/0x360 [ 837.977888] path_mount+0x133c/0x1e50 [ 837.978177] ? kasan_quarantine_put+0x81/0x1d0 [ 837.978517] ? __pfx_path_mount+0x10/0x10 [ 837.978827] ? putname+0x102/0x140 [ 837.979093] ? kmem_cache_free+0x10d/0x4d0 [ 837.979410] ? putname+0x102/0x140 [ 837.979688] __x64_sys_mount+0x286/0x310 [ 837.979995] ? __pfx___x64_sys_mount+0x10/0x10 [ 837.980348] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 837.980732] do_syscall_64+0x3f/0x90 [ 837.981009] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 837.981381] RIP: 0033:0x7fecd4edcb19 [ 837.981652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 837.982892] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 837.983419] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 837.983913] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 837.984415] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 837.984910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 837.985401] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 837.985926] 05:55:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 16) [ 838.003640] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.6'. 05:55:16 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xfffffffffffff142) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0x4, 0x80, 0x7, 0x0, 0x1ff, 0x120008, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xbb7a, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x4000, 0x6, 0x3, 0x7, 0x7f, 0x1, 0x0, 0x0, 0x95c, 0x0, 0x65c}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) 05:55:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:55:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 838.075835] FAULT_INJECTION: forcing a failure. [ 838.075835] name failslab, interval 1, probability 0, space 0, times 0 [ 838.077374] CPU: 1 PID: 6255 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 838.078461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 838.079533] Call Trace: [ 838.079889] [ 838.080208] dump_stack_lvl+0xc1/0xf0 [ 838.080777] should_fail_ex+0x4b4/0x5b0 [ 838.081337] should_failslab+0x9/0x20 [ 838.081871] __kmem_cache_alloc_node+0x66/0x310 [ 838.082515] ? kasan_save_stack+0x32/0x50 [ 838.083094] ? v9fs_session_init+0xab/0x17b0 [ 838.083702] ? __kasan_kmalloc+0x7f/0x90 [ 838.084280] ? v9fs_mount+0x9e/0xbd0 [ 838.084812] ? v9fs_session_init+0xab/0x17b0 [ 838.085426] __kmalloc_node_track_caller+0x4e/0x160 [ 838.086109] kstrdup+0x3f/0x80 [ 838.086600] v9fs_session_init+0xab/0x17b0 [ 838.087186] ? __kmem_cache_alloc_node+0x20b/0x310 [ 838.087867] ? __pfx_lock_release+0x10/0x10 [ 838.088507] ? __pfx_v9fs_session_init+0x10/0x10 [ 838.089152] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 838.089870] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 838.090539] ? v9fs_mount+0x9e/0xbd0 [ 838.091068] ? __pfx_cred_has_capability.isra.0+0x10/0x10 05:55:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x7, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 838.091985] v9fs_mount+0xbd/0xbd0 [ 838.092645] ? __pfx_v9fs_mount+0x10/0x10 [ 838.093215] ? cap_capable+0x1be/0x220 [ 838.093755] ? __pfx_v9fs_mount+0x10/0x10 [ 838.094318] legacy_get_tree+0x109/0x220 [ 838.094873] vfs_get_tree+0x92/0x360 [ 838.095394] path_mount+0x133c/0x1e50 [ 838.095927] ? kasan_quarantine_put+0x81/0x1d0 [ 838.096559] ? __pfx_path_mount+0x10/0x10 [ 838.097125] ? putname+0x102/0x140 [ 838.097608] ? kmem_cache_free+0x10d/0x4d0 [ 838.098175] ? putname+0x102/0x140 [ 838.098678] __x64_sys_mount+0x286/0x310 [ 838.099241] ? __pfx___x64_sys_mount+0x10/0x10 [ 838.099871] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 838.100589] do_syscall_64+0x3f/0x90 [ 838.101108] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 838.101800] RIP: 0033:0x7f8ba8383b19 [ 838.102302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 838.104557] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 838.105578] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 838.106519] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 838.107454] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 838.108425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 838.109370] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 838.110343] [ 838.208258] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.6'. 05:55:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 27) 05:55:16 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:55:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 17) 05:55:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:55:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:55:30 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xfffffffffffff142) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0x4, 0x80, 0x7, 0x0, 0x1ff, 0x120008, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xbb7a, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x4000, 0x6, 0x3, 0x7, 0x7f, 0x1, 0x0, 0x0, 0x95c, 0x0, 0x65c}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xa) 05:55:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:55:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 28) 05:55:30 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:55:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=0000000000000000']) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002b80)=ANY=[@ANYBLOB="0100000036000000848595976acc1ef000003e10045a60c304821df7000099", @ANYRES32=r1, @ANYBLOB="1f000000000000002e2f66696c653100"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000002ac0)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000400)=""/225, 0xe1}], 0x4, &(0x7f0000000500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f0000001740)=""/91, 0x5b}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/236, 0xec}, {&(0x7f00000028c0)=""/168, 0xa8}], 0x5, &(0x7f0000002a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x2, 0x20, &(0x7f0000002b40)={r3, r4+10000000}) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7f, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffec36, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4f6, 0x2, @perf_config_ext={0x6, 0x4}, 0x54, 0x3, 0x2, 0x3, 0x5, 0xfffffc00, 0x2, 0x0, 0x2ac, 0x0, 0xfffffffffffffffc}, r5, 0x5, r2, 0x2) fallocate(r2, 0x0, 0x0, 0x87ffffc) [ 852.607302] FAULT_INJECTION: forcing a failure. [ 852.607302] name failslab, interval 1, probability 0, space 0, times 0 [ 852.608124] CPU: 0 PID: 6288 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 852.608675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 852.609216] Call Trace: [ 852.609410] [ 852.609577] dump_stack_lvl+0xc1/0xf0 [ 852.609860] should_fail_ex+0x4b4/0x5b0 [ 852.610155] should_failslab+0x9/0x20 [ 852.610430] __kmem_cache_alloc_node+0x66/0x310 [ 852.610761] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 852.611164] ? p9_fd_create+0x17f/0x540 [ 852.611461] kmalloc_trace+0x26/0xc0 [ 852.611734] p9_fd_create+0x17f/0x540 [ 852.612014] ? __pfx_p9_fd_create+0x10/0x10 [ 852.612329] ? verify_cpu+0x54/0x100 [ 852.612592] ? p9_client_create+0x81c/0x1260 [ 852.612913] p9_client_create+0x883/0x1260 [ 852.613225] ? __pfx_p9_client_create+0x10/0x10 [ 852.613560] ? kasan_save_stack+0x32/0x50 [ 852.613861] ? v9fs_session_init+0xec/0x17b0 [ 852.614176] ? lockdep_init_map_type+0x21e/0x7e0 [ 852.614518] ? __kasan_kmalloc+0x7f/0x90 [ 852.614817] ? __raw_spin_lock_init+0x3a/0x110 [ 852.615153] v9fs_session_init+0x1e0/0x17b0 [ 852.615480] ? __pfx_v9fs_session_init+0x10/0x10 [ 852.615801] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 852.616180] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 852.616560] ? v9fs_mount+0x9e/0xbd0 [ 852.616853] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 852.617267] v9fs_mount+0xbd/0xbd0 [ 852.617545] ? __pfx_v9fs_mount+0x10/0x10 [ 852.617858] ? cap_capable+0x1be/0x220 [ 852.618164] ? __pfx_v9fs_mount+0x10/0x10 [ 852.618477] legacy_get_tree+0x109/0x220 [ 852.618783] vfs_get_tree+0x92/0x360 [ 852.619075] path_mount+0x133c/0x1e50 [ 852.619440] ? kasan_quarantine_put+0x81/0x1d0 [ 852.619789] ? __pfx_path_mount+0x10/0x10 [ 852.620135] ? putname+0x102/0x140 [ 852.620439] ? kmem_cache_free+0x10d/0x4d0 [ 852.620759] ? putname+0x102/0x140 [ 852.621041] __x64_sys_mount+0x286/0x310 [ 852.621352] ? __pfx___x64_sys_mount+0x10/0x10 [ 852.621745] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 852.622135] do_syscall_64+0x3f/0x90 [ 852.622422] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 852.622806] RIP: 0033:0x7fecd4edcb19 [ 852.623080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 852.624387] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 852.624939] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 852.625443] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 852.625944] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 852.626443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 852.626947] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 852.627467] [ 852.637141] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.6'. 05:55:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 18) 05:55:30 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xfffffffffffff142) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 05:55:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:55:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x9, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 852.713675] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.6'. 05:55:30 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:55:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 29) 05:55:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:55:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) [ 852.762320] FAULT_INJECTION: forcing a failure. [ 852.762320] name failslab, interval 1, probability 0, space 0, times 0 [ 852.763128] CPU: 0 PID: 6301 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 852.763667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 852.764207] Call Trace: [ 852.764392] [ 852.764570] dump_stack_lvl+0xc1/0xf0 [ 852.764856] should_fail_ex+0x4b4/0x5b0 [ 852.765149] should_failslab+0x9/0x20 [ 852.765418] __kmem_cache_alloc_node+0x66/0x310 [ 852.765753] ? kasan_save_stack+0x32/0x50 [ 852.766048] ? v9fs_session_init+0xec/0x17b0 [ 852.766365] ? v9fs_session_init+0xec/0x17b0 [ 852.766683] __kmalloc_node_track_caller+0x4e/0x160 [ 852.767036] kstrdup+0x3f/0x80 [ 852.767285] v9fs_session_init+0xec/0x17b0 [ 852.767576] ? __pfx_lock_release+0x10/0x10 [ 852.767890] ? __pfx_v9fs_session_init+0x10/0x10 [ 852.768225] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 852.768580] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 852.768925] ? v9fs_mount+0x9e/0xbd0 [ 852.769196] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 852.769591] v9fs_mount+0xbd/0xbd0 [ 852.769858] ? __pfx_v9fs_mount+0x10/0x10 [ 852.770134] ? cap_capable+0x1be/0x220 [ 852.770432] ? __pfx_v9fs_mount+0x10/0x10 [ 852.770714] legacy_get_tree+0x109/0x220 [ 852.771024] vfs_get_tree+0x92/0x360 [ 852.771289] path_mount+0x133c/0x1e50 [ 852.771588] ? kasan_quarantine_put+0x81/0x1d0 [ 852.771935] ? __pfx_path_mount+0x10/0x10 [ 852.772244] ? putname+0x102/0x140 [ 852.772525] ? kmem_cache_free+0x10d/0x4d0 [ 852.772845] ? putname+0x102/0x140 [ 852.773128] __x64_sys_mount+0x286/0x310 [ 852.773434] ? __pfx___x64_sys_mount+0x10/0x10 [ 852.773783] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 852.774178] do_syscall_64+0x3f/0x90 [ 852.774462] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 852.774844] RIP: 0033:0x7f8ba8383b19 [ 852.775115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 852.776356] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 852.776899] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 852.777399] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 852.777902] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 852.778400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 852.778903] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 852.779431] [ 852.808776] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.6'. 05:55:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:55:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xfffffffffffff142) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)) 05:55:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:55:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=0000000000000000']) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002b80)=ANY=[@ANYBLOB="0100000036000000848595976acc1ef000003e10045a60c304821df7000099", @ANYRES32=r1, @ANYBLOB="1f000000000000002e2f66696c653100"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000002ac0)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000400)=""/225, 0xe1}], 0x4, &(0x7f0000000500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f0000001740)=""/91, 0x5b}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/236, 0xec}, {&(0x7f00000028c0)=""/168, 0xa8}], 0x5, &(0x7f0000002a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x2, 0x20, &(0x7f0000002b40)={r3, r4+10000000}) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7f, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffec36, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4f6, 0x2, @perf_config_ext={0x6, 0x4}, 0x54, 0x3, 0x2, 0x3, 0x5, 0xfffffc00, 0x2, 0x0, 0x2ac, 0x0, 0xfffffffffffffffc}, r5, 0x5, r2, 0x2) fallocate(r2, 0x0, 0x0, 0x87ffffc) 05:55:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xa, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:55:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:55:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 19) 05:55:42 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 30) [ 864.800065] FAULT_INJECTION: forcing a failure. [ 864.800065] name failslab, interval 1, probability 0, space 0, times 0 [ 864.800910] CPU: 1 PID: 6329 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 864.801442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 864.801982] Call Trace: [ 864.802166] [ 864.802324] dump_stack_lvl+0xc1/0xf0 [ 864.802597] should_fail_ex+0x4b4/0x5b0 [ 864.802880] ? p9_tag_alloc+0x9c/0x830 [ 864.803148] should_failslab+0x9/0x20 [ 864.803420] kmem_cache_alloc+0x61/0x390 [ 864.803706] ? perf_trace_lock+0xc1/0x480 [ 864.803997] p9_tag_alloc+0x9c/0x830 [ 864.804258] ? __pfx_p9_tag_alloc+0x10/0x10 [ 864.804559] ? perf_trace_lock+0xc1/0x480 [ 864.804847] ? __pfx_lock_acquire+0x10/0x10 [ 864.805146] ? find_held_lock+0x2c/0x110 [ 864.805434] ? __pfx_perf_trace_lock+0x10/0x10 [ 864.805751] p9_client_prepare_req+0x17b/0x420 [ 864.806077] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 864.806418] ? lock_release+0x1e3/0x680 [ 864.806690] ? __pfx_lock_release+0x10/0x10 [ 864.806983] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 864.807337] p9_client_rpc+0x1a1/0xcb0 [ 864.807606] ? __pfx_p9_client_rpc+0x10/0x10 [ 864.807908] ? __pfx_cgroup_file_poll+0x10/0x10 [ 864.808236] ? kernfs_fop_poll+0x171/0x200 [ 864.808529] ? __pfx_kernfs_fop_poll+0x10/0x10 [ 864.808856] ? p9_fd_poll+0x1ec/0x2d0 [ 864.809134] ? p9_fd_create+0x35b/0x540 [ 864.809422] ? __pfx_p9_fd_create+0x10/0x10 [ 864.809748] p9_client_create+0xb5b/0x1260 [ 864.810054] ? __pfx_p9_client_create+0x10/0x10 [ 864.810407] ? kasan_save_stack+0x32/0x50 [ 864.810717] ? v9fs_session_init+0xec/0x17b0 [ 864.811027] ? lockdep_init_map_type+0x21e/0x7e0 [ 864.811369] ? __kasan_kmalloc+0x7f/0x90 [ 864.811668] ? __raw_spin_lock_init+0x3a/0x110 [ 864.812005] v9fs_session_init+0x1e0/0x17b0 [ 864.812316] ? __pfx_v9fs_session_init+0x10/0x10 [ 864.812670] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 864.813041] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 864.813405] ? v9fs_mount+0x9e/0xbd0 [ 864.813682] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 864.814079] v9fs_mount+0xbd/0xbd0 [ 864.814347] ? __pfx_v9fs_mount+0x10/0x10 [ 864.814650] ? cap_capable+0x1be/0x220 [ 864.814941] ? __pfx_v9fs_mount+0x10/0x10 [ 864.815250] legacy_get_tree+0x109/0x220 [ 864.815544] vfs_get_tree+0x92/0x360 [ 864.815829] path_mount+0x133c/0x1e50 [ 864.816121] ? kasan_quarantine_put+0x81/0x1d0 [ 864.816445] ? __pfx_path_mount+0x10/0x10 [ 864.816762] ? putname+0x102/0x140 [ 864.817020] ? kmem_cache_free+0x10d/0x4d0 [ 864.817333] ? putname+0x102/0x140 [ 864.817602] __x64_sys_mount+0x286/0x310 [ 864.817903] ? __pfx___x64_sys_mount+0x10/0x10 [ 864.818248] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 864.818629] do_syscall_64+0x3f/0x90 [ 864.818907] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 864.819258] RIP: 0033:0x7fecd4edcb19 [ 864.819528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.820679] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 864.821214] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 864.821717] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 864.822214] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 864.822706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 864.823198] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 864.823706] [ 864.847328] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.6'. [ 864.858340] 9pnet_fd: Insufficient options for proto=fd 05:55:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 20) [ 864.903634] FAULT_INJECTION: forcing a failure. [ 864.903634] name failslab, interval 1, probability 0, space 0, times 0 [ 864.904415] CPU: 1 PID: 6335 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 864.904950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 864.905490] Call Trace: [ 864.905671] [ 864.905838] dump_stack_lvl+0xc1/0xf0 [ 864.906116] should_fail_ex+0x4b4/0x5b0 [ 864.906401] should_failslab+0x9/0x20 [ 864.906667] __kmem_cache_alloc_node+0x66/0x310 [ 864.906996] ? find_held_lock+0x2c/0x110 [ 864.907282] ? p9_client_create+0xb3/0x1260 [ 864.907582] ? __kmem_cache_alloc_node+0x20b/0x310 [ 864.907924] kmalloc_trace+0x26/0xc0 [ 864.908189] p9_client_create+0xb3/0x1260 [ 864.908490] ? __pfx_p9_client_create+0x10/0x10 [ 864.908829] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 864.909165] ? kasan_save_stack+0x32/0x50 [ 864.909454] ? v9fs_session_init+0xec/0x17b0 [ 864.909762] ? lockdep_init_map_type+0x21e/0x7e0 [ 864.910090] ? __kasan_kmalloc+0x7f/0x90 [ 864.910376] ? __raw_spin_lock_init+0x3a/0x110 [ 864.910700] v9fs_session_init+0x1e0/0x17b0 [ 864.911010] ? __pfx_v9fs_session_init+0x10/0x10 [ 864.911338] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 864.911697] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 864.912032] ? v9fs_mount+0x9e/0xbd0 [ 864.912300] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 864.912706] v9fs_mount+0xbd/0xbd0 [ 864.912961] ? __pfx_v9fs_mount+0x10/0x10 [ 864.913253] ? cap_capable+0x1be/0x220 [ 864.913530] ? __pfx_v9fs_mount+0x10/0x10 [ 864.913824] legacy_get_tree+0x109/0x220 [ 864.914107] vfs_get_tree+0x92/0x360 [ 864.914372] path_mount+0x133c/0x1e50 [ 864.914649] ? kasan_quarantine_put+0x81/0x1d0 [ 864.914968] ? __pfx_path_mount+0x10/0x10 [ 864.915255] ? putname+0x102/0x140 [ 864.915505] ? kmem_cache_free+0x10d/0x4d0 [ 864.915795] ? putname+0x102/0x140 [ 864.916049] __x64_sys_mount+0x286/0x310 [ 864.916340] ? __pfx___x64_sys_mount+0x10/0x10 [ 864.916671] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 864.917029] do_syscall_64+0x3f/0x90 [ 864.917290] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 864.917645] RIP: 0033:0x7f8ba8383b19 [ 864.917899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.919056] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 864.919548] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 864.920011] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 864.920477] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 864.920978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 864.921467] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 864.921969] 05:55:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:55:42 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 31) 05:55:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xb, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:55:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xfffffffffffff142) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)) 05:55:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:55:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 21) [ 865.068465] 9pnet_fd: Insufficient options for proto=fd 05:55:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 32) [ 865.131077] FAULT_INJECTION: forcing a failure. [ 865.131077] name failslab, interval 1, probability 0, space 0, times 0 [ 865.131912] CPU: 1 PID: 6352 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 865.132480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 865.133058] Call Trace: [ 865.133244] [ 865.133413] dump_stack_lvl+0xc1/0xf0 [ 865.133697] should_fail_ex+0x4b4/0x5b0 [ 865.133990] ? p9_fcall_init+0x97/0x210 [ 865.134282] should_failslab+0x9/0x20 [ 865.134558] __kmem_cache_alloc_node+0x66/0x310 [ 865.134900] ? p9_fcall_init+0x97/0x210 [ 865.135186] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 865.135560] ? p9_fcall_init+0x97/0x210 [ 865.135847] __kmalloc+0x4d/0x160 [ 865.136106] p9_fcall_init+0x97/0x210 [ 865.136384] p9_tag_alloc+0x16a/0x830 [ 865.136668] ? __pfx_p9_tag_alloc+0x10/0x10 [ 865.136975] ? perf_trace_lock+0xc1/0x480 [ 865.137275] ? find_held_lock+0x2c/0x110 [ 865.137572] ? __pfx_perf_trace_lock+0x10/0x10 [ 865.137907] p9_client_prepare_req+0x17b/0x420 [ 865.138238] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 865.138601] ? lock_release+0x1e3/0x680 [ 865.138889] ? __pfx_lock_release+0x10/0x10 [ 865.139199] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 865.139577] p9_client_rpc+0x1a1/0xcb0 [ 865.139862] ? __pfx_p9_client_rpc+0x10/0x10 [ 865.140178] ? __pfx_cgroup_file_poll+0x10/0x10 [ 865.140524] ? kernfs_fop_poll+0x171/0x200 [ 865.140840] ? __pfx_kernfs_fop_poll+0x10/0x10 [ 865.141173] ? p9_fd_poll+0x1ec/0x2d0 [ 865.141459] ? p9_fd_create+0x35b/0x540 [ 865.141750] ? __pfx_p9_fd_create+0x10/0x10 [ 865.142072] p9_client_create+0xb5b/0x1260 [ 865.142384] ? __pfx_p9_client_create+0x10/0x10 [ 865.142707] ? kasan_save_stack+0x32/0x50 [ 865.143011] ? v9fs_session_init+0xec/0x17b0 [ 865.143322] ? lockdep_init_map_type+0x21e/0x7e0 [ 865.143658] ? __kasan_kmalloc+0x7f/0x90 [ 865.143956] ? __raw_spin_lock_init+0x3a/0x110 [ 865.144291] v9fs_session_init+0x1e0/0x17b0 [ 865.144612] ? __pfx_v9fs_session_init+0x10/0x10 [ 865.144955] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 865.145327] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 865.145676] ? v9fs_mount+0x9e/0xbd0 [ 865.145944] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 865.146344] v9fs_mount+0xbd/0xbd0 [ 865.146602] ? __pfx_v9fs_mount+0x10/0x10 [ 865.146907] ? cap_capable+0x1be/0x220 [ 865.147188] ? __pfx_v9fs_mount+0x10/0x10 [ 865.147488] legacy_get_tree+0x109/0x220 [ 865.147773] vfs_get_tree+0x92/0x360 [ 865.148063] path_mount+0x133c/0x1e50 [ 865.148343] ? kasan_quarantine_put+0x81/0x1d0 [ 865.148689] ? __pfx_path_mount+0x10/0x10 [ 865.148988] ? putname+0x102/0x140 [ 865.149253] ? kmem_cache_free+0x10d/0x4d0 [ 865.149558] ? putname+0x102/0x140 [ 865.149825] __x64_sys_mount+0x286/0x310 [ 865.150128] ? __pfx___x64_sys_mount+0x10/0x10 [ 865.150469] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 865.150846] do_syscall_64+0x3f/0x90 [ 865.151127] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 865.151502] RIP: 0033:0x7fecd4edcb19 [ 865.151757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 865.153007] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 865.153529] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 865.154024] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 865.154512] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 865.154998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 865.155494] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 865.155996] 05:55:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:55:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:55:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 22) 05:55:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:55:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 33) 05:55:58 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xfffffffffffff142) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)) 05:55:58 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:55:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) [ 880.602044] FAULT_INJECTION: forcing a failure. [ 880.602044] name failslab, interval 1, probability 0, space 0, times 0 [ 880.602919] CPU: 1 PID: 6367 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 880.603449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 880.603989] Call Trace: [ 880.604169] [ 880.604261] 9pnet_fd: Insufficient options for proto=fd [ 880.604320] dump_stack_lvl+0xc1/0xf0 [ 880.605273] should_fail_ex+0x4b4/0x5b0 [ 880.605556] should_failslab+0x9/0x20 [ 880.605820] __kmem_cache_alloc_node+0x66/0x310 [ 880.606141] ? p9_client_create+0x473/0x1260 [ 880.606450] ? find_held_lock+0x2c/0x110 [ 880.606738] ? p9_client_create+0x473/0x1260 [ 880.607045] __kmalloc_node_track_caller+0x4e/0x160 [ 880.607392] kstrdup+0x3f/0x80 [ 880.607630] p9_client_create+0x473/0x1260 [ 880.607930] ? __pfx_p9_client_create+0x10/0x10 [ 880.608254] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 880.608593] ? kasan_save_stack+0x32/0x50 [ 880.608892] ? v9fs_session_init+0xec/0x17b0 [ 880.609206] ? lockdep_init_map_type+0x21e/0x7e0 [ 880.609535] ? __kasan_kmalloc+0x7f/0x90 [ 880.609819] ? __raw_spin_lock_init+0x3a/0x110 [ 880.610147] v9fs_session_init+0x1e0/0x17b0 [ 880.610453] ? __pfx_v9fs_session_init+0x10/0x10 [ 880.610784] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 880.611152] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 880.611495] ? v9fs_mount+0x9e/0xbd0 [ 880.611764] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 880.612146] v9fs_mount+0xbd/0xbd0 [ 880.612417] ? __pfx_v9fs_mount+0x10/0x10 [ 880.612718] ? cap_capable+0x1be/0x220 [ 880.613028] ? __pfx_v9fs_mount+0x10/0x10 [ 880.613337] legacy_get_tree+0x109/0x220 [ 880.613637] vfs_get_tree+0x92/0x360 [ 880.613916] path_mount+0x133c/0x1e50 [ 880.614206] ? kasan_quarantine_put+0x81/0x1d0 [ 880.614543] ? __pfx_path_mount+0x10/0x10 [ 880.614850] ? putname+0x102/0x140 [ 880.615113] ? kmem_cache_free+0x10d/0x4d0 [ 880.615422] ? putname+0x102/0x140 [ 880.615693] __x64_sys_mount+0x286/0x310 [ 880.615994] ? __pfx___x64_sys_mount+0x10/0x10 [ 880.616336] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 880.616715] do_syscall_64+0x3f/0x90 [ 880.617012] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 880.617387] RIP: 0033:0x7f8ba8383b19 [ 880.617653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 880.618887] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 880.619417] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 880.619912] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 880.620403] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 880.620902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 880.621389] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 880.621895] 05:55:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 34) [ 880.664991] perf: interrupt took too long (2588 > 2500), lowering kernel.perf_event_max_sample_rate to 77000 05:55:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 880.733092] FAULT_INJECTION: forcing a failure. [ 880.733092] name failslab, interval 1, probability 0, space 0, times 0 [ 880.734884] CPU: 0 PID: 6379 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 880.735949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 880.737082] Call Trace: [ 880.737438] [ 880.737763] dump_stack_lvl+0xc1/0xf0 [ 880.738305] should_fail_ex+0x4b4/0x5b0 [ 880.738870] ? p9_fcall_init+0x97/0x210 [ 880.739416] should_failslab+0x9/0x20 [ 880.739942] __kmem_cache_alloc_node+0x66/0x310 [ 880.740581] ? p9_fcall_init+0x97/0x210 [ 880.741141] ? kasan_set_track+0x25/0x30 [ 880.741710] ? p9_fcall_init+0x97/0x210 [ 880.742258] __kmalloc+0x4d/0x160 [ 880.742753] p9_fcall_init+0x97/0x210 [ 880.743289] p9_tag_alloc+0x20c/0x830 [ 880.743824] ? __pfx_p9_tag_alloc+0x10/0x10 [ 880.744425] ? __pfx_perf_trace_lock+0x10/0x10 [ 880.745076] p9_client_prepare_req+0x17b/0x420 [ 880.745701] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 880.746383] ? lock_release+0x1e3/0x680 [ 880.746933] ? __pfx_lock_release+0x10/0x10 [ 880.747514] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 880.748219] p9_client_rpc+0x1a1/0xcb0 [ 880.748793] ? __pfx_p9_client_rpc+0x10/0x10 [ 880.749397] ? __pfx_cgroup_file_poll+0x10/0x10 [ 880.750036] ? kernfs_fop_poll+0x171/0x200 [ 880.750609] ? __pfx_kernfs_fop_poll+0x10/0x10 [ 880.751225] ? p9_fd_poll+0x1ec/0x2d0 [ 880.751778] ? p9_fd_create+0x35b/0x540 [ 880.752329] ? __pfx_p9_fd_create+0x10/0x10 [ 880.752963] p9_client_create+0xb5b/0x1260 [ 880.753563] ? __pfx_p9_client_create+0x10/0x10 [ 880.754200] ? kasan_save_stack+0x32/0x50 [ 880.754766] ? v9fs_session_init+0xec/0x17b0 [ 880.755381] ? lockdep_init_map_type+0x21e/0x7e0 [ 880.756019] ? __kasan_kmalloc+0x7f/0x90 [ 880.756585] ? __raw_spin_lock_init+0x3a/0x110 [ 880.757275] v9fs_session_init+0x1e0/0x17b0 [ 880.757898] ? __pfx_v9fs_session_init+0x10/0x10 [ 880.758541] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 880.759256] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 880.759912] ? v9fs_mount+0x9e/0xbd0 [ 880.760446] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 880.761226] v9fs_mount+0xbd/0xbd0 [ 880.761737] ? __pfx_v9fs_mount+0x10/0x10 [ 880.762306] ? cap_capable+0x1be/0x220 [ 880.762865] ? __pfx_v9fs_mount+0x10/0x10 [ 880.763439] legacy_get_tree+0x109/0x220 [ 880.763998] vfs_get_tree+0x92/0x360 [ 880.764540] path_mount+0x133c/0x1e50 [ 880.765124] ? kasan_quarantine_put+0x81/0x1d0 [ 880.765788] ? __pfx_path_mount+0x10/0x10 [ 880.766388] ? putname+0x102/0x140 [ 880.766901] ? kmem_cache_free+0x10d/0x4d0 [ 880.767520] ? putname+0x102/0x140 [ 880.768060] __x64_sys_mount+0x286/0x310 [ 880.768656] ? __pfx___x64_sys_mount+0x10/0x10 [ 880.769316] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 880.770066] do_syscall_64+0x3f/0x90 [ 880.770616] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 880.771343] RIP: 0033:0x7fecd4edcb19 [ 880.771862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 880.774256] RSP: 002b:00007fecd2452188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 880.775281] RAX: ffffffffffffffda RBX: 00007fecd4feff60 RCX: 00007fecd4edcb19 [ 880.776243] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 880.777219] RBP: 00007fecd24521d0 R08: 0000000020000140 R09: 0000000000000000 [ 880.778183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 880.779138] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 880.780162] 05:55:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x27, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:55:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:55:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x700, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:55:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='mode=0000000000000000']) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002b80)=ANY=[@ANYBLOB="0100000036000000848595976acc1ef000003e10045a60c304821df7000099", @ANYRES32=r1, @ANYBLOB="1f000000000000002e2f66696c653100"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000002ac0)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000400)=""/225, 0xe1}], 0x4, &(0x7f0000000500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f0000001740)=""/91, 0x5b}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/236, 0xec}, {&(0x7f00000028c0)=""/168, 0xa8}], 0x5, &(0x7f0000002a00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x2, 0x20, &(0x7f0000002b40)={r3, r4+10000000}) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7f, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffec36, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4f6, 0x2, @perf_config_ext={0x6, 0x4}, 0x54, 0x3, 0x2, 0x3, 0x5, 0xfffffc00, 0x2, 0x0, 0x2ac, 0x0, 0xfffffffffffffffc}, r5, 0x5, r2, 0x2) fallocate(r2, 0x0, 0x0, 0x87ffffc) 05:55:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:55:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 23) 05:55:58 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:55:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 35) 05:56:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 24) 05:56:12 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:56:12 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:56:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:56:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x810, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:56:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 36) 05:56:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 894.174770] FAULT_INJECTION: forcing a failure. [ 894.174770] name failslab, interval 1, probability 0, space 0, times 0 [ 894.176291] CPU: 1 PID: 6410 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 894.177368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 894.178352] Call Trace: [ 894.178689] [ 894.178982] dump_stack_lvl+0xc1/0xf0 [ 894.179477] should_fail_ex+0x4b4/0x5b0 [ 894.179992] should_failslab+0x9/0x20 [ 894.180472] __kmem_cache_alloc_node+0x66/0x310 [ 894.181095] ? match_token+0x361/0x570 [ 894.181606] ? p9_client_create+0x574/0x1260 [ 894.182192] ? p9_client_create+0x574/0x1260 [ 894.182760] __kmalloc_node_track_caller+0x4e/0x160 [ 894.183379] kmemdup_nul+0x36/0xb0 [ 894.183880] p9_client_create+0x574/0x1260 [ 894.184445] ? __pfx_p9_client_create+0x10/0x10 [ 894.185067] ? kasan_save_stack+0x32/0x50 [ 894.185596] ? v9fs_session_init+0xec/0x17b0 [ 894.186165] ? lockdep_init_map_type+0x21e/0x7e0 [ 894.186772] ? __kasan_kmalloc+0x7f/0x90 [ 894.187304] ? __raw_spin_lock_init+0x3a/0x110 [ 894.187907] v9fs_session_init+0x1e0/0x17b0 [ 894.188475] ? __pfx_v9fs_session_init+0x10/0x10 [ 894.189084] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 894.189749] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 894.190389] ? v9fs_mount+0x9e/0xbd0 [ 894.190879] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 894.191581] v9fs_mount+0xbd/0xbd0 [ 894.192058] ? __pfx_v9fs_mount+0x10/0x10 [ 894.192592] ? cap_capable+0x1be/0x220 [ 894.193140] ? __pfx_v9fs_mount+0x10/0x10 [ 894.193675] legacy_get_tree+0x109/0x220 [ 894.194206] vfs_get_tree+0x92/0x360 [ 894.194724] path_mount+0x133c/0x1e50 [ 894.195240] ? kasan_quarantine_put+0x81/0x1d0 [ 894.195846] ? __pfx_path_mount+0x10/0x10 [ 894.196393] ? putname+0x102/0x140 [ 894.196861] ? kmem_cache_free+0x10d/0x4d0 [ 894.197417] ? putname+0x102/0x140 [ 894.197903] __x64_sys_mount+0x286/0x310 [ 894.198436] ? __pfx___x64_sys_mount+0x10/0x10 [ 894.199026] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 894.199701] do_syscall_64+0x3f/0x90 [ 894.200200] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 894.200864] RIP: 0033:0x7f8ba8383b19 [ 894.201366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 894.203513] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 894.204464] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 894.205354] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 894.206242] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 894.207401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 894.208279] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 894.209191] 05:56:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x900, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 37) 05:56:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:56:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:56:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 25) 05:56:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xa00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:56:24 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:56:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xb00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 26) [ 906.253395] FAULT_INJECTION: forcing a failure. [ 906.253395] name failslab, interval 1, probability 0, space 0, times 0 [ 906.254268] CPU: 0 PID: 6450 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 906.254823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 906.255371] Call Trace: [ 906.255601] [ 906.255794] dump_stack_lvl+0xc1/0xf0 [ 906.256084] should_fail_ex+0x4b4/0x5b0 [ 906.256385] should_failslab+0x9/0x20 [ 906.256660] __kmem_cache_alloc_node+0x66/0x310 [ 906.256996] ? v9fs_session_init+0x1e0/0x17b0 [ 906.257330] ? parse_opts.part.0+0x8e/0x340 [ 906.257644] ? vfs_get_tree+0x92/0x360 [ 906.257938] ? path_mount+0x133c/0x1e50 [ 906.258233] ? parse_opts.part.0+0x8e/0x340 [ 906.258553] __kmalloc_node_track_caller+0x4e/0x160 [ 906.258906] kstrdup+0x3f/0x80 [ 906.259154] parse_opts.part.0+0x8e/0x340 [ 906.259448] ? lock_acquire+0x19a/0x4c0 [ 906.259739] ? __pfx_parse_opts.part.0+0x10/0x10 [ 906.260076] ? __delete_object+0xb3/0x100 [ 906.260376] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 906.260795] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 906.261224] ? __pfx_lock_release+0x10/0x10 [ 906.261534] ? __pfx_lock_release+0x10/0x10 [ 906.261854] ? __virt_addr_valid+0x102/0x340 [ 906.262202] p9_fd_create+0x9c/0x540 [ 906.262485] ? __pfx_p9_fd_create+0x10/0x10 [ 906.262805] ? verify_cpu+0x54/0x100 [ 906.263101] ? p9_client_create+0x81c/0x1260 [ 906.263440] p9_client_create+0x883/0x1260 [ 906.263767] ? __pfx_p9_client_create+0x10/0x10 [ 906.264123] ? kasan_save_stack+0x32/0x50 [ 906.264429] ? v9fs_session_init+0xec/0x17b0 [ 906.264768] ? lockdep_init_map_type+0x21e/0x7e0 [ 906.265120] ? __kasan_kmalloc+0x7f/0x90 [ 906.265442] ? __raw_spin_lock_init+0x3a/0x110 [ 906.265797] v9fs_session_init+0x1e0/0x17b0 [ 906.266140] ? __pfx_v9fs_session_init+0x10/0x10 [ 906.266495] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 906.266894] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 906.267259] ? v9fs_mount+0x9e/0xbd0 [ 906.267553] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 906.267963] v9fs_mount+0xbd/0xbd0 [ 906.268242] ? __pfx_v9fs_mount+0x10/0x10 [ 906.268556] ? cap_capable+0x1be/0x220 [ 906.268871] ? __pfx_v9fs_mount+0x10/0x10 [ 906.269191] legacy_get_tree+0x109/0x220 [ 906.269506] vfs_get_tree+0x92/0x360 [ 906.269804] path_mount+0x133c/0x1e50 [ 906.270103] ? kasan_quarantine_put+0x81/0x1d0 [ 906.270454] ? __pfx_path_mount+0x10/0x10 [ 906.270775] ? putname+0x102/0x140 [ 906.271044] ? kmem_cache_free+0x10d/0x4d0 [ 906.271368] ? putname+0x102/0x140 [ 906.271652] __x64_sys_mount+0x286/0x310 [ 906.271964] ? __pfx___x64_sys_mount+0x10/0x10 [ 906.272319] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 906.272721] do_syscall_64+0x3f/0x90 [ 906.273009] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 906.273415] RIP: 0033:0x7f8ba8383b19 [ 906.273693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 906.274970] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 906.275520] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 906.276030] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 906.276543] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 906.277050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 906.277573] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 906.278069] 05:56:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1008, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:56:24 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:56:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 38) 05:56:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 27) 05:56:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:56:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:56:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:56:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 39) 05:56:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1020, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:24 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:56:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:56:38 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:38 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:56:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 28) 05:56:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:56:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:38 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:56:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 40) [ 920.270907] FAULT_INJECTION: forcing a failure. [ 920.270907] name failslab, interval 1, probability 0, space 0, times 0 [ 920.271755] CPU: 1 PID: 6490 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 920.272295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 920.272843] Call Trace: [ 920.273023] [ 920.273187] dump_stack_lvl+0xc1/0xf0 [ 920.273471] should_fail_ex+0x4b4/0x5b0 [ 920.273765] should_failslab+0x9/0x20 [ 920.274038] __kmem_cache_alloc_node+0x66/0x310 [ 920.274364] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 920.274764] ? p9_fd_create+0x17f/0x540 [ 920.275053] kmalloc_trace+0x26/0xc0 [ 920.275312] p9_fd_create+0x17f/0x540 [ 920.275589] ? __pfx_p9_fd_create+0x10/0x10 [ 920.275892] ? verify_cpu+0x54/0x100 [ 920.276167] ? p9_client_create+0x81c/0x1260 [ 920.276478] p9_client_create+0x883/0x1260 [ 920.276783] ? __pfx_p9_client_create+0x10/0x10 [ 920.277108] ? kasan_save_stack+0x32/0x50 [ 920.277423] ? v9fs_session_init+0xec/0x17b0 [ 920.277735] ? lockdep_init_map_type+0x21e/0x7e0 [ 920.278071] ? __kasan_kmalloc+0x7f/0x90 [ 920.278356] ? __raw_spin_lock_init+0x3a/0x110 [ 920.278682] v9fs_session_init+0x1e0/0x17b0 [ 920.278996] ? __pfx_v9fs_session_init+0x10/0x10 [ 920.279322] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 920.279683] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 920.280030] ? v9fs_mount+0x9e/0xbd0 [ 920.280315] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 920.280724] v9fs_mount+0xbd/0xbd0 [ 920.280999] ? __pfx_v9fs_mount+0x10/0x10 [ 920.281320] ? cap_capable+0x1be/0x220 [ 920.281629] ? __pfx_v9fs_mount+0x10/0x10 [ 920.281941] legacy_get_tree+0x109/0x220 [ 920.282242] vfs_get_tree+0x92/0x360 [ 920.282547] path_mount+0x133c/0x1e50 [ 920.282841] ? kasan_quarantine_put+0x81/0x1d0 [ 920.283189] ? __pfx_path_mount+0x10/0x10 [ 920.283502] ? putname+0x102/0x140 [ 920.283773] ? kmem_cache_free+0x10d/0x4d0 [ 920.284086] ? putname+0x102/0x140 [ 920.284357] __x64_sys_mount+0x286/0x310 [ 920.284666] ? __pfx___x64_sys_mount+0x10/0x10 [ 920.285017] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 920.285426] do_syscall_64+0x3f/0x90 [ 920.285710] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 920.286095] RIP: 0033:0x7f8ba8383b19 [ 920.286350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 920.287622] RSP: 002b:00007f8ba58f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 920.288158] RAX: ffffffffffffffda RBX: 00007f8ba8496f60 RCX: 00007f8ba8383b19 [ 920.288651] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 920.289144] RBP: 00007f8ba58f91d0 R08: 0000000020000140 R09: 0000000000000000 [ 920.289650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.290144] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 920.290654] 05:56:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 41) 05:56:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:56:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:56:52 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 29) 05:56:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2010, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:52 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:56:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:56:52 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:52 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:56:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:56:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 42) 05:56:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:56:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) (fail_nth: 30) 05:56:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2700, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 934.715585] FAULT_INJECTION: forcing a failure. [ 934.715585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.716665] CPU: 0 PID: 6532 Comm: syz-executor.3 Not tainted 6.5.0-rc3-next-20230726 #1 [ 934.717230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 934.717814] Call Trace: [ 934.718007] [ 934.718180] dump_stack_lvl+0xc1/0xf0 [ 934.718478] should_fail_ex+0x4b4/0x5b0 [ 934.718784] _copy_to_user+0x30/0xc0 [ 934.719074] simple_read_from_buffer+0xd0/0x170 [ 934.719429] proc_fail_nth_read+0x1a6/0x290 [ 934.719755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 934.720120] ? security_file_permission+0xb5/0xe0 [ 934.720495] vfs_read+0x1de/0x8f0 [ 934.720756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 934.721120] ? __pfx_vfs_read+0x10/0x10 [ 934.721394] ? __virt_addr_valid+0x102/0x340 [ 934.721749] ? __fget_files+0x267/0x480 [ 934.722078] ksys_read+0x122/0x250 [ 934.722344] ? __pfx_ksys_read+0x10/0x10 [ 934.722651] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 934.723041] do_syscall_64+0x3f/0x90 [ 934.723330] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 934.723717] RIP: 0033:0x7fecd4e8f69c [ 934.723987] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 934.725238] RSP: 002b:00007fecd2452170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 934.725761] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fecd4e8f69c [ 934.726268] RDX: 000000000000000f RSI: 00007fecd24521e0 RDI: 0000000000000005 [ 934.726768] RBP: 00007fecd24521d0 R08: 0000000000000000 R09: 0000000000000000 [ 934.727269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 934.727764] R13: 00007ffddea2a7ef R14: 00007fecd2452300 R15: 0000000000022000 [ 934.728289] 05:56:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:56:52 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:56:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:56:52 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:56:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 934.849157] FAULT_INJECTION: forcing a failure. [ 934.849157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.851085] CPU: 1 PID: 6542 Comm: syz-executor.0 Not tainted 6.5.0-rc3-next-20230726 #1 [ 934.852316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 934.853572] Call Trace: [ 934.853989] [ 934.854352] dump_stack_lvl+0xc1/0xf0 [ 934.854979] should_fail_ex+0x4b4/0x5b0 [ 934.855623] _copy_to_user+0x30/0xc0 [ 934.856219] simple_read_from_buffer+0xd0/0x170 [ 934.856953] proc_fail_nth_read+0x1a6/0x290 [ 934.857659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 934.858421] ? security_file_permission+0xb5/0xe0 [ 934.859203] vfs_read+0x1de/0x8f0 [ 934.859757] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 934.860515] ? __pfx_vfs_read+0x10/0x10 [ 934.861141] ? __virt_addr_valid+0x102/0x340 [ 934.861872] ? __fget_files+0x267/0x480 [ 934.862546] ksys_read+0x122/0x250 [ 934.863122] ? __pfx_ksys_read+0x10/0x10 [ 934.863779] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 934.864623] do_syscall_64+0x3f/0x90 [ 934.865222] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 934.866049] RIP: 0033:0x7f8ba833669c [ 934.866624] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 934.869301] RSP: 002b:00007f8ba58f9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 934.870478] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f8ba833669c [ 934.871558] RDX: 000000000000000f RSI: 00007f8ba58f91e0 RDI: 0000000000000005 [ 934.872620] RBP: 00007f8ba58f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 934.873681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 934.874733] R13: 00007fff1cb28bdf R14: 00007f8ba58f9300 R15: 0000000000022000 [ 934.875821] 05:57:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x3f00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:06 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:57:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x2, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:06 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:57:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:57:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:57:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xedc0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x7, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x2, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:57:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) r2 = getpid() r3 = getpid() process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0x1042}, {&(0x7f0000000340)=""/122, 0xfffffffffffffcac}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) r4 = memfd_secret(0x80000) perf_event_open(&(0x7f00000001c0)={0x432b4e0ef7161803, 0x80, 0x0, 0x7, 0x7f, 0x5, 0x0, 0x3, 0x80, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xea1, 0x2, @perf_config_ext={0x7fffffff, 0x5}, 0x20, 0x8, 0x8, 0x5, 0x7, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x7ff}, r2, 0x0, r4, 0x3) 05:57:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x8, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:06 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:57:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x8, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:57:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:57:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1517f, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:57:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:57:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x9, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x9, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x80000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) r2 = getpid() r3 = getpid() process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0x1042}, {&(0x7f0000000340)=""/122, 0xfffffffffffffcac}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) r4 = memfd_secret(0x80000) perf_event_open(&(0x7f00000001c0)={0x432b4e0ef7161803, 0x80, 0x0, 0x7, 0x7f, 0x5, 0x0, 0x3, 0x80, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xea1, 0x2, @perf_config_ext={0x7fffffff, 0x5}, 0x20, 0x8, 0x8, 0x5, 0x7, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x7ff}, r2, 0x0, r4, 0x3) 05:57:19 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r2 = gettid() ioprio_set$pid(0x2, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r2], 0x1, {r3}}, 0x58) 05:57:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x10, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xfeffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:57:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x10, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) r2 = getpid() r3 = getpid() process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0x1042}, {&(0x7f0000000340)=""/122, 0xfffffffffffffcac}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) r4 = memfd_secret(0x80000) perf_event_open(&(0x7f00000001c0)={0x432b4e0ef7161803, 0x80, 0x0, 0x7, 0x7f, 0x5, 0x0, 0x3, 0x80, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xea1, 0x2, @perf_config_ext={0x7fffffff, 0x5}, 0x20, 0x8, 0x8, 0x5, 0x7, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x7ff}, r2, 0x0, r4, 0x3) 05:57:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:57:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x27, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:57:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) r2 = getpid() r3 = getpid() process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0x1042}, {&(0x7f0000000340)=""/122, 0xfffffffffffffcac}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) r4 = memfd_secret(0x80000) perf_event_open(&(0x7f00000001c0)={0x432b4e0ef7161803, 0x80, 0x0, 0x7, 0x7f, 0x5, 0x0, 0x3, 0x80, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xea1, 0x2, @perf_config_ext={0x7fffffff, 0x5}, 0x20, 0x8, 0x8, 0x5, 0x7, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x7ff}, r2, 0x0, r4, 0x3) 05:57:31 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r2 = gettid() ioprio_set$pid(0x2, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r2], 0x1, {r3}}, 0x58) 05:57:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:57:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xc0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 05:57:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x27, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) r2 = getpid() r3 = getpid() process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0x1042}, {&(0x7f0000000340)=""/122, 0xfffffffffffffcac}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) r4 = memfd_secret(0x80000) perf_event_open(&(0x7f00000001c0)={0x432b4e0ef7161803, 0x80, 0x0, 0x7, 0x7f, 0x5, 0x0, 0x3, 0x80, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xea1, 0x2, @perf_config_ext={0x7fffffff, 0x5}, 0x20, 0x8, 0x8, 0x5, 0x7, 0x1f, 0x6, 0x0, 0x9, 0x0, 0x7ff}, r2, 0x0, r4, 0x3) 05:57:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:57:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) getpid() r2 = getpid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0x1042}, {&(0x7f0000000340)=""/122, 0xfffffffffffffcac}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) memfd_secret(0x80000) 05:57:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x89, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x7000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 973.967482] 9pnet_fd: Insufficient options for proto=fd 05:57:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) getpid() r2 = getpid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0x1042}, {&(0x7f0000000340)=""/122, 0xfffffffffffffcac}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) 05:57:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x40e, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x8000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:57:45 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r2 = gettid() ioprio_set$pid(0x2, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r2], 0x1, {r3}}, 0x58) 05:57:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x1af, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) [ 987.139899] 9pnet_fd: Insufficient options for proto=fd 05:57:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) getpid() r2 = getpid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0x1042}, {&(0x7f0000000340)=""/122, 0xfffffffffffffcac}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) 05:57:56 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, 0x0, 0x0, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:57:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:56 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r2 = gettid() ioprio_set$pid(0x2, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r2], 0x1, {r3}}, 0x58) 05:57:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) getpid() r2 = getpid() process_vm_readv(r2, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) 05:57:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x8100000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x810, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:57:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x700, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x810, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 998.991434] 9pnet_fd: Insufficient options for proto=fd 05:57:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) getpid() getpid() 05:57:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x900, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x900, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x9000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:57 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, 0x0, 0x0, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:57:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xe04, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:57:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) getpid() getpid() 05:57:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:57:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:57:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:58:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xa000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:09 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, 0x0, 0x0, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:58:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x1008, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:09 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, 0x0, 0x0, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:58:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x1008, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) getpid() 05:58:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:58:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xb000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:10 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x0) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:58:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x1020, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) getpid() 05:58:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x10000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:58:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x2000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) 05:58:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x1020, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:24 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x0) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:58:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:58:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x2010, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:58:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x20000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x2000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x2700, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={[0x2]}, 0x8) 05:58:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:58:25 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x0) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:58:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x2010, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x20100000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:37 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:58:37 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:58:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:58:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x3f00, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 'queue1\x00'}) 05:58:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x2700, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xc000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x27000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:37 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:58:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x8900, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:58:37 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:58:50 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:58:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:58:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x3f000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:58:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, 0x0) 05:58:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:58:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)) 05:58:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0xaf01, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:58:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x1517f, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1052.298462] 9pnet_fd: Insufficient options for proto=fd 05:59:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:59:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, 0x0, 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:59:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x1517f, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:02 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:59:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, 0x0) 05:59:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x7f510100, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x15bdd, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)) 05:59:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x8cffffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1064.437084] 9pnet_fd: Insufficient options for proto=fd 05:59:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:59:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x80000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, 0x0) 05:59:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x1876e, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)) 05:59:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:59:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) [ 1064.607419] 9pnet_fd: Insufficient options for proto=fd 05:59:02 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(0x0, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:59:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xc0ed0000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x1876f, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1064.717900] 9pnet_fd: Insufficient options for proto=fd 05:59:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xf6ffffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1064.911773] 9pnet_fd: Insufficient options for proto=fd 05:59:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 1) 05:59:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:59:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x80000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:14 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:59:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xfeffffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1076.421715] 9pnet_fd: Insufficient options for proto=fd 05:59:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x8100000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1076.487181] FAULT_INJECTION: forcing a failure. [ 1076.487181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.488049] CPU: 1 PID: 7029 Comm: syz-executor.6 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1076.488589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.489140] Call Trace: [ 1076.489330] [ 1076.489504] dump_stack_lvl+0xc1/0xf0 [ 1076.489791] should_fail_ex+0x4b4/0x5b0 [ 1076.490068] _copy_from_user+0x30/0xf0 [ 1076.490338] copy_msghdr_from_user+0x89/0x150 [ 1076.490642] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1076.490978] ? perf_trace_lock+0xc1/0x480 [ 1076.491273] ? lock_acquire+0x19a/0x4c0 [ 1076.491553] ? perf_trace_lock+0xc1/0x480 [ 1076.491833] ? __pfx_perf_trace_lock+0x10/0x10 [ 1076.492150] ___sys_sendmsg+0xdd/0x1b0 [ 1076.492416] ? __pfx____sys_sendmsg+0x10/0x10 [ 1076.492719] ? __fget_files+0x245/0x480 [ 1076.492999] ? lock_release+0x1e3/0x680 [ 1076.493269] ? __pfx_lock_release+0x10/0x10 [ 1076.493564] ? lock_release+0x1e3/0x680 [ 1076.493845] ? __fget_files+0x267/0x480 [ 1076.494128] ? __fget_light+0xe5/0x270 [ 1076.494405] __sys_sendmsg+0xf7/0x1d0 [ 1076.494666] ? __pfx___sys_sendmsg+0x10/0x10 [ 1076.494971] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1076.495385] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1076.495801] ? fput+0x2f/0x1a0 [ 1076.496043] ? ksys_write+0x19e/0x250 [ 1076.496320] ? __pfx_ksys_write+0x10/0x10 [ 1076.496621] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1076.496989] ? syscall_enter_from_user_mode+0x21/0x50 [ 1076.497360] do_syscall_64+0x3f/0x90 [ 1076.497636] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1076.498006] RIP: 0033:0x7f63cc761b19 [ 1076.498267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.499510] RSP: 002b:00007f63c9cd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1076.500030] RAX: ffffffffffffffda RBX: 00007f63cc874f60 RCX: 00007f63cc761b19 [ 1076.500528] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1076.501015] RBP: 00007f63c9cd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1076.501502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.501990] R13: 00007ffd2615107f R14: 00007f63c9cd7300 R15: 0000000000022000 [ 1076.502491] 05:59:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 1076.594620] 9pnet_fd: Insufficient options for proto=fd 05:59:27 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) 05:59:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xffff0000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 2) 05:59:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1090.004730] 9pnet_fd: Insufficient options for proto=fd [ 1090.014103] FAULT_INJECTION: forcing a failure. [ 1090.014103] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.014900] CPU: 0 PID: 7045 Comm: syz-executor.6 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1090.015438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.015986] Call Trace: [ 1090.016166] [ 1090.016326] dump_stack_lvl+0xc1/0xf0 [ 1090.016600] should_fail_ex+0x4b4/0x5b0 05:59:28 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:59:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) [ 1090.016886] ? __alloc_skb+0x28c/0x330 [ 1090.017352] should_failslab+0x9/0x20 [ 1090.017657] kmem_cache_alloc_node+0x65/0x3b0 [ 1090.018025] __alloc_skb+0x28c/0x330 [ 1090.018301] ? __pfx___alloc_skb+0x10/0x10 [ 1090.018595] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1090.018950] ? __pfx_perf_trace_lock+0x10/0x10 [ 1090.019276] netlink_sendmsg+0x9ac/0xe40 [ 1090.019573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1090.019904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1090.020230] sock_sendmsg+0x1b6/0x200 [ 1090.020502] ____sys_sendmsg+0x76a/0x9a0 [ 1090.020787] ? copy_msghdr_from_user+0xfc/0x150 [ 1090.021109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1090.021430] ? perf_trace_lock+0xc1/0x480 [ 1090.021718] ? __pfx_perf_trace_lock+0x10/0x10 [ 1090.022042] ___sys_sendmsg+0x110/0x1b0 [ 1090.022318] ? __pfx____sys_sendmsg+0x10/0x10 [ 1090.022627] ? __fget_files+0x245/0x480 [ 1090.022917] ? __pfx_lock_release+0x10/0x10 [ 1090.023231] ? lock_release+0x1e3/0x680 [ 1090.023534] ? __fget_files+0x267/0x480 [ 1090.023833] ? __fget_light+0xe5/0x270 [ 1090.024127] __sys_sendmsg+0xf7/0x1d0 [ 1090.024403] ? __pfx___sys_sendmsg+0x10/0x10 [ 1090.024741] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1090.025108] ? syscall_enter_from_user_mode+0x21/0x50 [ 1090.025483] do_syscall_64+0x3f/0x90 [ 1090.025761] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1090.026116] RIP: 0033:0x7f63cc761b19 [ 1090.026387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1090.027653] RSP: 002b:00007f63c9cd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1090.028179] RAX: ffffffffffffffda RBX: 00007f63cc874f60 RCX: 00007f63cc761b19 [ 1090.028680] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1090.029171] RBP: 00007f63c9cd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.029664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.030157] R13: 00007ffd2615107f R14: 00007f63c9cd7300 R15: 0000000000022000 [ 1090.030668] 05:59:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) 05:59:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xfffffe00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 3) [ 1090.101474] 9pnet_fd: Insufficient options for proto=fd 05:59:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x8100000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1090.157159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:59:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xffffff7f, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 4) 05:59:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:59:42 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:42 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:59:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xffffff8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:59:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xfffffff6, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 5) 05:59:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x27000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1104.441215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:59:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:59:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 6) [ 1104.519143] FAULT_INJECTION: forcing a failure. [ 1104.519143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1104.520001] CPU: 1 PID: 7114 Comm: syz-executor.6 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1104.520550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1104.521097] Call Trace: [ 1104.521277] [ 1104.521441] dump_stack_lvl+0xc1/0xf0 [ 1104.521727] should_fail_ex+0x4b4/0x5b0 [ 1104.522019] _copy_from_iter+0x1d3/0x1320 [ 1104.522318] ? __build_skb_around+0x27f/0x3b0 [ 1104.522648] ? __pfx__copy_from_iter+0x10/0x10 [ 1104.522971] ? __pfx___alloc_skb+0x10/0x10 [ 1104.523277] ? __netlink_dump_start+0x970/0x9c0 [ 1104.523621] ? __virt_addr_valid+0x102/0x340 [ 1104.523943] ? __check_object_size+0x3d4/0x8c0 [ 1104.524272] netlink_sendmsg+0x880/0xe40 [ 1104.524565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1104.524903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1104.525224] sock_sendmsg+0x1b6/0x200 [ 1104.525506] ____sys_sendmsg+0x76a/0x9a0 [ 1104.525804] ? copy_msghdr_from_user+0xfc/0x150 [ 1104.526144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1104.526475] ? perf_trace_lock+0xc1/0x480 [ 1104.526776] ? __pfx_perf_trace_lock+0x10/0x10 [ 1104.527121] ___sys_sendmsg+0x110/0x1b0 [ 1104.527419] ? __pfx____sys_sendmsg+0x10/0x10 [ 1104.527739] ? __fget_files+0x245/0x480 [ 1104.528033] ? __pfx_lock_release+0x10/0x10 [ 1104.528355] ? lock_release+0x1e3/0x680 [ 1104.528653] ? __fget_files+0x267/0x480 [ 1104.528960] ? __fget_light+0xe5/0x270 [ 1104.529244] __sys_sendmsg+0xf7/0x1d0 [ 1104.529523] ? __pfx___sys_sendmsg+0x10/0x10 [ 1104.529841] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1104.530215] ? syscall_enter_from_user_mode+0x21/0x50 [ 1104.530588] do_syscall_64+0x3f/0x90 [ 1104.530863] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1104.531238] RIP: 0033:0x7f63cc761b19 [ 1104.531506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1104.532745] RSP: 002b:00007f63c9cd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.533269] RAX: ffffffffffffffda RBX: 00007f63cc874f60 RCX: 00007f63cc761b19 [ 1104.533766] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1104.534265] RBP: 00007f63c9cd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.534764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.535267] R13: 00007ffd2615107f R14: 00007f63c9cd7300 R15: 0000000000022000 [ 1104.535779] 05:59:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x7f510100, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xe040000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:54 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:59:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:59:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xfffffffe, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:54 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 05:59:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 7) [ 1116.789278] FAULT_INJECTION: forcing a failure. [ 1116.789278] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.790138] CPU: 0 PID: 7132 Comm: syz-executor.6 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1116.790688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1116.791240] Call Trace: [ 1116.791421] [ 1116.791589] dump_stack_lvl+0xc1/0xf0 [ 1116.791873] should_fail_ex+0x4b4/0x5b0 [ 1116.792163] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1116.792627] should_failslab+0x9/0x20 [ 1116.792901] __kmem_cache_alloc_node+0x66/0x310 [ 1116.793236] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1116.793700] ? avc_has_perm_noaudit+0x148/0x3a0 [ 1116.794032] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1116.794486] __kmalloc+0x4d/0x160 [ 1116.794742] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1116.795192] ? genl_cmd_full_to_split+0x371/0x660 [ 1116.795541] genl_family_rcv_msg_doit.isra.0+0x9f/0x2e0 [ 1116.795930] ? __pfx_genl_family_rcv_msg_doit.isra.0+0x10/0x10 [ 1116.796342] ? cap_capable+0x1be/0x220 [ 1116.796639] ? security_capable+0x99/0xc0 [ 1116.796936] ? ns_capable+0xe4/0x120 [ 1116.797205] genl_rcv_msg+0x503/0x7e0 [ 1116.797485] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1116.797792] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1116.798117] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 1116.798445] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1116.798774] ? perf_trace_lock+0xc1/0x480 [ 1116.799077] netlink_rcv_skb+0x15d/0x450 [ 1116.799370] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1116.799682] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1116.800030] ? __pfx_down_read+0x10/0x10 [ 1116.800324] ? netlink_deliver_tap+0x1b2/0xcc0 [ 1116.800647] ? is_vmalloc_addr+0x86/0xa0 [ 1116.800933] genl_rcv+0x28/0x40 [ 1116.801178] netlink_unicast+0x552/0x800 [ 1116.801463] ? __pfx_netlink_unicast+0x10/0x10 [ 1116.801790] ? __virt_addr_valid+0x102/0x340 [ 1116.802120] netlink_sendmsg+0x923/0xe40 [ 1116.802421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1116.802756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1116.803087] sock_sendmsg+0x1b6/0x200 [ 1116.803352] ____sys_sendmsg+0x76a/0x9a0 [ 1116.803649] ? copy_msghdr_from_user+0xfc/0x150 [ 1116.803972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1116.804308] ? perf_trace_lock+0xc1/0x480 [ 1116.804597] ? __pfx_perf_trace_lock+0x10/0x10 [ 1116.804936] ___sys_sendmsg+0x110/0x1b0 [ 1116.805214] ? __pfx____sys_sendmsg+0x10/0x10 [ 1116.805532] ? __fget_files+0x245/0x480 [ 1116.805814] ? __pfx_lock_release+0x10/0x10 [ 1116.806119] ? lock_release+0x1e3/0x680 [ 1116.806396] ? __fget_files+0x267/0x480 [ 1116.806694] ? __fget_light+0xe5/0x270 [ 1116.806969] __sys_sendmsg+0xf7/0x1d0 [ 1116.807244] ? __pfx___sys_sendmsg+0x10/0x10 [ 1116.807555] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1116.807928] ? syscall_enter_from_user_mode+0x21/0x50 [ 1116.808271] do_syscall_64+0x3f/0x90 [ 1116.808543] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1116.808905] RIP: 0033:0x7f63cc761b19 [ 1116.809168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1116.810372] RSP: 002b:00007f63c9cd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1116.810885] RAX: ffffffffffffffda RBX: 00007f63cc874f60 RCX: 00007f63cc761b19 [ 1116.811363] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1116.811860] RBP: 00007f63c9cd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1116.812341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.812829] R13: 00007ffd2615107f R14: 00007f63c9cd7300 R15: 0000000000022000 [ 1116.813327] 05:59:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:59:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 8) 05:59:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xedc000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1116.951578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 05:59:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x89000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 05:59:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:59:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 9) 05:59:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 05:59:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1117.056036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1117.059957] FAULT_INJECTION: forcing a failure. [ 1117.059957] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.061014] CPU: 0 PID: 7156 Comm: syz-executor.6 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1117.061560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1117.062116] Call Trace: [ 1117.062298] [ 1117.062463] dump_stack_lvl+0xc1/0xf0 [ 1117.062736] should_fail_ex+0x4b4/0x5b0 [ 1117.063021] ? __alloc_skb+0x28c/0x330 [ 1117.063306] should_failslab+0x9/0x20 [ 1117.063579] kmem_cache_alloc_node+0x65/0x3b0 [ 1117.063902] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1117.064244] __alloc_skb+0x28c/0x330 [ 1117.064512] ? __pfx___alloc_skb+0x10/0x10 [ 1117.064812] ? lock_is_held_type+0x9f/0x120 [ 1117.065129] nl80211_tx_mgmt+0x872/0xe20 [ 1117.065418] ? __rtnl_unlock+0x68/0xe0 [ 1117.065705] ? netdev_run_todo+0x67c/0xe50 [ 1117.066000] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 1117.066321] ? __pfx___mutex_lock+0x10/0x10 [ 1117.066621] ? __pfx_netdev_run_todo+0x10/0x10 [ 1117.066952] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 1117.067335] ? nl80211_pre_doit+0x111/0x980 [ 1117.067652] genl_family_rcv_msg_doit.isra.0+0x1ee/0x2e0 [ 1117.068060] ? __pfx_genl_family_rcv_msg_doit.isra.0+0x10/0x10 [ 1117.068471] ? cap_capable+0x1be/0x220 [ 1117.068764] ? ns_capable+0xe4/0x120 [ 1117.069039] genl_rcv_msg+0x503/0x7e0 [ 1117.069324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1117.069624] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1117.069946] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 1117.070260] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1117.070575] ? perf_trace_lock+0xc1/0x480 [ 1117.070863] netlink_rcv_skb+0x15d/0x450 [ 1117.071146] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1117.071443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1117.071776] ? __pfx_down_read+0x10/0x10 [ 1117.072054] ? netlink_deliver_tap+0x1b2/0xcc0 [ 1117.072367] ? is_vmalloc_addr+0x86/0xa0 [ 1117.072652] genl_rcv+0x28/0x40 [ 1117.072890] netlink_unicast+0x552/0x800 [ 1117.073173] ? __pfx_netlink_unicast+0x10/0x10 [ 1117.073485] ? __virt_addr_valid+0x102/0x340 [ 1117.073798] netlink_sendmsg+0x923/0xe40 [ 1117.074093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1117.074420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1117.074741] sock_sendmsg+0x1b6/0x200 [ 1117.075017] ____sys_sendmsg+0x76a/0x9a0 [ 1117.075301] ? copy_msghdr_from_user+0xfc/0x150 [ 1117.075623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1117.075977] ? perf_trace_lock+0xc1/0x480 [ 1117.076278] ? __pfx_perf_trace_lock+0x10/0x10 [ 1117.076612] ___sys_sendmsg+0x110/0x1b0 [ 1117.076886] ? __pfx____sys_sendmsg+0x10/0x10 [ 1117.077187] ? __fget_files+0x245/0x480 [ 1117.077473] ? __pfx_lock_release+0x10/0x10 [ 1117.077774] ? lock_release+0x1e3/0x680 [ 1117.078063] ? __fget_files+0x267/0x480 [ 1117.078367] ? __fget_light+0xe5/0x270 [ 1117.078673] __sys_sendmsg+0xf7/0x1d0 [ 1117.078956] ? __pfx___sys_sendmsg+0x10/0x10 [ 1117.079299] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1117.079684] ? syscall_enter_from_user_mode+0x21/0x50 [ 1117.080057] do_syscall_64+0x3f/0x90 [ 1117.080339] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1117.080726] RIP: 0033:0x7f63cc761b19 [ 1117.080999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1117.082300] RSP: 002b:00007f63c9cd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1117.082845] RAX: ffffffffffffffda RBX: 00007f63cc874f60 RCX: 00007f63cc761b19 [ 1117.083357] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1117.083878] RBP: 00007f63c9cd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1117.084397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.084914] R13: 00007ffd2615107f R14: 00007f63c9cd7300 R15: 0000000000022000 [ 1117.085432] 05:59:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 05:59:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 10) [ 1117.222777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:00:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 06:00:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 11) 06:00:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 06:00:08 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:00:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x8000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1130.596446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:00:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xfeffff00000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x27000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 12) 06:00:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0xaf010000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1130.800665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:00:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 06:00:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 06:00:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x3f000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:08 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x0, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:00:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:20 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x0, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:00:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(0x0, 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 06:00:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x6e870100, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 06:00:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x100000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 13) 06:00:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x200000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1142.758160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1142.764147] FAULT_INJECTION: forcing a failure. [ 1142.764147] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.765035] CPU: 1 PID: 7245 Comm: syz-executor.6 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1142.765605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1142.766178] Call Trace: [ 1142.766369] [ 1142.766548] dump_stack_lvl+0xc1/0xf0 [ 1142.766847] should_fail_ex+0x4b4/0x5b0 [ 1142.767147] ? __alloc_skb+0x28c/0x330 [ 1142.767449] should_failslab+0x9/0x20 [ 1142.767736] kmem_cache_alloc_node+0x65/0x3b0 [ 1142.768093] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1142.768448] __alloc_skb+0x28c/0x330 [ 1142.768737] ? __pfx___alloc_skb+0x10/0x10 [ 1142.769045] ? ns_capable+0xe4/0x120 [ 1142.769320] netlink_ack+0x35e/0x1370 [ 1142.769607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1142.769923] ? __pfx_netlink_ack+0x10/0x10 [ 1142.770227] ? perf_trace_lock+0xc1/0x480 [ 1142.770531] netlink_rcv_skb+0x35a/0x450 [ 1142.770827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1142.771138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1142.771486] ? __pfx_down_read+0x10/0x10 [ 1142.771797] ? netlink_deliver_tap+0x1b2/0xcc0 [ 1142.772144] ? is_vmalloc_addr+0x86/0xa0 [ 1142.772457] genl_rcv+0x28/0x40 [ 1142.772720] netlink_unicast+0x552/0x800 [ 1142.773034] ? __pfx_netlink_unicast+0x10/0x10 [ 1142.773375] ? __virt_addr_valid+0x102/0x340 [ 1142.773713] netlink_sendmsg+0x923/0xe40 [ 1142.774026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1142.774372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1142.774710] sock_sendmsg+0x1b6/0x200 [ 1142.774999] ____sys_sendmsg+0x76a/0x9a0 [ 1142.775305] ? copy_msghdr_from_user+0xfc/0x150 [ 1142.775647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1142.775990] ? perf_trace_lock+0xc1/0x480 [ 1142.776294] ? __pfx_perf_trace_lock+0x10/0x10 [ 1142.776628] ___sys_sendmsg+0x110/0x1b0 [ 1142.776909] ? __pfx____sys_sendmsg+0x10/0x10 [ 1142.777234] ? __fget_files+0x245/0x480 [ 1142.777537] ? __pfx_lock_release+0x10/0x10 [ 1142.777853] ? lock_release+0x1e3/0x680 [ 1142.778144] ? __fget_files+0x267/0x480 [ 1142.778429] ? __fget_light+0xe5/0x270 [ 1142.778716] __sys_sendmsg+0xf7/0x1d0 [ 1142.778977] ? __pfx___sys_sendmsg+0x10/0x10 [ 1142.779293] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1142.779626] ? syscall_enter_from_user_mode+0x21/0x50 [ 1142.779992] do_syscall_64+0x3f/0x90 [ 1142.780267] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1142.780634] RIP: 0033:0x7f63cc761b19 [ 1142.780895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1142.782085] RSP: 002b:00007f63c9cd7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1142.782596] RAX: ffffffffffffffda RBX: 00007f63cc874f60 RCX: 00007f63cc761b19 [ 1142.783068] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1142.783531] RBP: 00007f63c9cd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1142.783986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1142.784435] R13: 00007ffd2615107f R14: 00007f63c9cd7300 R15: 0000000000022000 [ 1142.784905] 06:00:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(0x0, 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 06:00:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 1) 06:00:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x6f870100, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:32 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x0, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:00:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 14) 06:00:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x700000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1154.255480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:00:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 15) [ 1154.332868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:00:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x7f510100, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 16) 06:00:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 2) 06:00:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x800000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1154.473223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1154.578928] 9pnet_fd: Insufficient options for proto=fd 06:00:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) (fail_nth: 17) 06:00:45 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x0, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:00:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 3) 06:00:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x810000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(0x0, 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x52) 06:00:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x8000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1168.008906] FAULT_INJECTION: forcing a failure. [ 1168.008906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.010334] CPU: 1 PID: 7304 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1168.011578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.012505] Call Trace: [ 1168.012911] [ 1168.013194] dump_stack_lvl+0xc1/0xf0 [ 1168.013806] should_fail_ex+0x4b4/0x5b0 [ 1168.014302] _copy_from_user+0x30/0xf0 [ 1168.014916] memdup_user+0x72/0xd0 [ 1168.015374] strndup_user+0x78/0xe0 [ 1168.015976] __x64_sys_mount+0x137/0x310 [ 1168.016527] ? __pfx___x64_sys_mount+0x10/0x10 [ 1168.017262] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1168.017893] do_syscall_64+0x3f/0x90 [ 1168.018493] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1168.019110] RIP: 0033:0x7fae5a88cb19 [ 1168.019710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.021720] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.022890] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1168.023711] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1168.024527] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1168.025330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.026132] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1168.026962] [ 1168.046144] 9pnet_fd: Insufficient options for proto=fd [ 1168.049047] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1168.056878] FAULT_INJECTION: forcing a failure. [ 1168.056878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.058549] CPU: 0 PID: 7310 Comm: syz-executor.6 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1168.059654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.060770] Call Trace: [ 1168.061140] [ 1168.061470] dump_stack_lvl+0xc1/0xf0 [ 1168.062025] should_fail_ex+0x4b4/0x5b0 [ 1168.062563] _copy_to_user+0x30/0xc0 [ 1168.063049] simple_read_from_buffer+0xd0/0x170 [ 1168.063698] proc_fail_nth_read+0x1a6/0x290 [ 1168.064315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1168.065031] ? security_file_permission+0xb5/0xe0 [ 1168.065694] vfs_read+0x1de/0x8f0 [ 1168.066155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1168.066774] ? __pfx_vfs_read+0x10/0x10 [ 1168.067288] ? __fget_files+0x267/0x480 [ 1168.067826] ksys_read+0x122/0x250 [ 1168.068282] ? __pfx_ksys_read+0x10/0x10 [ 1168.068819] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1168.069480] do_syscall_64+0x3f/0x90 [ 1168.069959] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1168.070621] RIP: 0033:0x7f63cc71469c [ 1168.071095] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1168.073290] RSP: 002b:00007f63c9cd7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1168.074213] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00007f63cc71469c [ 1168.075078] RDX: 000000000000000f RSI: 00007f63c9cd71e0 RDI: 0000000000000005 [ 1168.075952] RBP: 00007f63c9cd71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1168.076843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1168.077721] R13: 00007ffd2615107f R14: 00007f63c9cd7300 R15: 0000000000022000 [ 1168.078628] 06:00:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xc0000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x900000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 4) 06:00:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 1168.281133] 9pnet_fd: Insufficient options for proto=fd 06:00:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1168.302653] FAULT_INJECTION: forcing a failure. [ 1168.302653] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.304029] CPU: 1 PID: 7329 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1168.304991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1168.305909] Call Trace: [ 1168.306216] [ 1168.306496] dump_stack_lvl+0xc1/0xf0 [ 1168.306968] should_fail_ex+0x4b4/0x5b0 [ 1168.307452] should_failslab+0x9/0x20 [ 1168.307924] __kmem_cache_alloc_node+0x66/0x310 [ 1168.308646] ? copy_mount_options+0x55/0x180 [ 1168.309455] kmalloc_trace+0x26/0xc0 [ 1168.310124] copy_mount_options+0x55/0x180 [ 1168.310861] __x64_sys_mount+0x1ac/0x310 [ 1168.311572] ? __pfx___x64_sys_mount+0x10/0x10 [ 1168.312170] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1168.312923] do_syscall_64+0x3f/0x90 [ 1168.313415] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1168.314151] RIP: 0033:0x7fae5a88cb19 [ 1168.314657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1168.317015] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.317941] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1168.318797] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1168.319649] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1168.320532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.321467] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1168.322434] 06:00:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1168.405451] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:00:46 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x0, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:00:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xa00000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 5) 06:00:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) 06:00:58 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x0, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:00:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xdd5b0100, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xb00000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x810000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 1180.677639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1180.691633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:00:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:00:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 6) 06:00:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1000000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:58 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x0, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:00:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1180.806791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:00:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x900000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1180.821935] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1180.849688] FAULT_INJECTION: forcing a failure. [ 1180.849688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.851601] CPU: 0 PID: 7376 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1180.852737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1180.853853] Call Trace: [ 1180.854226] [ 1180.854571] dump_stack_lvl+0xc1/0xf0 [ 1180.855142] should_fail_ex+0x4b4/0x5b0 [ 1180.855742] _copy_from_user+0x30/0xf0 [ 1180.856324] copy_mount_options+0x76/0x180 [ 1180.857254] __x64_sys_mount+0x1ac/0x310 [ 1180.857865] ? __pfx___x64_sys_mount+0x10/0x10 [ 1180.858551] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1180.859313] do_syscall_64+0x3f/0x90 [ 1180.859862] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1180.860613] RIP: 0033:0x7fae5a88cb19 [ 1180.861140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1180.863575] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1180.864609] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1180.865559] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1180.866517] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1180.867483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.868441] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1180.869468] 06:00:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:00:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xfeffffff, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x52) 06:00:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1180.946403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1180.956464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:00:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2000000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xffff0000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:00:59 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x0, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:00:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:00:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:00:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1181.136836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1181.153592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:01:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 7) 06:01:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2010000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:01:11 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x0, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:01:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x52) 06:01:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:01:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:01:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:01:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xffffff7f, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1193.976568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1193.981898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1194.007049] FAULT_INJECTION: forcing a failure. [ 1194.007049] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.007904] CPU: 0 PID: 7433 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1194.008478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1194.009057] Call Trace: [ 1194.009250] [ 1194.009421] dump_stack_lvl+0xc1/0xf0 [ 1194.009718] should_fail_ex+0x4b4/0x5b0 [ 1194.010024] ? getname_flags.part.0+0x50/0x4f0 [ 1194.010369] should_failslab+0x9/0x20 [ 1194.010656] kmem_cache_alloc+0x61/0x390 [ 1194.010969] getname_flags.part.0+0x50/0x4f0 [ 1194.011754] getname_flags+0x9e/0xf0 [ 1194.012369] user_path_at_empty+0x2f/0x70 [ 1194.013040] __x64_sys_mount+0x1ed/0x310 [ 1194.013695] ? __pfx___x64_sys_mount+0x10/0x10 [ 1194.014450] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1194.015296] do_syscall_64+0x3f/0x90 [ 1194.015899] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1194.016716] RIP: 0033:0x7fae5a88cb19 [ 1194.017316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1194.020008] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1194.021186] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1194.022079] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1194.022973] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1194.023868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.024772] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1194.025717] 06:01:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:01:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2700000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:01:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1194.134416] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:01:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1194.155156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:01:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 8) 06:01:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x2700000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:01:24 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x52) 06:01:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:01:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:01:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x3f00000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:01:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:01:24 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x0, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:01:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 9) [ 1206.587053] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1206.596910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1206.630449] FAULT_INJECTION: forcing a failure. [ 1206.630449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.631347] CPU: 0 PID: 7480 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1206.631889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1206.632433] Call Trace: [ 1206.632618] [ 1206.632781] dump_stack_lvl+0xc1/0xf0 [ 1206.633077] should_fail_ex+0x4b4/0x5b0 [ 1206.633369] strncpy_from_user+0x38/0x340 [ 1206.633671] getname_flags.part.0+0x95/0x4f0 [ 1206.633994] getname_flags+0x9e/0xf0 [ 1206.634266] user_path_at_empty+0x2f/0x70 [ 1206.634560] __x64_sys_mount+0x1ed/0x310 [ 1206.634855] ? __pfx___x64_sys_mount+0x10/0x10 [ 1206.635185] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1206.635565] do_syscall_64+0x3f/0x90 [ 1206.635837] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1206.636199] RIP: 0033:0x7fae5a88cb19 [ 1206.636459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1206.637647] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1206.638158] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1206.638625] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1206.639094] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1206.639563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:01:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x7f51010000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1206.640032] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1206.640742] 06:01:24 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x0, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:01:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 1206.742860] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1206.754498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:01:36 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x0, 0x81100, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:01:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x7f51010000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:01:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:01:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 10) 06:01:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xfffffffe, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:01:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:01:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x8900000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:01:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x0) 06:01:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1218.239284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1218.247954] FAULT_INJECTION: forcing a failure. [ 1218.247954] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.249597] CPU: 1 PID: 7510 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1218.250739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1218.251819] Call Trace: [ 1218.252208] [ 1218.252550] dump_stack_lvl+0xc1/0xf0 [ 1218.253134] should_fail_ex+0x4b4/0x5b0 [ 1218.253728] should_failslab+0x9/0x20 [ 1218.254289] __kmem_cache_alloc_node+0x66/0x310 [ 1218.254977] ? alloc_fs_context+0x58/0x9e0 [ 1218.255553] ? __print_lock_name+0x201/0x250 [ 1218.256209] kmalloc_trace+0x26/0xc0 [ 1218.256763] alloc_fs_context+0x58/0x9e0 [ 1218.257393] path_mount+0xa6d/0x1e50 [ 1218.257969] ? kasan_quarantine_put+0x81/0x1d0 [ 1218.258646] ? __pfx_path_mount+0x10/0x10 [ 1218.259263] ? putname+0x102/0x140 [ 1218.259791] ? kmem_cache_free+0x10d/0x4d0 [ 1218.260386] ? putname+0x102/0x140 [ 1218.260907] __x64_sys_mount+0x286/0x310 [ 1218.261521] ? __pfx___x64_sys_mount+0x10/0x10 [ 1218.262202] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1218.262966] do_syscall_64+0x3f/0x90 [ 1218.263487] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1218.264216] RIP: 0033:0x7fae5a88cb19 [ 1218.264756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.267254] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1218.268285] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1218.269264] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1218.270270] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1218.271244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1218.272191] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1218.273237] [ 1218.287790] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:01:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x8cffffff00000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:01:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:01:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1218.463339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1218.515924] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:01:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0xaf01000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:01:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 11) 06:01:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xf6ffffff00000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:01:49 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:01:49 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 12) 06:01:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x0) 06:01:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:01:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x1000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:01:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:01:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1231.722039] FAULT_INJECTION: forcing a failure. [ 1231.722039] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.723725] CPU: 1 PID: 7551 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1231.724815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.725908] Call Trace: [ 1231.726269] [ 1231.726590] dump_stack_lvl+0xc1/0xf0 [ 1231.727142] should_fail_ex+0x4b4/0x5b0 [ 1231.727715] should_failslab+0x9/0x20 [ 1231.728257] __kmem_cache_alloc_node+0x66/0x310 [ 1231.728934] ? legacy_init_fs_context+0x44/0xe0 [ 1231.729597] ? lockdep_init_map_type+0x21e/0x7e0 [ 1231.730266] kmalloc_trace+0x26/0xc0 [ 1231.730795] legacy_init_fs_context+0x44/0xe0 [ 1231.731422] ? __pfx_legacy_init_fs_context+0x10/0x10 [ 1231.732133] alloc_fs_context+0x571/0x9e0 [ 1231.732712] path_mount+0xa6d/0x1e50 [ 1231.733281] ? kasan_quarantine_put+0x81/0x1d0 [ 1231.734067] ? __pfx_path_mount+0x10/0x10 [ 1231.734712] ? putname+0x102/0x140 [ 1231.735223] ? kmem_cache_free+0x10d/0x4d0 [ 1231.735818] ? putname+0x102/0x140 [ 1231.736346] __x64_sys_mount+0x286/0x310 [ 1231.736931] ? __pfx___x64_sys_mount+0x10/0x10 [ 1231.737590] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1231.738314] do_syscall_64+0x3f/0x90 [ 1231.738837] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1231.739551] RIP: 0033:0x7fae5a88cb19 [ 1231.740065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1231.742420] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1231.743423] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1231.744369] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1231.745330] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1231.746266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1231.747211] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1231.748181] [ 1231.766215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:01:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xfeffffff00000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:01:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x8000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1231.792044] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:01:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xffff000000000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:01:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:01:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:01:49 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 13) 06:01:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1231.933913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1231.942255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:01:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0xffffffff00000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:01:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x0) 06:01:49 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) [ 1231.988031] FAULT_INJECTION: forcing a failure. [ 1231.988031] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.989617] CPU: 1 PID: 7577 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1231.990654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1231.991694] Call Trace: [ 1231.992043] [ 1231.992351] dump_stack_lvl+0xc1/0xf0 [ 1231.992900] should_fail_ex+0x4b4/0x5b0 [ 1231.993461] should_failslab+0x9/0x20 [ 1231.993975] __kmem_cache_alloc_node+0x66/0x310 [ 1231.994607] ? legacy_init_fs_context+0x44/0xe0 [ 1231.995226] ? lockdep_init_map_type+0x21e/0x7e0 [ 1231.995872] kmalloc_trace+0x26/0xc0 [ 1231.996381] legacy_init_fs_context+0x44/0xe0 [ 1231.996993] ? __pfx_legacy_init_fs_context+0x10/0x10 [ 1231.997725] alloc_fs_context+0x571/0x9e0 [ 1231.998309] path_mount+0xa6d/0x1e50 [ 1231.998859] ? kasan_quarantine_put+0x81/0x1d0 [ 1231.999504] ? __pfx_path_mount+0x10/0x10 [ 1232.000090] ? putname+0x102/0x140 [ 1232.000595] ? kmem_cache_free+0x10d/0x4d0 [ 1232.001272] ? putname+0x102/0x140 [ 1232.001981] __x64_sys_mount+0x286/0x310 [ 1232.002765] ? __pfx___x64_sys_mount+0x10/0x10 [ 1232.003652] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1232.004583] do_syscall_64+0x3f/0x90 [ 1232.005300] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1232.006161] RIP: 0033:0x7fae5a88cb19 [ 1232.006708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1232.009117] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1232.010190] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1232.011151] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1232.012131] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1232.013088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1232.014042] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1232.015023] 06:02:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 14) 06:02:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x68, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:02:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:04 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:02:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xffffff7f00000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:02:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x0) 06:02:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, 0x0) [ 1246.041577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1246.055489] FAULT_INJECTION: forcing a failure. [ 1246.055489] name failslab, interval 1, probability 0, space 0, times 0 [ 1246.057065] CPU: 1 PID: 7604 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1246.058169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1246.059253] Call Trace: [ 1246.059614] [ 1246.059937] dump_stack_lvl+0xc1/0xf0 [ 1246.060492] should_fail_ex+0x4b4/0x5b0 [ 1246.061067] should_failslab+0x9/0x20 [ 1246.061620] __kmem_cache_alloc_node+0x66/0x310 [ 1246.062279] ? v9fs_mount+0x9e/0xbd0 [ 1246.062827] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1246.063599] kmalloc_trace+0x26/0xc0 [ 1246.064120] v9fs_mount+0x9e/0xbd0 [ 1246.064647] ? __pfx_v9fs_mount+0x10/0x10 [ 1246.065241] ? cap_capable+0x1be/0x220 [ 1246.065826] ? __pfx_v9fs_mount+0x10/0x10 [ 1246.066421] legacy_get_tree+0x109/0x220 [ 1246.066993] vfs_get_tree+0x92/0x360 [ 1246.067542] path_mount+0x133c/0x1e50 [ 1246.068095] ? kasan_quarantine_put+0x81/0x1d0 [ 1246.068760] ? __pfx_path_mount+0x10/0x10 [ 1246.069362] ? putname+0x102/0x140 [ 1246.069876] ? kmem_cache_free+0x10d/0x4d0 [ 1246.070538] ? putname+0x102/0x140 [ 1246.071060] __x64_sys_mount+0x286/0x310 [ 1246.071646] ? __pfx___x64_sys_mount+0x10/0x10 [ 1246.072303] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1246.073029] do_syscall_64+0x3f/0x90 [ 1246.073577] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1246.074289] RIP: 0033:0x7fae5a88cb19 [ 1246.074805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1246.077171] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1246.078194] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1246.079140] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1246.080083] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1246.081055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1246.082013] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1246.082985] [ 1246.088278] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:02:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xffffffff00000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:02:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x6c, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:02:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x700000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, 0x0) 06:02:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 15) [ 1246.213717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:02:04 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) [ 1246.226668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:02:16 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 16) 06:02:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:02:16 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:02:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, 0x0) 06:02:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x810000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x74, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:02:16 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:02:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x900000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1258.776654] FAULT_INJECTION: forcing a failure. [ 1258.776654] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.777473] CPU: 1 PID: 7640 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1258.778043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1258.778624] Call Trace: [ 1258.778811] [ 1258.778981] dump_stack_lvl+0xc1/0xf0 [ 1258.779275] should_fail_ex+0x4b4/0x5b0 [ 1258.779569] should_failslab+0x9/0x20 [ 1258.779849] __kmem_cache_alloc_node+0x66/0x310 [ 1258.780192] ? kasan_save_stack+0x32/0x50 [ 1258.780498] ? v9fs_session_init+0xab/0x17b0 [ 1258.780824] ? __kasan_kmalloc+0x7f/0x90 [ 1258.781124] ? v9fs_mount+0x9e/0xbd0 [ 1258.781405] ? v9fs_session_init+0xab/0x17b0 [ 1258.781743] __kmalloc_node_track_caller+0x4e/0x160 [ 1258.782105] kstrdup+0x3f/0x80 [ 1258.782360] v9fs_session_init+0xab/0x17b0 [ 1258.782670] ? __kmem_cache_alloc_node+0x20b/0x310 [ 1258.783028] ? __pfx_lock_release+0x10/0x10 [ 1258.783352] ? __pfx_v9fs_session_init+0x10/0x10 [ 1258.783701] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1258.784085] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1258.784447] ? v9fs_mount+0x9e/0xbd0 [ 1258.784729] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1258.785105] v9fs_mount+0xbd/0xbd0 [ 1258.785372] ? __pfx_v9fs_mount+0x10/0x10 [ 1258.785666] ? cap_capable+0x1be/0x220 [ 1258.785969] ? __pfx_v9fs_mount+0x10/0x10 [ 1258.786279] legacy_get_tree+0x109/0x220 [ 1258.786577] vfs_get_tree+0x92/0x360 [ 1258.786859] path_mount+0x133c/0x1e50 [ 1258.787149] ? kasan_quarantine_put+0x81/0x1d0 [ 1258.787481] ? __pfx_path_mount+0x10/0x10 [ 1258.787766] ? putname+0x102/0x140 [ 1258.788028] ? kmem_cache_free+0x10d/0x4d0 [ 1258.788319] ? putname+0x102/0x140 [ 1258.788586] __x64_sys_mount+0x286/0x310 [ 1258.788870] ? __pfx___x64_sys_mount+0x10/0x10 [ 1258.789212] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1258.789573] do_syscall_64+0x3f/0x90 [ 1258.789854] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1258.790205] RIP: 0033:0x7fae5a88cb19 [ 1258.790466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1258.791608] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1258.792133] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1258.792631] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1258.793129] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1258.793632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1258.794132] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1258.794641] [ 1258.820944] 9pnet_fd: Insufficient options for proto=fd [ 1258.832318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1258.835417] 9pnet_fd: Insufficient options for proto=fd [ 1258.846833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:02:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xe04000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:16 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 17) 06:02:16 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:02:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 06:02:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:02:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:02:16 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 18) [ 1259.022368] FAULT_INJECTION: forcing a failure. [ 1259.022368] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.023327] CPU: 1 PID: 7668 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1259.023891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1259.024473] Call Trace: [ 1259.024664] [ 1259.024819] dump_stack_lvl+0xc1/0xf0 [ 1259.025105] should_fail_ex+0x4b4/0x5b0 [ 1259.025401] should_failslab+0x9/0x20 [ 1259.025694] __kmem_cache_alloc_node+0x66/0x310 [ 1259.026043] ? kasan_save_stack+0x32/0x50 [ 1259.026351] ? v9fs_session_init+0xec/0x17b0 [ 1259.026676] ? v9fs_session_init+0xec/0x17b0 [ 1259.027000] __kmalloc_node_track_caller+0x4e/0x160 [ 1259.027362] kstrdup+0x3f/0x80 [ 1259.027617] v9fs_session_init+0xec/0x17b0 [ 1259.027894] ? __pfx_lock_release+0x10/0x10 [ 1259.028218] ? __pfx_v9fs_session_init+0x10/0x10 [ 1259.028559] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1259.028944] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1259.029302] ? v9fs_mount+0x9e/0xbd0 [ 1259.029603] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1259.030014] v9fs_mount+0xbd/0xbd0 [ 1259.030290] ? __pfx_v9fs_mount+0x10/0x10 [ 1259.030594] ? cap_capable+0x1be/0x220 [ 1259.030896] ? __pfx_v9fs_mount+0x10/0x10 [ 1259.031201] legacy_get_tree+0x109/0x220 [ 1259.031504] vfs_get_tree+0x92/0x360 [ 1259.031792] path_mount+0x133c/0x1e50 [ 1259.032083] ? kasan_quarantine_put+0x81/0x1d0 [ 1259.032419] ? __pfx_path_mount+0x10/0x10 [ 1259.032728] ? putname+0x102/0x140 [ 1259.032990] ? kmem_cache_free+0x10d/0x4d0 [ 1259.033302] ? putname+0x102/0x140 [ 1259.033549] __x64_sys_mount+0x286/0x310 [ 1259.033855] ? __pfx___x64_sys_mount+0x10/0x10 [ 1259.034194] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1259.034573] do_syscall_64+0x3f/0x90 [ 1259.034859] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1259.035234] RIP: 0033:0x7fae5a88cb19 [ 1259.035500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1259.036761] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1259.037284] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1259.037787] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1259.038282] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1259.038781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1259.039284] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1259.039793] [ 1259.057786] 9pnet_fd: Insufficient options for proto=fd [ 1259.059590] 9pnet_fd: Insufficient options for proto=fd [ 1259.084061] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1259.101705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:02:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x27, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1272.928255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:02:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x0) [ 1272.933485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:02:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 19) 06:02:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r0}}) 06:02:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:02:30 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:02:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1272.954744] 9pnet_fd: Insufficient options for proto=fd [ 1272.961334] 9pnet_fd: Insufficient options for proto=fd 06:02:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x89, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x181, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 1272.997960] 9pnet_fd: Insufficient options for proto=fd 06:02:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 20) 06:02:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r0}}) 06:02:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1273.066463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1273.076202] FAULT_INJECTION: forcing a failure. [ 1273.076202] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.077033] CPU: 1 PID: 7711 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1273.077560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1273.078095] Call Trace: [ 1273.078273] [ 1273.078437] dump_stack_lvl+0xc1/0xf0 [ 1273.078713] should_fail_ex+0x4b4/0x5b0 [ 1273.078995] should_failslab+0x9/0x20 [ 1273.079269] __kmem_cache_alloc_node+0x66/0x310 [ 1273.079592] ? find_held_lock+0x2c/0x110 [ 1273.079631] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1273.079875] ? p9_client_create+0xb3/0x1260 [ 1273.080703] ? __kmem_cache_alloc_node+0x20b/0x310 [ 1273.081045] kmalloc_trace+0x26/0xc0 [ 1273.081309] p9_client_create+0xb3/0x1260 [ 1273.081604] ? __pfx_p9_client_create+0x10/0x10 [ 1273.081914] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1273.082249] ? kasan_save_stack+0x32/0x50 [ 1273.082539] ? v9fs_session_init+0xec/0x17b0 [ 1273.082849] ? lockdep_init_map_type+0x21e/0x7e0 [ 1273.083173] ? __kasan_kmalloc+0x7f/0x90 [ 1273.083457] ? __raw_spin_lock_init+0x3a/0x110 [ 1273.083766] v9fs_session_init+0x1e0/0x17b0 [ 1273.084070] ? __pfx_v9fs_session_init+0x10/0x10 [ 1273.084380] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1273.084745] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1273.085062] ? v9fs_mount+0x9e/0xbd0 [ 1273.085336] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1273.085716] v9fs_mount+0xbd/0xbd0 [ 1273.085988] ? __pfx_v9fs_mount+0x10/0x10 [ 1273.086262] ? cap_capable+0x1be/0x220 [ 1273.086525] ? __pfx_v9fs_mount+0x10/0x10 [ 1273.086834] legacy_get_tree+0x109/0x220 [ 1273.087108] vfs_get_tree+0x92/0x360 [ 1273.087389] path_mount+0x133c/0x1e50 [ 1273.087654] ? kasan_quarantine_put+0x81/0x1d0 [ 1273.087994] ? __pfx_path_mount+0x10/0x10 [ 1273.088271] ? putname+0x102/0x140 [ 1273.088538] ? kmem_cache_free+0x10d/0x4d0 [ 1273.088820] ? putname+0x102/0x140 [ 1273.089097] __x64_sys_mount+0x286/0x310 [ 1273.089373] ? __pfx___x64_sys_mount+0x10/0x10 [ 1273.089726] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1273.090103] do_syscall_64+0x3f/0x90 [ 1273.090380] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1273.090761] RIP: 0033:0x7fae5a88cb19 [ 1273.091032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1273.092255] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1273.092795] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1273.093288] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1273.093742] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1273.094235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1273.094732] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1273.095250] 06:02:31 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) [ 1273.122368] 9pnet_fd: Insufficient options for proto=fd [ 1273.138164] 9pnet_fd: Insufficient options for proto=fd [ 1273.160744] 9pnet_fd: Insufficient options for proto=fd 06:02:43 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:02:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1af, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x52) 06:02:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r0}}) 06:02:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 21) 06:02:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:02:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x2700000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 1285.967543] 9pnet_fd: Insufficient options for proto=fd 06:02:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x3f00000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1285.996325] 9pnet_fd: Insufficient options for proto=fd [ 1285.996917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1286.011725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:02:44 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:02:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:02:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 22) 06:02:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x22}) 06:02:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) 06:02:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x810, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1286.128611] FAULT_INJECTION: forcing a failure. [ 1286.128611] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.130185] CPU: 1 PID: 7757 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1286.131308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1286.132431] Call Trace: [ 1286.132809] [ 1286.133149] dump_stack_lvl+0xc1/0xf0 [ 1286.133722] should_fail_ex+0x4b4/0x5b0 [ 1286.134278] should_failslab+0x9/0x20 [ 1286.134841] __kmem_cache_alloc_node+0x66/0x310 [ 1286.135527] ? p9_client_create+0x473/0x1260 [ 1286.136176] ? find_held_lock+0x2c/0x110 [ 1286.136781] ? p9_client_create+0x473/0x1260 [ 1286.137429] __kmalloc_node_track_caller+0x4e/0x160 [ 1286.138106] kstrdup+0x3f/0x80 [ 1286.138607] p9_client_create+0x473/0x1260 [ 1286.139179] ? __pfx_p9_client_create+0x10/0x10 [ 1286.139853] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1286.140562] ? kasan_save_stack+0x32/0x50 [ 1286.141165] ? v9fs_session_init+0xec/0x17b0 [ 1286.141812] ? lockdep_init_map_type+0x21e/0x7e0 [ 1286.142444] ? __kasan_kmalloc+0x7f/0x90 [ 1286.143042] ? __raw_spin_lock_init+0x3a/0x110 [ 1286.143711] v9fs_session_init+0x1e0/0x17b0 [ 1286.144347] ? __pfx_v9fs_session_init+0x10/0x10 [ 1286.145023] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1286.145768] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1286.146419] ? v9fs_mount+0x9e/0xbd0 [ 1286.146978] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1286.147688] v9fs_mount+0xbd/0xbd0 [ 1286.148227] ? __pfx_v9fs_mount+0x10/0x10 [ 1286.148774] ? cap_capable+0x1be/0x220 [ 1286.149356] ? __pfx_v9fs_mount+0x10/0x10 [ 1286.149906] legacy_get_tree+0x109/0x220 [ 1286.150493] vfs_get_tree+0x92/0x360 [ 1286.151050] path_mount+0x133c/0x1e50 [ 1286.151622] ? kasan_quarantine_put+0x81/0x1d0 [ 1286.152285] ? __pfx_path_mount+0x10/0x10 [ 1286.152890] ? putname+0x102/0x140 [ 1286.153412] ? kmem_cache_free+0x10d/0x4d0 [ 1286.154047] ? putname+0x102/0x140 [ 1286.154581] __x64_sys_mount+0x286/0x310 [ 1286.155167] ? __pfx___x64_sys_mount+0x10/0x10 [ 1286.155772] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1286.156508] do_syscall_64+0x3f/0x90 [ 1286.157052] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1286.157781] RIP: 0033:0x7fae5a88cb19 [ 1286.158312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1286.160706] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1286.161732] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1286.162724] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1286.163683] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1286.164642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1286.165598] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1286.166589] 06:02:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x6e87010000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) [ 1286.199158] 9pnet_fd: Insufficient options for proto=fd [ 1286.200351] 9pnet_fd: Insufficient options for proto=fd [ 1286.204289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1286.208011] 9pnet_fd: Insufficient options for proto=fd [ 1286.215870] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:02:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x900, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:02:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) 06:02:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1286.342668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1286.355391] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1286.370571] 9pnet_fd: Insufficient options for proto=fd 06:02:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1008, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:56 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:02:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x2}}) 06:02:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x6f87010000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:02:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) 06:02:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 23) 06:02:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 1) 06:02:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1020, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 24) [ 1298.349685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1298.361596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1298.407844] FAULT_INJECTION: forcing a failure. [ 1298.407844] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.408720] CPU: 0 PID: 7813 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1298.409268] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1298.409831] Call Trace: [ 1298.410022] [ 1298.410197] dump_stack_lvl+0xc1/0xf0 [ 1298.410484] should_fail_ex+0x4b4/0x5b0 [ 1298.410775] should_failslab+0x9/0x20 [ 1298.411059] __kmem_cache_alloc_node+0x66/0x310 [ 1298.411393] ? match_token+0x361/0x570 [ 1298.411677] ? p9_client_create+0x574/0x1260 [ 1298.412009] ? p9_client_create+0x574/0x1260 [ 1298.412326] __kmalloc_node_track_caller+0x4e/0x160 [ 1298.412685] kmemdup_nul+0x36/0xb0 [ 1298.412960] p9_client_create+0x574/0x1260 [ 1298.413273] ? __pfx_p9_client_create+0x10/0x10 [ 1298.413610] ? kasan_save_stack+0x32/0x50 [ 1298.413920] ? v9fs_session_init+0xec/0x17b0 [ 1298.414261] ? lockdep_init_map_type+0x21e/0x7e0 [ 1298.414605] ? __kasan_kmalloc+0x7f/0x90 [ 1298.414902] ? __raw_spin_lock_init+0x3a/0x110 [ 1298.415239] v9fs_session_init+0x1e0/0x17b0 [ 1298.415574] ? __pfx_v9fs_session_init+0x10/0x10 [ 1298.415918] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 06:02:56 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) [ 1298.416300] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1298.416849] ? v9fs_mount+0x9e/0xbd0 [ 1298.417130] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1298.417537] v9fs_mount+0xbd/0xbd0 [ 1298.417804] ? __pfx_v9fs_mount+0x10/0x10 [ 1298.418114] ? cap_capable+0x1be/0x220 [ 1298.418410] ? __pfx_v9fs_mount+0x10/0x10 [ 1298.418715] legacy_get_tree+0x109/0x220 [ 1298.419015] vfs_get_tree+0x92/0x360 [ 1298.419295] path_mount+0x133c/0x1e50 [ 1298.419588] ? kasan_quarantine_put+0x81/0x1d0 [ 1298.419916] ? __pfx_path_mount+0x10/0x10 [ 1298.420218] ? putname+0x102/0x140 [ 1298.420477] ? kmem_cache_free+0x10d/0x4d0 [ 1298.420785] ? putname+0x102/0x140 [ 1298.421059] __x64_sys_mount+0x286/0x310 [ 1298.421351] ? __pfx___x64_sys_mount+0x10/0x10 [ 1298.421691] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1298.422069] do_syscall_64+0x3f/0x90 [ 1298.422339] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1298.422700] RIP: 0033:0x7fae5a88cb19 [ 1298.422960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1298.424337] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1298.424842] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1298.425319] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1298.425793] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1298.426267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1298.426734] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1298.427225] 06:02:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x7f51010000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:02:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x7}}) 06:02:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 2) [ 1298.523182] FAULT_INJECTION: forcing a failure. [ 1298.523182] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.524313] CPU: 0 PID: 7801 Comm: syz-executor.1 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1298.524876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1298.525445] Call Trace: [ 1298.525639] [ 1298.525803] dump_stack_lvl+0xc1/0xf0 [ 1298.526100] should_fail_ex+0x4b4/0x5b0 [ 1298.526403] should_failslab+0x9/0x20 [ 1298.526681] __kmem_cache_alloc_node+0x66/0x310 [ 1298.527024] ? alloc_pipe_info+0x10e/0x590 [ 1298.527341] kmalloc_trace+0x26/0xc0 [ 1298.527617] alloc_pipe_info+0x10e/0x590 [ 1298.527915] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1298.528296] splice_direct_to_actor+0x796/0x9d0 [ 1298.528637] ? __pfx_direct_splice_actor+0x10/0x10 [ 1298.529004] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1298.529382] ? security_file_permission+0xb5/0xe0 [ 1298.529740] do_splice_direct+0x1bb/0x290 [ 1298.530052] ? __pfx_do_splice_direct+0x10/0x10 [ 1298.530383] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1298.530765] ? lock_is_held_type+0x9f/0x120 [ 1298.531083] do_sendfile+0xb67/0x1300 [ 1298.531371] ? __pfx_do_sendfile+0x10/0x10 [ 1298.531684] __x64_sys_sendfile64+0x1d5/0x210 [ 1298.532012] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1298.532378] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1298.532762] do_syscall_64+0x3f/0x90 [ 1298.533045] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1298.533422] RIP: 0033:0x7f4c95475b19 [ 1298.533691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1298.534898] RSP: 002b:00007f4c929eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1298.535421] RAX: ffffffffffffffda RBX: 00007f4c95588f60 RCX: 00007f4c95475b19 [ 1298.535923] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 1298.536408] RBP: 00007f4c929eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1298.536902] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001 [ 1298.537397] R13: 00007ffdc80949ff R14: 00007f4c929eb300 R15: 0000000000022000 [ 1298.537911] 06:03:08 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:03:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x8}}) 06:03:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:03:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 3) 06:03:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 25) 06:03:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:03:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:03:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 2) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) [ 1310.058663] FAULT_INJECTION: forcing a failure. [ 1310.058663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1310.059547] CPU: 0 PID: 7835 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1310.060127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1310.060707] Call Trace: [ 1310.060908] [ 1310.061081] dump_stack_lvl+0xc1/0xf0 [ 1310.061366] should_fail_ex+0x4b4/0x5b0 [ 1310.061665] _copy_from_user+0x30/0xf0 [ 1310.061947] memdup_user+0x72/0xd0 [ 1310.062221] strndup_user+0x78/0xe0 [ 1310.062495] __x64_sys_mount+0x137/0x310 [ 1310.062797] ? __pfx___x64_sys_mount+0x10/0x10 [ 1310.063137] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1310.063515] do_syscall_64+0x3f/0x90 [ 1310.063789] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1310.064160] RIP: 0033:0x7fc04a61bb19 [ 1310.064421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1310.065605] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1310.066115] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1310.066614] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1310.067098] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1310.067574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.068051] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1310.068555] [ 1310.092006] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1310.107802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:03:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2010, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:03:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 3) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) 06:03:21 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:03:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 4) 06:03:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x9}}) 06:03:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xba9, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:03:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 26) 06:03:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xc000000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1324.015180] FAULT_INJECTION: forcing a failure. [ 1324.015180] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.015990] CPU: 0 PID: 7863 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1324.016662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1324.017355] Call Trace: [ 1324.017595] [ 1324.017805] dump_stack_lvl+0xc1/0xf0 [ 1324.018162] should_fail_ex+0x4b4/0x5b0 [ 1324.018543] should_failslab+0x9/0x20 [ 1324.018885] __kmem_cache_alloc_node+0x66/0x310 [ 1324.019295] ? copy_mount_options+0x55/0x180 [ 1324.019711] kmalloc_trace+0x26/0xc0 [ 1324.020043] copy_mount_options+0x55/0x180 [ 1324.020429] __x64_sys_mount+0x1ac/0x310 [ 1324.020794] ? __pfx___x64_sys_mount+0x10/0x10 [ 1324.021217] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1324.021690] do_syscall_64+0x3f/0x90 [ 1324.022023] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1324.022379] RIP: 0033:0x7fc04a61bb19 [ 1324.022705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1324.024221] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1324.024863] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1324.025462] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1324.026075] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1324.026696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.027299] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1324.027942] [ 1324.028566] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1324.035113] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1324.058139] FAULT_INJECTION: forcing a failure. [ 1324.058139] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.060049] CPU: 1 PID: 7871 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1324.061116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1324.062185] Call Trace: [ 1324.062558] [ 1324.062872] dump_stack_lvl+0xc1/0xf0 [ 1324.063413] should_fail_ex+0x4b4/0x5b0 [ 1324.063994] should_failslab+0x9/0x20 [ 1324.064585] __kmem_cache_alloc_node+0x66/0x310 [ 1324.065249] ? v9fs_session_init+0x1e0/0x17b0 [ 1324.065869] ? parse_opts.part.0+0x8e/0x340 [ 1324.066477] ? vfs_get_tree+0x92/0x360 [ 1324.067024] ? path_mount+0x133c/0x1e50 [ 1324.067590] ? parse_opts.part.0+0x8e/0x340 [ 1324.068193] __kmalloc_node_track_caller+0x4e/0x160 [ 1324.068862] kstrdup+0x3f/0x80 [ 1324.069337] parse_opts.part.0+0x8e/0x340 [ 1324.069917] ? lock_acquire+0x19a/0x4c0 [ 1324.070490] ? __pfx_parse_opts.part.0+0x10/0x10 [ 1324.071150] ? __delete_object+0xb3/0x100 [ 1324.071731] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1324.072504] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1324.073300] ? __pfx_lock_release+0x10/0x10 [ 1324.073880] ? __pfx_lock_release+0x10/0x10 [ 1324.074486] ? __virt_addr_valid+0x102/0x340 [ 1324.075109] p9_fd_create+0x9c/0x540 [ 1324.075638] ? __pfx_p9_fd_create+0x10/0x10 [ 1324.076232] ? verify_cpu+0x54/0x100 [ 1324.076761] ? p9_client_create+0x81c/0x1260 [ 1324.077361] p9_client_create+0x883/0x1260 [ 1324.077961] ? __pfx_p9_client_create+0x10/0x10 [ 1324.078603] ? kasan_save_stack+0x32/0x50 [ 1324.079204] ? v9fs_session_init+0xec/0x17b0 [ 1324.079832] ? lockdep_init_map_type+0x21e/0x7e0 [ 1324.080507] ? __kasan_kmalloc+0x7f/0x90 [ 1324.081098] ? __raw_spin_lock_init+0x3a/0x110 [ 1324.081772] v9fs_session_init+0x1e0/0x17b0 [ 1324.082422] ? __pfx_v9fs_session_init+0x10/0x10 [ 1324.083091] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1324.083843] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1324.084538] ? v9fs_mount+0x9e/0xbd0 [ 1324.085061] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1324.085847] v9fs_mount+0xbd/0xbd0 [ 1324.086393] ? __pfx_v9fs_mount+0x10/0x10 [ 1324.087000] ? cap_capable+0x1be/0x220 [ 1324.087576] ? __pfx_v9fs_mount+0x10/0x10 [ 1324.088175] legacy_get_tree+0x109/0x220 [ 1324.088756] vfs_get_tree+0x92/0x360 [ 1324.089316] path_mount+0x133c/0x1e50 [ 1324.089884] ? kasan_quarantine_put+0x81/0x1d0 [ 1324.090561] ? __pfx_path_mount+0x10/0x10 [ 1324.091165] ? putname+0x102/0x140 [ 1324.091689] ? kmem_cache_free+0x10d/0x4d0 [ 1324.092302] ? putname+0x102/0x140 [ 1324.092847] __x64_sys_mount+0x286/0x310 [ 1324.093450] ? __pfx___x64_sys_mount+0x10/0x10 [ 1324.094131] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1324.094902] do_syscall_64+0x3f/0x90 [ 1324.095458] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1324.096207] RIP: 0033:0x7fae5a88cb19 [ 1324.096747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1324.099246] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1324.100307] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1324.101287] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1324.102268] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1324.103272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1324.104251] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1324.105266] 06:03:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:03:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xdd5b010000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:03:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2700, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:03:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0xa}}) [ 1324.200771] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1324.212172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1324.223931] FAULT_INJECTION: forcing a failure. [ 1324.223931] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.225375] CPU: 0 PID: 7875 Comm: syz-executor.1 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1324.226067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1324.226770] Call Trace: [ 1324.227002] [ 1324.227207] dump_stack_lvl+0xc1/0xf0 [ 1324.227556] should_fail_ex+0x4b4/0x5b0 [ 1324.227898] ? alloc_pipe_info+0x1e9/0x590 [ 1324.228265] should_failslab+0x9/0x20 [ 1324.228602] __kmem_cache_alloc_node+0x66/0x310 [ 1324.229016] ? alloc_pipe_info+0x1e9/0x590 [ 1324.229379] ? alloc_pipe_info+0x10e/0x590 [ 1324.229758] ? alloc_pipe_info+0x1e9/0x590 [ 1324.230127] __kmalloc+0x4d/0x160 [ 1324.230443] alloc_pipe_info+0x1e9/0x590 [ 1324.230803] splice_direct_to_actor+0x796/0x9d0 [ 1324.231208] ? __pfx_direct_splice_actor+0x10/0x10 [ 1324.231652] ? inode_security+0x105/0x140 [ 1324.232026] ? avc_policy_seqno+0x9/0x20 [ 1324.232384] ? selinux_file_permission+0x9c/0x520 [ 1324.232798] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1324.233253] ? security_file_permission+0xb5/0xe0 [ 1324.233674] do_splice_direct+0x1bb/0x290 [ 1324.234037] ? __pfx_do_splice_direct+0x10/0x10 [ 1324.234354] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1324.234818] ? lock_is_held_type+0x9f/0x120 [ 1324.235186] do_sendfile+0xb67/0x1300 [ 1324.235529] ? __pfx_do_sendfile+0x10/0x10 [ 1324.235905] __x64_sys_sendfile64+0x1d5/0x210 [ 1324.236295] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1324.236735] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1324.237179] do_syscall_64+0x3f/0x90 [ 1324.237514] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1324.237954] RIP: 0033:0x7f4c95475b19 [ 1324.238194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1324.239698] RSP: 002b:00007f4c929ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1324.240326] RAX: ffffffffffffffda RBX: 00007f4c95589020 RCX: 00007f4c95475b19 [ 1324.240926] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 1324.241518] RBP: 00007f4c929ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1324.242119] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001 [ 1324.242723] R13: 00007ffdc80949ff R14: 00007f4c929ca300 R15: 0000000000022000 [ 1324.243344] 06:03:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 5) 06:03:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 27) 06:03:22 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:03:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x8900, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:03:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 6) [ 1324.441625] FAULT_INJECTION: forcing a failure. [ 1324.441625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1324.443147] CPU: 1 PID: 7898 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1324.444155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1324.445171] Call Trace: [ 1324.445505] [ 1324.445810] dump_stack_lvl+0xc1/0xf0 [ 1324.446342] should_fail_ex+0x4b4/0x5b0 [ 1324.446879] _copy_from_user+0x30/0xf0 [ 1324.447395] copy_mount_options+0x76/0x180 [ 1324.447948] __x64_sys_mount+0x1ac/0x310 [ 1324.448490] ? __pfx___x64_sys_mount+0x10/0x10 [ 1324.449102] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1324.449782] do_syscall_64+0x3f/0x90 [ 1324.450275] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1324.450961] RIP: 0033:0x7fc04a61bb19 [ 1324.451441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1324.453635] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1324.454599] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1324.455478] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1324.456354] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1324.457238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.458114] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1324.459030] 06:03:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x4800, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:03:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 7) 06:03:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xaf01, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:03:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0xb}}) 06:03:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 4) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) 06:03:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:03:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 28) 06:03:34 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) [ 1336.492749] FAULT_INJECTION: forcing a failure. [ 1336.492749] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.493621] CPU: 1 PID: 7909 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1336.494143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1336.494697] Call Trace: [ 1336.494888] [ 1336.495050] dump_stack_lvl+0xc1/0xf0 [ 1336.495327] should_fail_ex+0x4b4/0x5b0 [ 1336.495608] ? getname_flags.part.0+0x50/0x4f0 [ 1336.495927] should_failslab+0x9/0x20 [ 1336.496192] kmem_cache_alloc+0x61/0x390 [ 1336.496479] getname_flags.part.0+0x50/0x4f0 [ 1336.496792] getname_flags+0x9e/0xf0 [ 1336.497047] user_path_at_empty+0x2f/0x70 [ 1336.497334] __x64_sys_mount+0x1ed/0x310 [ 1336.497622] ? __pfx___x64_sys_mount+0x10/0x10 [ 1336.497958] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1336.498326] do_syscall_64+0x3f/0x90 [ 1336.498605] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1336.498967] RIP: 0033:0x7fc04a61bb19 [ 1336.499219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1336.500388] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1336.500890] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1336.501364] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1336.501834] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1336.502296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1336.502778] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1336.503302] [ 1336.504448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1336.508325] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:03:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x4c00, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 1336.540381] FAULT_INJECTION: forcing a failure. [ 1336.540381] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.541229] CPU: 1 PID: 7916 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1336.541784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1336.542334] Call Trace: [ 1336.542523] [ 1336.542688] dump_stack_lvl+0xc1/0xf0 [ 1336.542965] should_fail_ex+0x4b4/0x5b0 [ 1336.543246] should_failslab+0x9/0x20 [ 1336.543504] __kmem_cache_alloc_node+0x66/0x310 [ 1336.543827] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1336.544222] ? p9_fd_create+0x17f/0x540 [ 1336.544504] kmalloc_trace+0x26/0xc0 [ 1336.544766] p9_fd_create+0x17f/0x540 [ 1336.545034] ? __pfx_p9_fd_create+0x10/0x10 [ 1336.545328] ? verify_cpu+0x54/0x100 [ 1336.545591] ? p9_client_create+0x81c/0x1260 [ 1336.545904] p9_client_create+0x883/0x1260 [ 1336.546201] ? __pfx_p9_client_create+0x10/0x10 [ 1336.546543] ? kasan_save_stack+0x32/0x50 [ 1336.546835] ? v9fs_session_init+0xec/0x17b0 [ 1336.547146] ? lockdep_init_map_type+0x21e/0x7e0 [ 1336.547480] ? __kasan_kmalloc+0x7f/0x90 [ 1336.547764] ? __raw_spin_lock_init+0x3a/0x110 [ 1336.548086] v9fs_session_init+0x1e0/0x17b0 [ 1336.548394] ? __pfx_v9fs_session_init+0x10/0x10 [ 1336.548717] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1336.549081] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1336.549414] ? v9fs_mount+0x9e/0xbd0 [ 1336.549679] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1336.550080] v9fs_mount+0xbd/0xbd0 [ 1336.550334] ? __pfx_v9fs_mount+0x10/0x10 [ 1336.550647] ? cap_capable+0x1be/0x220 [ 1336.550943] ? __pfx_v9fs_mount+0x10/0x10 [ 1336.551257] legacy_get_tree+0x109/0x220 [ 1336.551556] vfs_get_tree+0x92/0x360 [ 1336.551836] path_mount+0x133c/0x1e50 [ 1336.552140] ? kasan_quarantine_put+0x81/0x1d0 [ 1336.552484] ? __pfx_path_mount+0x10/0x10 [ 1336.552794] ? putname+0x102/0x140 [ 1336.553054] ? kmem_cache_free+0x10d/0x4d0 [ 1336.553346] ? putname+0x102/0x140 [ 1336.553607] __x64_sys_mount+0x286/0x310 [ 1336.553892] ? __pfx___x64_sys_mount+0x10/0x10 [ 1336.554219] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1336.554597] do_syscall_64+0x3f/0x90 [ 1336.554859] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1336.555217] RIP: 0033:0x7fae5a88cb19 [ 1336.555471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1336.556636] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1336.557141] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1336.557609] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1336.558088] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1336.558565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1336.559074] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1336.559552] 06:03:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 8) [ 1336.618008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:03:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xfeffffff00000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:03:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x10}}) 06:03:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xedc0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1336.636716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:03:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x6800, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:03:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 9) 06:03:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xffff000000000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1336.742368] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1336.749094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:03:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 29) [ 1336.782175] FAULT_INJECTION: forcing a failure. [ 1336.782175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1336.783052] CPU: 1 PID: 7950 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1336.783606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1336.784146] Call Trace: [ 1336.784323] [ 1336.784488] dump_stack_lvl+0xc1/0xf0 [ 1336.784766] should_fail_ex+0x4b4/0x5b0 [ 1336.785054] strncpy_from_user+0x38/0x340 [ 1336.785358] getname_flags.part.0+0x95/0x4f0 [ 1336.785677] getname_flags+0x9e/0xf0 [ 1336.785938] user_path_at_empty+0x2f/0x70 [ 1336.786225] __x64_sys_mount+0x1ed/0x310 [ 1336.786523] ? __pfx___x64_sys_mount+0x10/0x10 [ 1336.786850] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1336.787234] do_syscall_64+0x3f/0x90 [ 1336.787514] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1336.787879] RIP: 0033:0x7fc04a61bb19 [ 1336.788138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1336.789322] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1336.789827] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1336.790296] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1336.790782] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1336.791256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1336.791724] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1336.792256] [ 1336.892436] FAULT_INJECTION: forcing a failure. [ 1336.892436] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.893238] CPU: 1 PID: 7952 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1336.893778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1336.894316] Call Trace: [ 1336.894504] [ 1336.894674] dump_stack_lvl+0xc1/0xf0 [ 1336.894951] should_fail_ex+0x4b4/0x5b0 [ 1336.895230] should_failslab+0x9/0x20 [ 1336.895495] __kmem_cache_alloc_node+0x66/0x310 [ 1336.895815] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1336.896210] ? p9_fd_create+0x17f/0x540 [ 1336.896492] kmalloc_trace+0x26/0xc0 [ 1336.896749] p9_fd_create+0x17f/0x540 [ 1336.897018] ? __pfx_p9_fd_create+0x10/0x10 [ 1336.897322] ? verify_cpu+0x54/0x100 [ 1336.897590] ? p9_client_create+0x81c/0x1260 [ 1336.897895] p9_client_create+0x883/0x1260 [ 1336.898192] ? __pfx_p9_client_create+0x10/0x10 [ 1336.898527] ? kasan_save_stack+0x32/0x50 [ 1336.898817] ? v9fs_session_init+0xec/0x17b0 [ 1336.899128] ? lockdep_init_map_type+0x21e/0x7e0 [ 1336.899457] ? __kasan_kmalloc+0x7f/0x90 [ 1336.899755] ? __raw_spin_lock_init+0x3a/0x110 [ 1336.900082] v9fs_session_init+0x1e0/0x17b0 [ 1336.900392] ? __pfx_v9fs_session_init+0x10/0x10 [ 1336.900729] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1336.901090] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1336.901431] ? v9fs_mount+0x9e/0xbd0 [ 1336.901713] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1336.902138] v9fs_mount+0xbd/0xbd0 [ 1336.902421] ? __pfx_v9fs_mount+0x10/0x10 [ 1336.902740] ? cap_capable+0x1be/0x220 [ 1336.903041] ? __pfx_v9fs_mount+0x10/0x10 [ 1336.903352] legacy_get_tree+0x109/0x220 [ 1336.903653] vfs_get_tree+0x92/0x360 [ 1336.903933] path_mount+0x133c/0x1e50 [ 1336.904223] ? kasan_quarantine_put+0x81/0x1d0 [ 1336.904566] ? __pfx_path_mount+0x10/0x10 [ 1336.904880] ? putname+0x102/0x140 [ 1336.905152] ? kmem_cache_free+0x10d/0x4d0 [ 1336.905465] ? putname+0x102/0x140 [ 1336.905741] __x64_sys_mount+0x286/0x310 [ 1336.906052] ? __pfx___x64_sys_mount+0x10/0x10 [ 1336.906388] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1336.906778] do_syscall_64+0x3f/0x90 [ 1336.907056] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1336.907447] RIP: 0033:0x7fae5a88cb19 [ 1336.907727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1336.909008] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1336.909546] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1336.910054] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1336.910587] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1336.911096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1336.911598] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1336.912129] 06:03:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 30) 06:03:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x6c00, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:03:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x27}}) 06:03:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xffffff7f00000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:03:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 5) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) 06:03:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1517f, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:03:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 10) 06:03:52 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) [ 1354.304645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1354.306287] FAULT_INJECTION: forcing a failure. [ 1354.306287] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.307809] CPU: 1 PID: 7963 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1354.308893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1354.309983] Call Trace: [ 1354.310336] [ 1354.310653] dump_stack_lvl+0xc1/0xf0 [ 1354.311241] should_fail_ex+0x4b4/0x5b0 [ 1354.311809] ? p9_tag_alloc+0x9c/0x830 [ 1354.312349] should_failslab+0x9/0x20 [ 1354.312887] kmem_cache_alloc+0x61/0x390 [ 1354.313471] ? perf_trace_lock+0xc1/0x480 [ 1354.314058] p9_tag_alloc+0x9c/0x830 [ 1354.314587] ? __pfx_p9_tag_alloc+0x10/0x10 [ 1354.315201] ? perf_trace_lock+0xc1/0x480 [ 1354.315800] ? __pfx_lock_acquire+0x10/0x10 [ 1354.316388] ? find_held_lock+0x2c/0x110 [ 1354.316969] ? __pfx_perf_trace_lock+0x10/0x10 [ 1354.317593] p9_client_prepare_req+0x17b/0x420 [ 1354.318229] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1354.318958] ? lock_release+0x1e3/0x680 [ 1354.319526] ? __pfx_lock_release+0x10/0x10 [ 1354.320122] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1354.320841] p9_client_rpc+0x1a1/0xcb0 [ 1354.321392] ? __pfx_p9_client_rpc+0x10/0x10 [ 1354.322002] ? __pfx_cgroup_file_poll+0x10/0x10 [ 1354.322657] ? kernfs_fop_poll+0x171/0x200 [ 1354.323286] ? __pfx_kernfs_fop_poll+0x10/0x10 [ 1354.323930] ? p9_fd_poll+0x1ec/0x2d0 [ 1354.324485] ? p9_fd_create+0x35b/0x540 [ 1354.325057] ? __pfx_p9_fd_create+0x10/0x10 [ 1354.325694] p9_client_create+0xb5b/0x1260 [ 1354.326297] ? __pfx_p9_client_create+0x10/0x10 [ 1354.326957] ? kasan_save_stack+0x32/0x50 [ 1354.327538] ? v9fs_session_init+0xec/0x17b0 [ 1354.328170] ? lockdep_init_map_type+0x21e/0x7e0 [ 1354.328841] ? __kasan_kmalloc+0x7f/0x90 [ 1354.329415] ? __raw_spin_lock_init+0x3a/0x110 [ 1354.330062] v9fs_session_init+0x1e0/0x17b0 [ 1354.330720] ? __pfx_v9fs_session_init+0x10/0x10 [ 1354.331448] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1354.332168] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1354.332846] ? v9fs_mount+0x9e/0xbd0 [ 1354.333379] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1354.334127] v9fs_mount+0xbd/0xbd0 [ 1354.334643] ? __pfx_v9fs_mount+0x10/0x10 [ 1354.335225] ? cap_capable+0x1be/0x220 [ 1354.335791] ? __pfx_v9fs_mount+0x10/0x10 [ 1354.336351] legacy_get_tree+0x109/0x220 [ 1354.336925] vfs_get_tree+0x92/0x360 [ 1354.337493] path_mount+0x133c/0x1e50 [ 1354.338139] ? kasan_quarantine_put+0x81/0x1d0 [ 1354.338802] ? __pfx_path_mount+0x10/0x10 [ 1354.339390] ? putname+0x102/0x140 [ 1354.339898] ? kmem_cache_free+0x10d/0x4d0 [ 1354.340490] ? putname+0x102/0x140 [ 1354.341007] __x64_sys_mount+0x286/0x310 [ 1354.341586] ? __pfx___x64_sys_mount+0x10/0x10 [ 1354.342238] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1354.342974] do_syscall_64+0x3f/0x90 [ 1354.343508] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1354.344222] RIP: 0033:0x7fae5a88cb19 [ 1354.344730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1354.347098] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1354.348109] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1354.349072] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1354.350037] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1354.351017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.351990] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1354.352974] [ 1354.368487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:03:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xffffffff00000000, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:03:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000100), 0x228002, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="1000"]) pread64(r0, &(0x7f0000000080)=""/16, 0x10, 0xf5) [ 1354.391772] FAULT_INJECTION: forcing a failure. [ 1354.391772] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.392749] CPU: 0 PID: 7976 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1354.393408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1354.393972] Call Trace: [ 1354.394169] [ 1354.394339] dump_stack_lvl+0xc1/0xf0 [ 1354.394632] should_fail_ex+0x4b4/0x5b0 [ 1354.394954] should_failslab+0x9/0x20 [ 1354.395239] __kmem_cache_alloc_node+0x66/0x310 [ 1354.395596] ? alloc_fs_context+0x58/0x9e0 [ 1354.395914] ? __print_lock_name+0x201/0x250 [ 1354.396332] kmalloc_trace+0x26/0xc0 [ 1354.396625] alloc_fs_context+0x58/0x9e0 [ 1354.396991] path_mount+0xa6d/0x1e50 [ 1354.397281] ? kasan_quarantine_put+0x81/0x1d0 [ 1354.397693] ? __pfx_path_mount+0x10/0x10 [ 1354.397997] ? putname+0x102/0x140 [ 1354.398329] ? kmem_cache_free+0x10d/0x4d0 [ 1354.398654] ? putname+0x102/0x140 [ 1354.399003] __x64_sys_mount+0x286/0x310 [ 1354.399317] ? __pfx___x64_sys_mount+0x10/0x10 [ 1354.399734] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1354.400121] do_syscall_64+0x3f/0x90 [ 1354.400469] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1354.400858] RIP: 0033:0x7fc04a61bb19 [ 1354.401135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1354.402640] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1354.403182] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1354.403687] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1354.404190] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1354.404695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.405191] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1354.405725] [ 1354.414932] FAULT_INJECTION: forcing a failure. [ 1354.414932] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.416837] CPU: 1 PID: 7978 Comm: syz-executor.1 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1354.417899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1354.418980] Call Trace: [ 1354.419340] [ 1354.419659] dump_stack_lvl+0xc1/0xf0 [ 1354.420205] should_fail_ex+0x4b4/0x5b0 [ 1354.420835] ? jbd2__journal_start+0x194/0x810 [ 1354.421493] should_failslab+0x9/0x20 [ 1354.422111] kmem_cache_alloc+0x61/0x390 [ 1354.422697] ? lock_is_held_type+0x9f/0x120 [ 1354.423329] jbd2__journal_start+0x194/0x810 [ 1354.423954] __ext4_journal_start_sb+0x3d7/0x560 [ 1354.424616] ? ext4_dirty_inode+0xa5/0x130 [ 1354.425211] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1354.425902] ext4_dirty_inode+0xa5/0x130 [ 1354.426498] __mark_inode_dirty+0x1aa/0xc10 [ 1354.427126] touch_atime+0x67b/0x730 [ 1354.427680] ? __pfx_touch_atime+0x10/0x10 [ 1354.428423] ? lock_is_held_type+0x9f/0x120 [ 1354.429060] filemap_splice_read+0x7ae/0x990 [ 1354.429698] ? __pfx_filemap_splice_read+0x10/0x10 [ 1354.430412] ? lock_is_held_type+0x9f/0x120 [ 1354.431154] ? fsnotify_perm.part.0+0x248/0x680 [ 1354.432044] ext4_file_splice_read+0x101/0x160 [ 1354.432772] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 1354.433563] vfs_splice_read+0x238/0x2d0 [ 1354.434226] splice_direct_to_actor+0x2aa/0x9d0 [ 1354.434991] ? __pfx_direct_splice_actor+0x10/0x10 [ 1354.435758] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1354.436468] ? security_file_permission+0xb5/0xe0 [ 1354.437157] do_splice_direct+0x1bb/0x290 [ 1354.437726] ? __pfx_do_splice_direct+0x10/0x10 [ 1354.438362] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1354.439097] ? lock_is_held_type+0x9f/0x120 [ 1354.439696] do_sendfile+0xb67/0x1300 [ 1354.440232] ? __pfx_do_sendfile+0x10/0x10 [ 1354.440838] __x64_sys_sendfile64+0x1d5/0x210 [ 1354.441463] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1354.442154] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1354.442882] do_syscall_64+0x3f/0x90 [ 1354.443409] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1354.444116] RIP: 0033:0x7f4c95475b19 [ 1354.444628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1354.446970] RSP: 002b:00007f4c929ca188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1354.447974] RAX: ffffffffffffffda RBX: 00007f4c95589020 RCX: 00007f4c95475b19 [ 1354.448909] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 1354.449847] RBP: 00007f4c929ca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1354.450791] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001 [ 1354.451730] R13: 00007ffdc80949ff R14: 00007f4c929ca300 R15: 0000000000022000 [ 1354.452697] 06:03:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x80000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:03:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 31) 06:03:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x7400, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:03:52 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:03:52 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) flock(r0, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x100000000}}, './cgroup/cgroup.procs\x00'}) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4048010) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{0x9, 0x7}, {0x80, 0x3}, 0x3}) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 06:03:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1354.589085] FAULT_INJECTION: forcing a failure. [ 1354.589085] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.589881] CPU: 0 PID: 7992 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1354.590432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1354.591008] Call Trace: [ 1354.591201] [ 1354.591369] dump_stack_lvl+0xc1/0xf0 [ 1354.591665] should_fail_ex+0x4b4/0x5b0 [ 1354.591976] ? p9_tag_alloc+0x9c/0x830 [ 1354.592271] should_failslab+0x9/0x20 [ 1354.592548] kmem_cache_alloc+0x61/0x390 [ 1354.592864] p9_tag_alloc+0x9c/0x830 [ 1354.593146] ? __pfx_p9_tag_alloc+0x10/0x10 [ 1354.593469] ? __pfx_lock_acquire+0x10/0x10 [ 1354.593807] ? __pfx_perf_trace_lock+0x10/0x10 [ 1354.594239] p9_client_prepare_req+0x17b/0x420 [ 1354.594544] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1354.594923] ? lock_release+0x1e3/0x680 [ 1354.595218] ? __pfx_lock_release+0x10/0x10 [ 1354.595540] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1354.595927] p9_client_rpc+0x1a1/0xcb0 [ 1354.596227] ? __pfx_p9_client_rpc+0x10/0x10 [ 1354.596548] ? __pfx_cgroup_file_poll+0x10/0x10 [ 1354.596892] ? kernfs_fop_poll+0x171/0x200 [ 1354.597202] ? __pfx_kernfs_fop_poll+0x10/0x10 [ 1354.597547] ? p9_fd_poll+0x1ec/0x2d0 [ 1354.597815] ? p9_fd_create+0x35b/0x540 [ 1354.598121] ? __pfx_p9_fd_create+0x10/0x10 [ 1354.598454] p9_client_create+0xb5b/0x1260 [ 1354.598757] ? __pfx_p9_client_create+0x10/0x10 [ 1354.599095] ? kasan_save_stack+0x32/0x50 [ 1354.599395] ? v9fs_session_init+0xec/0x17b0 [ 1354.599728] ? lockdep_init_map_type+0x21e/0x7e0 [ 1354.600080] ? __kasan_kmalloc+0x7f/0x90 [ 1354.600081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1354.600385] ? __raw_spin_lock_init+0x3a/0x110 [ 1354.601772] v9fs_session_init+0x1e0/0x17b0 [ 1354.602109] ? __pfx_v9fs_session_init+0x10/0x10 [ 1354.602419] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1354.602810] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1354.603172] ? v9fs_mount+0x9e/0xbd0 [ 1354.603459] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1354.603862] v9fs_mount+0xbd/0xbd0 [ 1354.604116] ? __pfx_v9fs_mount+0x10/0x10 [ 1354.604430] ? cap_capable+0x1be/0x220 [ 1354.604704] ? __pfx_v9fs_mount+0x10/0x10 [ 1354.605012] legacy_get_tree+0x109/0x220 [ 1354.605286] vfs_get_tree+0x92/0x360 [ 1354.605580] path_mount+0x133c/0x1e50 [ 1354.605847] ? kasan_quarantine_put+0x81/0x1d0 [ 1354.606192] ? __pfx_path_mount+0x10/0x10 [ 1354.606468] ? putname+0x102/0x140 [ 1354.606720] ? kmem_cache_free+0x10d/0x4d0 [ 1354.607034] ? putname+0x102/0x140 [ 1354.607288] __x64_sys_mount+0x286/0x310 [ 1354.607597] ? __pfx___x64_sys_mount+0x10/0x10 [ 1354.607912] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1354.608297] do_syscall_64+0x3f/0x90 [ 1354.608560] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1354.608935] RIP: 0033:0x7fae5a88cb19 [ 1354.609180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1354.610415] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1354.610889] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1354.611322] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1354.611753] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1354.612185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.612620] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1354.613081] [ 1354.638023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:03:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 6) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) 06:03:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 11) 06:03:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:03:52 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:03:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 32) [ 1354.835103] FAULT_INJECTION: forcing a failure. [ 1354.835103] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.835953] CPU: 0 PID: 8014 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1354.836531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1354.837107] Call Trace: [ 1354.837302] [ 1354.837472] dump_stack_lvl+0xc1/0xf0 [ 1354.837773] should_fail_ex+0x4b4/0x5b0 [ 1354.838087] ? p9_fcall_init+0x97/0x210 [ 1354.838384] should_failslab+0x9/0x20 [ 1354.838678] __kmem_cache_alloc_node+0x66/0x310 [ 1354.839048] ? p9_fcall_init+0x97/0x210 [ 1354.839342] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1354.839737] ? p9_fcall_init+0x97/0x210 [ 1354.840037] __kmalloc+0x4d/0x160 [ 1354.840311] p9_fcall_init+0x97/0x210 [ 1354.840611] p9_tag_alloc+0x16a/0x830 [ 1354.840883] ? __pfx_p9_tag_alloc+0x10/0x10 [ 1354.841216] ? __pfx_perf_trace_lock+0x10/0x10 [ 1354.841569] p9_client_prepare_req+0x17b/0x420 [ 1354.841912] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1354.842291] ? lock_release+0x1e3/0x680 [ 1354.842572] ? __pfx_lock_release+0x10/0x10 [ 1354.842904] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1354.843298] p9_client_rpc+0x1a1/0xcb0 [ 1354.843610] ? __pfx_p9_client_rpc+0x10/0x10 [ 1354.843945] ? __pfx_cgroup_file_poll+0x10/0x10 [ 1354.844308] ? kernfs_fop_poll+0x171/0x200 [ 1354.844639] ? __pfx_kernfs_fop_poll+0x10/0x10 [ 1354.844986] ? p9_fd_poll+0x1ec/0x2d0 [ 1354.845290] ? p9_fd_create+0x35b/0x540 [ 1354.845572] ? __pfx_p9_fd_create+0x10/0x10 [ 1354.845915] p9_client_create+0xb5b/0x1260 [ 1354.846245] ? __pfx_p9_client_create+0x10/0x10 [ 1354.846569] ? kasan_save_stack+0x32/0x50 [ 1354.846892] ? v9fs_session_init+0xec/0x17b0 [ 1354.847223] ? lockdep_init_map_type+0x21e/0x7e0 [ 1354.847590] ? __kasan_kmalloc+0x7f/0x90 [ 1354.847916] ? __raw_spin_lock_init+0x3a/0x110 [ 1354.848276] v9fs_session_init+0x1e0/0x17b0 [ 1354.848614] ? __pfx_v9fs_session_init+0x10/0x10 [ 1354.848972] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1354.849371] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1354.849708] ? v9fs_mount+0x9e/0xbd0 [ 1354.850002] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1354.850425] v9fs_mount+0xbd/0xbd0 [ 1354.850694] ? __pfx_v9fs_mount+0x10/0x10 [ 1354.851008] ? cap_capable+0x1be/0x220 [ 1354.851320] ? __pfx_v9fs_mount+0x10/0x10 [ 1354.851644] legacy_get_tree+0x109/0x220 [ 1354.851955] vfs_get_tree+0x92/0x360 [ 1354.852246] path_mount+0x133c/0x1e50 [ 1354.852521] ? kasan_quarantine_put+0x81/0x1d0 [ 1354.852868] ? __pfx_path_mount+0x10/0x10 [ 1354.853186] ? putname+0x102/0x140 [ 1354.853438] ? kmem_cache_free+0x10d/0x4d0 [ 1354.853760] ? putname+0x102/0x140 [ 1354.854024] __x64_sys_mount+0x286/0x310 [ 1354.854333] ? __pfx___x64_sys_mount+0x10/0x10 [ 1354.854657] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1354.855071] do_syscall_64+0x3f/0x90 [ 1354.855354] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1354.855739] RIP: 0033:0x7fae5a88cb19 [ 1354.856012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1354.857278] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1354.857829] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1354.858342] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1354.858849] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1354.859351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.859863] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1354.860390] 06:04:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) 06:04:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x7a00, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:04:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 33) 06:04:05 executing program 4: ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x32}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40084) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1}}, './cgroup/cgroup.procs\x00'}) 06:04:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 12) 06:04:05 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:04:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 34) [ 1367.302557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1367.320699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:04:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 13) 06:04:05 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1367.347870] FAULT_INJECTION: forcing a failure. [ 1367.347870] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.348744] CPU: 0 PID: 8042 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1367.349301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1367.349862] Call Trace: [ 1367.350049] [ 1367.350218] dump_stack_lvl+0xc1/0xf0 [ 1367.350513] should_fail_ex+0x4b4/0x5b0 [ 1367.350817] ? p9_fcall_init+0x97/0x210 [ 1367.351120] should_failslab+0x9/0x20 [ 1367.351403] __kmem_cache_alloc_node+0x66/0x310 [ 1367.351748] ? p9_fcall_init+0x97/0x210 [ 1367.352041] ? kasan_set_track+0x25/0x30 [ 1367.352342] ? p9_fcall_init+0x97/0x210 [ 1367.352632] __kmalloc+0x4d/0x160 [ 1367.352898] p9_fcall_init+0x97/0x210 [ 1367.353189] p9_tag_alloc+0x20c/0x830 [ 1367.353476] ? __pfx_p9_tag_alloc+0x10/0x10 [ 1367.353800] ? __pfx_perf_trace_lock+0x10/0x10 [ 1367.354150] p9_client_prepare_req+0x17b/0x420 [ 1367.354489] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1367.354874] ? lock_release+0x1e3/0x680 [ 1367.355173] ? __pfx_lock_release+0x10/0x10 [ 1367.355486] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1367.355867] p9_client_rpc+0x1a1/0xcb0 [ 1367.356167] ? __pfx_p9_client_rpc+0x10/0x10 [ 1367.356489] ? __pfx_cgroup_file_poll+0x10/0x10 [ 1367.356832] ? kernfs_fop_poll+0x171/0x200 [ 1367.357148] ? __pfx_kernfs_fop_poll+0x10/0x10 [ 1367.357480] ? p9_fd_poll+0x1ec/0x2d0 [ 1367.357776] ? p9_fd_create+0x35b/0x540 [ 1367.358072] ? __pfx_p9_fd_create+0x10/0x10 [ 1367.358406] p9_client_create+0xb5b/0x1260 [ 1367.358730] ? __pfx_p9_client_create+0x10/0x10 [ 1367.359087] ? kasan_save_stack+0x32/0x50 [ 1367.359393] ? v9fs_session_init+0xec/0x17b0 [ 1367.359719] ? lockdep_init_map_type+0x21e/0x7e0 [ 1367.360070] ? __kasan_kmalloc+0x7f/0x90 [ 1367.360374] ? __raw_spin_lock_init+0x3a/0x110 [ 1367.360720] v9fs_session_init+0x1e0/0x17b0 [ 1367.361053] ? __pfx_v9fs_session_init+0x10/0x10 [ 1367.361399] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1367.361783] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1367.362138] ? v9fs_mount+0x9e/0xbd0 [ 1367.362424] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1367.362832] v9fs_mount+0xbd/0xbd0 [ 1367.363128] ? __pfx_v9fs_mount+0x10/0x10 [ 1367.363431] ? cap_capable+0x1be/0x220 [ 1367.363734] ? __pfx_v9fs_mount+0x10/0x10 [ 1367.364043] legacy_get_tree+0x109/0x220 [ 1367.364343] vfs_get_tree+0x92/0x360 [ 1367.364633] path_mount+0x133c/0x1e50 [ 1367.364925] ? kasan_quarantine_put+0x81/0x1d0 [ 1367.365265] ? __pfx_path_mount+0x10/0x10 [ 1367.365576] ? putname+0x102/0x140 [ 1367.365841] ? kmem_cache_free+0x10d/0x4d0 [ 1367.366156] ? putname+0x102/0x140 [ 1367.366434] __x64_sys_mount+0x286/0x310 [ 1367.366736] ? __pfx___x64_sys_mount+0x10/0x10 [ 1367.367088] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1367.367469] do_syscall_64+0x3f/0x90 [ 1367.367748] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1367.368124] RIP: 0033:0x7fae5a88cb19 [ 1367.368391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1367.369601] RSP: 002b:00007fae57e02188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1367.370122] RAX: ffffffffffffffda RBX: 00007fae5a99ff60 RCX: 00007fae5a88cb19 [ 1367.370608] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1367.371096] RBP: 00007fae57e021d0 R08: 0000000020000140 R09: 0000000000000000 [ 1367.371584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1367.372069] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1367.372582] 06:04:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x8100000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x926, &(0x7f0000000080)={0x0, 0xe24c, 0x1, 0x1, 0x1c0, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) fcntl$getflags(r1, 0x408) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d027e0f1cb87e0d11032082a9401d13df8c27c8dd4126b9e909aac1a50e90be2751625feae6053be55f4bc88326", @ANYRESHEX=r0, @ANYBLOB="8f77f8646e6f3dcb76d0822032fa584dfbb9058a37c9a322b0180bdb7a23186c180f736defc4bbea59efd5391729af3f5064b46287395ae9d7dbf49ad2ba6c62ef2286d780c0", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 06:04:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x8101, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 1367.457449] 9pnet_fd: Insufficient options for proto=fd [ 1367.487448] 9pnet_fd: Insufficient options for proto=fd [ 1367.529749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1367.537807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:04:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x9000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:19 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:04:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x80089203, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,@\x00\x00\x00o9', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 06:04:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0xce, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000180)=0x80) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="51f70511b70fd39d2e2f66696c0880e27001fb869937873f65a2e9f0e9dbe95d7716d708df62bcd3c20d294c7bd22f31fd194ec6eaf9d6"]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000300)={{}, {0xffffffffffffffff}, 0x0, 0x3}) fchmod(r6, 0x40) sendfile(r5, r4, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() r7 = openat$incfs(r3, &(0x7f0000000200)='.log\x00', 0x500, 0x1) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40103d0b, &(0x7f0000000240)={0x1, 0x9}) pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x6086c0, 0x52) 06:04:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 14) 06:04:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 35) 06:04:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xa90b, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:04:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x9, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1381.472430] FAULT_INJECTION: forcing a failure. [ 1381.472430] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.473385] CPU: 1 PID: 8068 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1381.474064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1381.474746] Call Trace: [ 1381.474974] [ 1381.475196] dump_stack_lvl+0xc1/0xf0 [ 1381.475549] should_fail_ex+0x4b4/0x5b0 [ 1381.475907] should_failslab+0x9/0x20 [ 1381.476255] __kmem_cache_alloc_node+0x66/0x310 [ 1381.476661] ? v9fs_mount+0x9e/0xbd0 [ 1381.476997] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1381.477486] kmalloc_trace+0x26/0xc0 [ 1381.477810] v9fs_mount+0x9e/0xbd0 [ 1381.478131] ? __pfx_v9fs_mount+0x10/0x10 [ 1381.478411] ? cap_capable+0x1be/0x220 [ 1381.478759] ? __pfx_v9fs_mount+0x10/0x10 [ 1381.479135] legacy_get_tree+0x109/0x220 [ 1381.479487] vfs_get_tree+0x92/0x360 [ 1381.479836] path_mount+0x133c/0x1e50 [ 1381.480190] ? kasan_quarantine_put+0x81/0x1d0 [ 1381.480589] ? __pfx_path_mount+0x10/0x10 [ 1381.480963] ? putname+0x102/0x140 [ 1381.481275] ? kmem_cache_free+0x10d/0x4d0 [ 1381.481649] ? putname+0x102/0x140 [ 1381.481897] __x64_sys_mount+0x286/0x310 [ 1381.482262] ? __pfx___x64_sys_mount+0x10/0x10 [ 1381.482672] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1381.483137] do_syscall_64+0x3f/0x90 [ 1381.483466] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1381.483927] RIP: 0033:0x7fc04a61bb19 [ 1381.484241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1381.485714] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1381.486345] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1381.486931] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1381.487536] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1381.488135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1381.488738] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1381.489346] 06:04:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 36) [ 1381.536920] 9pnet_fd: Insufficient options for proto=fd [ 1381.539002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1381.557318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1381.559923] 9pnet_fd: Insufficient options for proto=fd 06:04:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 15) 06:04:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 37) 06:04:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x10000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:19 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:04:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs/file0/file0\x00', 0x2002, 0x102) 06:04:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:04:19 executing program 4: pipe(&(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1381.772478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:04:19 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) [ 1381.790750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:04:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = creat(&(0x7f0000000140)='./file1\x00', 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x80, 0x0, 0x1, 0x1, 0x0, 0xe771, 0x11200, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x89, 0x100000000, 0x1ff, 0x2, 0x1f800000000, 0x3, 0x8, 0x0, 0x200, 0x0, 0x2}, r3, 0xffffffffffffffff, r2, 0x8) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) 06:04:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x20000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x27, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 16) 06:04:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 38) 06:04:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x30000, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:04:33 executing program 4: mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)) 06:04:33 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:04:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x20100000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000180)={0x0, 0xfb, 0x82, 0x3, 0x81, "b2a53e7ea2796df66fe2a434838a04ef", "c8caad05cfa5b1fdf8d39650150923d9da803acb65b5de02ab6a9b6dec8bdfdccb602e17a3b57d90d7d6ef107586008918e0519f20a5199d52604af9b93f7b15c1c77b0d22275004903d3ef7258d488c76a90c996dbbc01558c7cf248f581cd470352dfbb7375ce216469ee36a"}, 0x82, 0x0) getpid() pidfd_open(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c77667207db646e6f3d4a2ec7b57270c0a8fdd6d2dda21f87ac2ac3fe6f9853587ef2e9e0ab62f33f87e2de087c1240669cf7ccb958d3980f946d51de97c03d019384d6375df9b1e6abce320eb359adf13ec8417f982d7a3c09bdd433bf3eb84f3cccfb02f809a4833f065e0c245d71a53fe8c2db7fd1799da0ff0411da54bb32620e7e16468f6664", @ANYRESHEX=r2, @ANYBLOB=',\x00']) stat(&(0x7f0000000240)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)) openat(0xffffffffffffff9c, 0x0, 0x610041, 0x1a1) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) [ 1395.429795] FAULT_INJECTION: forcing a failure. [ 1395.429795] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.430684] CPU: 0 PID: 8121 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1395.431305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1395.431839] Call Trace: [ 1395.432023] [ 1395.432187] dump_stack_lvl+0xc1/0xf0 [ 1395.432472] should_fail_ex+0x4b4/0x5b0 [ 1395.432763] should_failslab+0x9/0x20 [ 1395.433030] __kmem_cache_alloc_node+0x66/0x310 [ 1395.433364] ? kasan_save_stack+0x32/0x50 [ 1395.433651] ? v9fs_session_init+0xab/0x17b0 [ 1395.433963] ? __kasan_kmalloc+0x7f/0x90 [ 1395.434250] ? v9fs_mount+0x9e/0xbd0 [ 1395.434518] ? v9fs_session_init+0xab/0x17b0 [ 1395.434835] __kmalloc_node_track_caller+0x4e/0x160 [ 1395.435174] kstrdup+0x3f/0x80 [ 1395.435433] v9fs_session_init+0xab/0x17b0 [ 1395.435738] ? __kmem_cache_alloc_node+0x20b/0x310 [ 1395.436131] ? __pfx_lock_release+0x10/0x10 [ 1395.436438] ? __pfx_v9fs_session_init+0x10/0x10 [ 1395.436780] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1395.437127] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1395.437472] ? v9fs_mount+0x9e/0xbd0 [ 1395.437730] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1395.438125] v9fs_mount+0xbd/0xbd0 [ 1395.438390] ? __pfx_v9fs_mount+0x10/0x10 [ 1395.438667] ? cap_capable+0x1be/0x220 [ 1395.438963] ? __pfx_v9fs_mount+0x10/0x10 [ 1395.439252] legacy_get_tree+0x109/0x220 [ 1395.439542] vfs_get_tree+0x92/0x360 [ 1395.439824] path_mount+0x133c/0x1e50 [ 1395.440144] ? kasan_quarantine_put+0x81/0x1d0 [ 1395.440478] ? __pfx_path_mount+0x10/0x10 [ 1395.440755] ? putname+0x102/0x140 [ 1395.441020] ? kmem_cache_free+0x10d/0x4d0 [ 1395.441306] ? putname+0x102/0x140 [ 1395.441582] __x64_sys_mount+0x286/0x310 [ 1395.441875] ? __pfx___x64_sys_mount+0x10/0x10 [ 1395.442208] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1395.442581] do_syscall_64+0x3f/0x90 [ 1395.442853] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1395.443214] RIP: 0033:0x7fc04a61bb19 [ 1395.443475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1395.444650] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1395.445161] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1395.445638] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1395.446114] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1395.446588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1395.447060] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1395.447566] [ 1395.448607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1395.458399] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1395.466902] 9pnet_fd: Insufficient options for proto=fd [ 1395.476360] 9pnet_fd: Insufficient options for proto=fd 06:04:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x34000, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:04:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x27000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:33 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xc0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 39) 06:04:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) accept$inet6(r0, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1395.615391] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1395.639384] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1395.703425] 9pnet_fd: Insufficient options for proto=fd [ 1395.755206] 9pnet_fd: Insufficient options for proto=fd 06:04:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x80000, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:04:46 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:04:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) 06:04:46 executing program 4: prlimit64(0x0, 0xb, &(0x7f00000001c0)={0x5000, 0x1}, &(0x7f0000000200)) prlimit64(0xffffffffffffffff, 0xf, 0x0, &(0x7f0000000240)) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)={0x0, 0xfb, 0x2d, 0x0, 0x9, "94c1134c6bb02e3e47438b7a660a47f0", "1a28f407baba162f8b92f9cbc6d40eb40b7d48a9aa803b13"}, 0x2d, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) prlimit64(r0, 0x6, &(0x7f0000000280)={0xec60, 0x7}, &(0x7f00000002c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x9) 06:04:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x7f510100, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 40) 06:04:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x40e, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 17) 06:04:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x204282, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:04:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 18) [ 1408.740185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1408.761922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:04:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x89000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1408.800476] FAULT_INJECTION: forcing a failure. [ 1408.800476] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.801281] CPU: 1 PID: 8178 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1408.801816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1408.802350] Call Trace: [ 1408.802531] [ 1408.802689] dump_stack_lvl+0xc1/0xf0 [ 1408.802961] should_fail_ex+0x4b4/0x5b0 [ 1408.803252] should_failslab+0x9/0x20 [ 1408.803525] __kmem_cache_alloc_node+0x66/0x310 [ 1408.803853] ? kasan_save_stack+0x32/0x50 [ 1408.804142] ? v9fs_session_init+0xec/0x17b0 [ 1408.804453] ? v9fs_session_init+0xec/0x17b0 [ 1408.804759] __kmalloc_node_track_caller+0x4e/0x160 [ 1408.805107] kstrdup+0x3f/0x80 [ 1408.805361] v9fs_session_init+0xec/0x17b0 [ 1408.805683] ? __pfx_lock_release+0x10/0x10 [ 1408.805987] ? __pfx_v9fs_session_init+0x10/0x10 [ 1408.806335] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1408.806799] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1408.807152] ? v9fs_mount+0x9e/0xbd0 [ 1408.807445] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1408.807849] v9fs_mount+0xbd/0xbd0 [ 1408.808118] ? __pfx_v9fs_mount+0x10/0x10 [ 1408.808438] ? cap_capable+0x1be/0x220 [ 1408.808744] ? __pfx_v9fs_mount+0x10/0x10 [ 1408.809067] legacy_get_tree+0x109/0x220 [ 1408.809381] vfs_get_tree+0x92/0x360 [ 1408.809672] path_mount+0x133c/0x1e50 [ 1408.809961] ? kasan_quarantine_put+0x81/0x1d0 [ 1408.810301] ? __pfx_path_mount+0x10/0x10 [ 1408.810607] ? putname+0x102/0x140 [ 1408.810885] ? kmem_cache_free+0x10d/0x4d0 [ 1408.811217] ? putname+0x102/0x140 [ 1408.811503] __x64_sys_mount+0x286/0x310 [ 1408.811818] ? __pfx___x64_sys_mount+0x10/0x10 [ 1408.812180] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1408.812580] do_syscall_64+0x3f/0x90 [ 1408.812858] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1408.813238] RIP: 0033:0x7fc04a61bb19 [ 1408.813509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1408.814765] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1408.815281] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1408.815800] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1408.816323] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1408.816846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1408.817372] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1408.817903] 06:04:58 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:04:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any}, {@access_client}, {@access_uid={'access', 0x3d, r1}}, {@afid={'afid', 0x3d, 0x3f}}, {@msize={'msize', 0x3d, 0x1}}, {}, {@fscache}, {@mmap}, {@cache_loose}, {@access_uid={'access', 0x3d, r2}}]}}) 06:04:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x8cffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) io_cancel(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000280)="e767d81b58b988112b9d0f528cbe39cb72e3a16ca32abdd7fda61dae09720dec4ec9127e4b002aff6d6afcf53f3ffaae23971d51dd3c6e0a7617647d3a21d382dacde4d96eb5ae8018fbaecfe231f022ac33ba21e4d37119ae4dd45dce1f4f11e1b8e59ecfac000e014835ec3eacb4c253f4244379a7038eb9de57e5b49d7c2d5a869a9b8b7ee1523e6e424947fe7bd74ebcddbd9abf73742f3ffb428714aae409bbe78e9d9e4e12cba52385793dce2f2b476130edca725aed8670c441a83b07bad606d2ec3c86ec2bf54356", 0xcc, 0xa4, 0x0, 0x2, r0}, &(0x7f00000003c0)) getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000200), 0x80, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3d, 0x21, 0x1, 0x1, 0x0, 0x1, 0x42001, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xb89, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4a01c, 0x2, 0x3, 0x0, 0x7, 0x34d7, 0xbb34, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0x8, r2, 0x9) pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) r3 = getpid() process_vm_readv(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000240), 0x0, 0x0) fcntl$setown(r2, 0x8, r3) 06:04:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x700, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 41) 06:04:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x400300, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:04:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 19) 06:04:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000080)) [ 1420.603345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:04:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x810, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1420.630738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:04:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 20) 06:04:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xaf010000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:04:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 42) 06:04:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xe0ffff, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:04:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 21) 06:04:58 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:04:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) pidfd_send_signal(r2, 0x26, &(0x7f0000000180)={0x8, 0x8ad8, 0x800}, 0x0) 06:04:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x900, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1420.814739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1420.829619] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:04:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 22) [ 1420.899005] FAULT_INJECTION: forcing a failure. [ 1420.899005] name failslab, interval 1, probability 0, space 0, times 0 [ 1420.899835] CPU: 1 PID: 8239 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1420.900361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1420.900907] Call Trace: [ 1420.901087] [ 1420.901242] dump_stack_lvl+0xc1/0xf0 [ 1420.901516] should_fail_ex+0x4b4/0x5b0 [ 1420.901800] should_failslab+0x9/0x20 [ 1420.902069] __kmem_cache_alloc_node+0x66/0x310 [ 1420.902390] ? find_held_lock+0x2c/0x110 06:04:58 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:04:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xc0ed0000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1420.902685] ? p9_client_create+0xb3/0x1260 [ 1420.903169] ? __kmem_cache_alloc_node+0x20b/0x310 [ 1420.903517] kmalloc_trace+0x26/0xc0 [ 1420.903774] p9_client_create+0xb3/0x1260 [ 1420.904067] ? __pfx_p9_client_create+0x10/0x10 [ 1420.904389] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1420.904723] ? kasan_save_stack+0x32/0x50 [ 1420.905007] ? v9fs_session_init+0xec/0x17b0 [ 1420.905307] ? lockdep_init_map_type+0x21e/0x7e0 [ 1420.905638] ? __kasan_kmalloc+0x7f/0x90 [ 1420.905919] ? __raw_spin_lock_init+0x3a/0x110 [ 1420.906238] v9fs_session_init+0x1e0/0x17b0 [ 1420.906551] ? __pfx_v9fs_session_init+0x10/0x10 [ 1420.906874] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1420.907235] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1420.907579] ? v9fs_mount+0x9e/0xbd0 [ 1420.907846] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1420.908246] v9fs_mount+0xbd/0xbd0 [ 1420.908514] ? __pfx_v9fs_mount+0x10/0x10 [ 1420.908812] ? cap_capable+0x1be/0x220 [ 1420.909115] ? __pfx_v9fs_mount+0x10/0x10 [ 1420.909421] legacy_get_tree+0x109/0x220 [ 1420.909727] vfs_get_tree+0x92/0x360 [ 1420.910013] path_mount+0x133c/0x1e50 [ 1420.910321] ? kasan_quarantine_put+0x81/0x1d0 [ 1420.910669] ? __pfx_path_mount+0x10/0x10 [ 1420.910975] ? putname+0x102/0x140 [ 1420.911248] ? kmem_cache_free+0x10d/0x4d0 [ 1420.911570] ? putname+0x102/0x140 [ 1420.911848] __x64_sys_mount+0x286/0x310 [ 1420.912157] ? __pfx___x64_sys_mount+0x10/0x10 [ 1420.912506] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1420.912894] do_syscall_64+0x3f/0x90 [ 1420.913175] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1420.913558] RIP: 0033:0x7fc04a61bb19 [ 1420.913830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1420.915074] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1420.915613] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1420.916114] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1420.916779] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1420.917442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1420.918047] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1420.918573] 06:04:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 43) [ 1420.967081] FAULT_INJECTION: forcing a failure. [ 1420.967081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1420.968246] CPU: 1 PID: 8246 Comm: syz-executor.7 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1420.968925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1420.969613] Call Trace: [ 1420.969851] [ 1420.970012] dump_stack_lvl+0xc1/0xf0 [ 1420.970293] should_fail_ex+0x4b4/0x5b0 [ 1420.970576] _copy_from_user+0x30/0xf0 [ 1420.970852] kstrtouint_from_user+0xb0/0x170 [ 1420.971171] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1420.971539] ? lock_acquire+0x19a/0x4c0 [ 1420.971818] ? ksys_write+0x122/0x250 [ 1420.972092] proc_fail_nth_write+0x7d/0x270 [ 1420.972398] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1420.972743] ? lock_is_held_type+0x9f/0x120 [ 1420.973044] vfs_write+0x2b9/0xda0 [ 1420.973292] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1420.973638] ? __pfx_vfs_write+0x10/0x10 [ 1420.973918] ? __virt_addr_valid+0xe3/0x340 [ 1420.974228] ? __fget_files+0x267/0x480 [ 1420.974526] ksys_write+0x122/0x250 [ 1420.974782] ? __pfx_ksys_write+0x10/0x10 [ 1420.975075] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1420.975435] do_syscall_64+0x3f/0x90 [ 1420.975719] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1420.976081] RIP: 0033:0x7fae5a83f5ff [ 1420.976339] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1420.977556] RSP: 002b:00007fae57e02170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1420.978103] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fae5a83f5ff [ 1420.978619] RDX: 0000000000000001 RSI: 00007fae57e021e0 RDI: 0000000000000005 [ 1420.979128] RBP: 00007fae57e021d0 R08: 0000000000000000 R09: 0000000000000000 [ 1420.979651] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1420.980162] R13: 00007fffd7312a3f R14: 00007fae57e02300 R15: 0000000000022000 [ 1420.980685] 06:05:11 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:05:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xf6ffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xf0ffff, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:05:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xe04, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() recvfrom(r0, &(0x7f00000001c0)=""/47, 0x2f, 0x2140, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x4}}, 0x80) pidfd_open(0x0, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r4, &(0x7f0000000040)='projid_map\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r5) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 06:05:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 23) 06:05:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:05:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x494202, 0x1e4) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './cgroup/cgroup.procs/file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) write$P9_RSTATu(r3, &(0x7f0000000200)={0x5c, 0x7d, 0x1, {{0x0, 0x43, 0xdd, 0x8, {0x40, 0x1, 0x6}, 0x40000000, 0x80, 0x81, 0x1, 0x5, 'wfdno', 0x6, '{\\.\\&!', 0x5, '+-(#]'}, 0x4, '#/\xe0%', r4, 0xffffffffffffffff, r5}}, 0x5c) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r2, 0x0, r0, 0x3}) 06:05:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xffffff8c, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1433.531412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1433.550581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1433.551932] 9pnet_fd: Insufficient options for proto=fd 06:05:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 24) [ 1433.610097] FAULT_INJECTION: forcing a failure. [ 1433.610097] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.610947] CPU: 0 PID: 8281 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1433.611495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1433.612076] Call Trace: [ 1433.612275] [ 1433.612446] dump_stack_lvl+0xc1/0xf0 [ 1433.612746] should_fail_ex+0x4b4/0x5b0 [ 1433.613056] should_failslab+0x9/0x20 [ 1433.613339] __kmem_cache_alloc_node+0x66/0x310 [ 1433.613690] ? match_token+0x361/0x570 [ 1433.613977] ? p9_client_create+0x574/0x1260 [ 1433.614312] ? p9_client_create+0x574/0x1260 [ 1433.614643] __kmalloc_node_track_caller+0x4e/0x160 [ 1433.615152] kmemdup_nul+0x36/0xb0 [ 1433.615451] p9_client_create+0x574/0x1260 [ 1433.615789] ? __pfx_p9_client_create+0x10/0x10 [ 1433.616128] ? kasan_save_stack+0x32/0x50 [ 1433.616434] ? v9fs_session_init+0xec/0x17b0 [ 1433.616774] ? lockdep_init_map_type+0x21e/0x7e0 [ 1433.617132] ? __kasan_kmalloc+0x7f/0x90 [ 1433.617446] ? __raw_spin_lock_init+0x3a/0x110 [ 1433.617793] v9fs_session_init+0x1e0/0x17b0 [ 1433.618118] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1433.618556] ? find_held_lock+0x2c/0x110 [ 1433.618876] ? kasan_quarantine_reduce+0x1a1/0x230 [ 1433.619250] ? lock_release+0x1e3/0x680 [ 1433.619545] ? __pfx_v9fs_session_init+0x10/0x10 [ 1433.619901] ? __pfx_lock_release+0x10/0x10 [ 1433.620217] ? put_cpu_partial+0x103/0x1b0 [ 1433.620537] ? put_cpu_partial+0x103/0x1b0 [ 1433.620861] ? qlist_free_all+0x6d/0x1a0 [ 1433.621176] ? kasan_quarantine_reduce+0x1d0/0x230 [ 1433.621553] v9fs_mount+0xbd/0xbd0 [ 1433.621843] ? __pfx_v9fs_mount+0x10/0x10 [ 1433.622157] ? cap_capable+0x1be/0x220 [ 1433.622469] ? __pfx_v9fs_mount+0x10/0x10 [ 1433.622789] legacy_get_tree+0x109/0x220 [ 1433.623106] vfs_get_tree+0x92/0x360 [ 1433.623398] path_mount+0x133c/0x1e50 [ 1433.623705] ? kasan_quarantine_put+0x81/0x1d0 [ 1433.624062] ? __pfx_path_mount+0x10/0x10 [ 1433.624378] ? putname+0x102/0x140 [ 1433.624653] ? kmem_cache_free+0x10d/0x4d0 [ 1433.624982] ? putname+0x102/0x140 [ 1433.625271] __x64_sys_mount+0x286/0x310 [ 1433.625592] ? __pfx___x64_sys_mount+0x10/0x10 [ 1433.625954] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1433.626362] do_syscall_64+0x3f/0x90 [ 1433.626656] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1433.627041] RIP: 0033:0x7fc04a61bb19 [ 1433.627316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1433.628578] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1433.629135] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1433.629651] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1433.630170] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1433.630681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1433.631187] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1433.631729] 06:05:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x2, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:05:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xfffffff6, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1008, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:11 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) [ 1433.735746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1433.737957] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:05:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:05:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) 06:05:25 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:05:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77821d00003d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x0, 0x10) 06:05:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1020, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:05:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 25) 06:05:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x7, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:05:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xedc000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x8, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1447.581300] 9pnet_fd: Insufficient options for proto=fd [ 1447.590740] 9pnet_fd: Insufficient options for proto=fd 06:05:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 26) [ 1447.631030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1447.638280] perf: interrupt took too long (3284 > 3235), lowering kernel.perf_event_max_sample_rate to 60000 06:05:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1447.649640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1447.679212] perf: interrupt took too long (4129 > 4105), lowering kernel.perf_event_max_sample_rate to 48000 [ 1447.708860] FAULT_INJECTION: forcing a failure. [ 1447.708860] name failslab, interval 1, probability 0, space 0, times 0 [ 1447.710573] CPU: 0 PID: 8328 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1447.711616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1447.712975] Call Trace: [ 1447.713432] [ 1447.713770] dump_stack_lvl+0xc1/0xf0 [ 1447.714456] should_fail_ex+0x4b4/0x5b0 [ 1447.715029] should_failslab+0x9/0x20 [ 1447.715701] __kmem_cache_alloc_node+0x66/0x310 [ 1447.716394] ? v9fs_session_init+0x1e0/0x17b0 [ 1447.717154] ? parse_opts.part.0+0x8e/0x340 [ 1447.717764] ? vfs_get_tree+0x92/0x360 [ 1447.718454] ? path_mount+0x133c/0x1e50 [ 1447.719025] ? parse_opts.part.0+0x8e/0x340 [ 1447.719795] __kmalloc_node_track_caller+0x4e/0x160 [ 1447.720509] kstrdup+0x3f/0x80 [ 1447.721098] parse_opts.part.0+0x8e/0x340 [ 1447.721685] ? lock_acquire+0x19a/0x4c0 [ 1447.722357] ? __pfx_parse_opts.part.0+0x10/0x10 [ 1447.723023] ? __delete_object+0xb3/0x100 [ 1447.723753] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1447.724576] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1447.725561] ? __pfx_lock_release+0x10/0x10 [ 1447.726160] ? __pfx_lock_release+0x10/0x10 [ 1447.726908] ? __virt_addr_valid+0x102/0x340 [ 1447.727548] p9_fd_create+0x9c/0x540 [ 1447.728227] ? __pfx_p9_fd_create+0x10/0x10 [ 1447.728830] ? verify_cpu+0x54/0x100 [ 1447.729487] ? p9_client_create+0x81c/0x1260 [ 1447.730113] p9_client_create+0x883/0x1260 [ 1447.730870] ? __pfx_p9_client_create+0x10/0x10 [ 1447.731518] ? kasan_save_stack+0x32/0x50 [ 1447.732254] ? v9fs_session_init+0xec/0x17b0 [ 1447.732880] ? lockdep_init_map_type+0x21e/0x7e0 [ 1447.733712] ? __kasan_kmalloc+0x7f/0x90 [ 1447.734295] ? __raw_spin_lock_init+0x3a/0x110 [ 1447.735101] v9fs_session_init+0x1e0/0x17b0 [ 1447.735742] ? __pfx_v9fs_session_init+0x10/0x10 [ 1447.736588] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1447.737349] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1447.738217] ? v9fs_mount+0x9e/0xbd0 [ 1447.738778] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1447.739567] v9fs_mount+0xbd/0xbd0 [ 1447.740119] ? __pfx_v9fs_mount+0x10/0x10 [ 1447.740717] ? cap_capable+0x1be/0x220 [ 1447.741316] ? __pfx_v9fs_mount+0x10/0x10 [ 1447.741916] legacy_get_tree+0x109/0x220 [ 1447.742503] vfs_get_tree+0x92/0x360 [ 1447.743063] path_mount+0x133c/0x1e50 [ 1447.743637] ? kasan_quarantine_put+0x81/0x1d0 [ 1447.744322] ? __pfx_path_mount+0x10/0x10 [ 1447.744917] ? putname+0x102/0x140 [ 1447.745434] ? kmem_cache_free+0x10d/0x4d0 [ 1447.746047] ? putname+0x102/0x140 [ 1447.746592] __x64_sys_mount+0x286/0x310 [ 1447.747187] ? __pfx___x64_sys_mount+0x10/0x10 [ 1447.747867] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1447.748620] do_syscall_64+0x3f/0x90 [ 1447.749165] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1447.749887] RIP: 0033:0x7fc04a61bb19 [ 1447.750409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1447.752763] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1447.753785] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1447.754737] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1447.755689] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1447.756664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1447.757614] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1447.758620] 06:05:39 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:05:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x9, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:05:39 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './cgroup/cgroup.procs\x00'}) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f0000000280)={0x9, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x80402, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="a47472616e733d6664327266646e6f3da4137c03054f02845564a777aab3b0ed3dbc8d8ffb251df24678b73319cf123a6974fef56292964a037572fd16c3b5a8c61a2d57caa264236c0d875b5fde1bae5730191cbec2efd13a78bbd19420ea36cbd574340f585cba405a17bc104c7edfa1c602162704a0ab9b18287e363ebf2aba9fbf2f07205cb06a1ccfd11d39900a93b12153e45d2e555213d32fba9494807a1194829eb0a7c9de49396ff82fe729f324bed3ac6bd50482e020e62db171d5b8439ca17f96fa29ee063710869db5c9a4f24260a2b4", @ANYRESHEX=r1, @ANYBLOB="000000008d1900e4701860b899ecffcb7f327649d0b8a7e9d5ab5c2a5269d87544052ffbe00642aa2eb91f27df696033c43f7646071e6cc0112985e3d4ba70b34d313efbf0f517b0d8d5ebdee0b37cb8f30ffb2d0abb402a8e5f9f9c0c4e97604b66fa83efef3fa143e5c103311c6253efd9c90bb1e42f7eb311e6ea9d7e23e63f5c6113afed03fed8c0e86cc39af61fe3f297853040327e14b8c39e5d5e39f4d7b9804acd5bb3dd4118d865e6b4bc22fb1750ce917a979a447a3b01e5827aacda", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d00000000000000063d", @ANYRESHEX=r2, @ANYBLOB=',wfd~o=', @ANYRESHEX=r2, @ANYBLOB=',nodevmap,dfltgid=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000,cache=none,noextend,hash,uid>', @ANYRESDEC=0xee01, @ANYBLOB=',audit,\x00']) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0xffffffff, 0x210100) sendfile(r4, r5, &(0x7f00000001c0)=0x7, 0x0) openat(r2, &(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x240000, 0x1c0) 06:05:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 27) 06:05:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2010, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x3000000, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:05:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x8000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) [ 1461.477627] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:05:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xa, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1461.482694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:05:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:05:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xb, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:05:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2700, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 28) [ 1461.697841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:05:39 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000180)="6853bcd97de984040281608b6c943d71be8a3494a0adb7049c1d7b2400b0c69262cc6cd91b0584d125dfff237696a34da2546b2d8e53435bb960c707f239dee978c014ba29d190ff254924ed7161cef20fb4f1d2250a8b2df858627a47b8436c2e1770657734b9d349a735062e958af07036dfa59454b2e2404816715ef0fe6ee19706d57cf2c2a2154504374204d3954d09e5fad12e290f220a6d53b94d7149890f27407c3c5a68334cf570abb503902c99b963a40f27d6e155ccba5e7418b6cbcdcf9270642fc303976bcb9628b1330c18bef372cca4c1209e33b78a45f868cde890c8") ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='^-+\x00') getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) [ 1461.722574] FAULT_INJECTION: forcing a failure. [ 1461.722574] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.723388] CPU: 0 PID: 8377 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1461.723955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1461.724535] Call Trace: [ 1461.724727] [ 1461.724898] dump_stack_lvl+0xc1/0xf0 [ 1461.725191] should_fail_ex+0x4b4/0x5b0 [ 1461.725497] should_failslab+0x9/0x20 [ 1461.725780] __kmem_cache_alloc_node+0x66/0x310 [ 1461.726120] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1461.726548] ? p9_fd_create+0x17f/0x540 06:05:39 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) [ 1461.726864] kmalloc_trace+0x26/0xc0 [ 1461.727282] p9_fd_create+0x17f/0x540 [ 1461.727572] ? __pfx_p9_fd_create+0x10/0x10 [ 1461.727895] ? verify_cpu+0x54/0x100 [ 1461.728193] ? p9_client_create+0x81c/0x1260 [ 1461.728528] p9_client_create+0x883/0x1260 [ 1461.728854] ? __pfx_p9_client_create+0x10/0x10 [ 1461.729200] ? kasan_save_stack+0x32/0x50 [ 1461.729509] ? v9fs_session_init+0xec/0x17b0 [ 1461.729842] ? lockdep_init_map_type+0x21e/0x7e0 [ 1461.730191] ? __kasan_kmalloc+0x7f/0x90 [ 1461.730497] ? __raw_spin_lock_init+0x3a/0x110 [ 1461.730847] v9fs_session_init+0x1e0/0x17b0 [ 1461.731175] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1461.731571] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1461.731961] ? __pfx_v9fs_session_init+0x10/0x10 [ 1461.732316] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1461.732703] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1461.733064] ? v9fs_mount+0x9e/0xbd0 [ 1461.733348] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1461.733757] v9fs_mount+0xbd/0xbd0 [ 1461.734035] ? __pfx_v9fs_mount+0x10/0x10 [ 1461.734347] ? cap_capable+0x1be/0x220 [ 1461.734651] ? __pfx_v9fs_mount+0x10/0x10 [ 1461.734965] legacy_get_tree+0x109/0x220 [ 1461.735275] vfs_get_tree+0x92/0x360 [ 1461.735569] path_mount+0x133c/0x1e50 [ 1461.735866] ? kasan_quarantine_put+0x81/0x1d0 [ 1461.736219] ? __pfx_path_mount+0x10/0x10 [ 1461.736531] ? putname+0x102/0x140 [ 1461.736802] ? kmem_cache_free+0x10d/0x4d0 [ 1461.737119] ? putname+0x102/0x140 [ 1461.737400] __x64_sys_mount+0x286/0x310 [ 1461.737710] ? __pfx___x64_sys_mount+0x10/0x10 [ 1461.738055] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1461.738441] do_syscall_64+0x3f/0x90 [ 1461.738724] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1461.739095] RIP: 0033:0x7fc04a61bb19 [ 1461.739365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1461.740622] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1461.741155] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1461.741660] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1461.742156] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1461.742648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1461.743145] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1461.743673] [ 1461.748771] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:05:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x200000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x10, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:05:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 29) 06:05:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x810000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = getgid() r2 = getgid() r3 = getgid() setresgid(r1, r2, r3) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1000001, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap}, {@afid={'afid', 0x3d, 0x80000000}}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@version_9p2000}, {@mmap}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@cache_none}]}}) 06:05:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x5000000, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:05:54 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:05:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x3f00, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x27, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:05:54 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3a, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r4, &(0x7f0000002640)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16, @ANYBLOB="410d71c717f108b17b5fc0f968c35152c0d4dc2f2fa4e358ed14b6ea682aa0bbb30e7db1a8864bbca8c36833cdb9b51c3b25db64daa8bcc4f7d9", @ANYRESDEC], 0x220) sendfile(r4, r3, 0x0, 0xfffffdef) r5 = creat(&(0x7f0000000140)='./file1\x00', 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) r6 = syz_io_uring_complete(0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = openat$cgroup_devices(r4, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r10 = signalfd(r2, &(0x7f0000000240)={[0x7]}, 0x8) r11 = socket$netlink(0x10, 0x3, 0x9) sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r3, @ANYRES32=r2], 0x68, 0x4004}, 0x4004000) getpid() pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) 06:05:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xde, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1476.900808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:05:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xc000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x13d, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1476.924868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:05:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x900000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 30) 06:05:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:05:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x700, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1477.086586] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1477.096817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1477.108141] FAULT_INJECTION: forcing a failure. [ 1477.108141] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.109692] CPU: 0 PID: 8435 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1477.110716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1477.111748] Call Trace: [ 1477.112095] [ 1477.112423] dump_stack_lvl+0xc1/0xf0 [ 1477.112951] should_fail_ex+0x4b4/0x5b0 [ 1477.113497] ? p9_tag_alloc+0x9c/0x830 [ 1477.114021] should_failslab+0x9/0x20 [ 1477.114535] kmem_cache_alloc+0x61/0x390 [ 1477.115083] ? perf_trace_lock+0xc1/0x480 [ 1477.115664] p9_tag_alloc+0x9c/0x830 [ 1477.116182] ? __pfx_p9_tag_alloc+0x10/0x10 [ 1477.116766] ? perf_trace_lock+0xc1/0x480 [ 1477.117323] ? __pfx_lock_acquire+0x10/0x10 [ 1477.117900] ? find_held_lock+0x2c/0x110 [ 1477.118462] ? __pfx_perf_trace_lock+0x10/0x10 [ 1477.119099] p9_client_prepare_req+0x17b/0x420 [ 1477.119720] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1477.120422] ? lock_release+0x1e3/0x680 [ 1477.120963] ? __pfx_lock_release+0x10/0x10 [ 1477.121543] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1477.122242] p9_client_rpc+0x1a1/0xcb0 [ 1477.122787] ? __pfx_p9_client_rpc+0x10/0x10 [ 1477.123372] ? __pfx_cgroup_file_poll+0x10/0x10 [ 1477.123999] ? kernfs_fop_poll+0x171/0x200 [ 1477.124582] ? __pfx_kernfs_fop_poll+0x10/0x10 [ 1477.125195] ? p9_fd_poll+0x1ec/0x2d0 [ 1477.125738] ? p9_fd_create+0x35b/0x540 [ 1477.126287] ? __pfx_p9_fd_create+0x10/0x10 [ 1477.126909] p9_client_create+0xb5b/0x1260 [ 1477.127508] ? __pfx_p9_client_create+0x10/0x10 [ 1477.128142] ? kasan_save_stack+0x32/0x50 [ 1477.128716] ? v9fs_session_init+0xec/0x17b0 [ 1477.129318] ? lockdep_init_map_type+0x21e/0x7e0 [ 1477.129957] ? __kasan_kmalloc+0x7f/0x90 [ 1477.130525] ? __raw_spin_lock_init+0x3a/0x110 [ 1477.131158] v9fs_session_init+0x1e0/0x17b0 [ 1477.131778] ? __pfx_v9fs_session_init+0x10/0x10 [ 1477.132446] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1477.133155] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1477.133824] ? v9fs_mount+0x9e/0xbd0 [ 1477.134348] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1477.135101] v9fs_mount+0xbd/0xbd0 06:05:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0xedc0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:05:55 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) [ 1477.135603] ? __pfx_v9fs_mount+0x10/0x10 [ 1477.136330] ? cap_capable+0x1be/0x220 [ 1477.136888] ? __pfx_v9fs_mount+0x10/0x10 [ 1477.137451] legacy_get_tree+0x109/0x220 [ 1477.138007] vfs_get_tree+0x92/0x360 [ 1477.138526] path_mount+0x133c/0x1e50 [ 1477.139065] ? kasan_quarantine_put+0x81/0x1d0 [ 1477.139687] ? __pfx_path_mount+0x10/0x10 [ 1477.140263] ? putname+0x102/0x140 [ 1477.140754] ? kmem_cache_free+0x10d/0x4d0 [ 1477.141333] ? putname+0x102/0x140 [ 1477.141852] __x64_sys_mount+0x286/0x310 [ 1477.142420] ? __pfx___x64_sys_mount+0x10/0x10 [ 1477.143057] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1477.143765] do_syscall_64+0x3f/0x90 [ 1477.144286] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1477.144978] RIP: 0033:0x7fc04a61bb19 [ 1477.145469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1477.147706] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1477.148699] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1477.149752] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1477.150652] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1477.151558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1477.152467] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1477.153412] 06:06:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1517f, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:06:08 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:06:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:06:08 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x202000, 0x11) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x7, 0x3, 0x3, 0x0, 0x8, 0x8400a, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x7, 0x2}, 0x10e0a, 0x6, 0x7ff, 0x4, 0xf1fd, 0x8001, 0x1, 0x0, 0x4cf8, 0x0, 0x10000}, 0x0, 0x3, r0, 0x3) sendfile(r2, r1, 0x0, 0xfffffdef) creat(&(0x7f0000000140)='./file1\x00', 0x0) r3 = getpid() perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x81, 0x6, 0x26, 0x7f, 0x0, 0x40, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29a, 0x0, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x0, 0x2, 0x7fffffff, 0x1, 0x373, 0x1, 0x5, 0x0, 0x4, 0x0, 0x2}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) pidfd_open(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) 06:06:08 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_coalesce={0xe, 0x8, 0x4, 0x8, 0x1f, 0x80000000, 0xfff, 0x6, 0x1, 0x9, 0x10000, 0xad47, 0x8, 0x20, 0x2, 0x0, 0x4, 0x332e, 0x9, 0x18000000, 0x6a6c, 0x2, 0x3}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) accept(r2, &(0x7f0000003680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000003700)=0x80) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) r7 = openat$cgroup_pressure(r2, &(0x7f0000003740)='cpu.pressure\x00', 0x2, 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f00000000c0)=[{&(0x7f0000005580)=""/4078, 0xfee}, {&(0x7f0000006580)=""/136, 0x88}, {&(0x7f0000000100)=""/57, 0x39}], 0x3, &(0x7f0000000240), 0xf7, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r9, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003780)=0x0) lstat(&(0x7f00000037c0)='./cgroup/cgroup.procs\x00', &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003880)='./cgroup/cgroup.procs\x00', &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000300)="ae54d7236d0ac733113b0f838180d43a8f75d101a79daeeaaa95a0c5b042cd87", 0x20}], 0x1, &(0x7f0000000440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r3]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r3]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8, 0x40000}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="9eecd6d5fe6a4966ab5e9f2f367649e5cd2f7c099750b8cc0eb6bd8feaf9bb9dc752da303d39bcb53b34b8794683bb6a76acda9a2f627d7a6ca52b446c9591736a8fb719bfac79cb3fd4cf0988d22845b9f35a4deed4210d1da1e2fbb3532fadea981f9a7d200ab413c025055a3ebbe917993fe9e5016421", 0x78}, {&(0x7f00000005c0)="e01b5ba513e935a62860c62934a04f10bc6bcf451517d6e1dfd9ff4c51305d8895566da9ca939c88d8e33ba58c99131f6127712fd478d08823bb58a0c7598a0930da887d10676ecf18a0bea2d074258ebbb4863983c483258c899f30b938584a3463a7ce79c81dd18efcbbbfee97dba037d3131f53b247fe77d83b4fb870e41da4fc1681bf2e3f", 0x87}, {&(0x7f0000000680)="8ac5dcde5f272d93d1905b98278386ff398b1e2278d40ec22fafd6ac2fac80b9c20156f9f8a9df8b8252bc98781db1902fce8a25bde23af506d20085f4fd7f07cc3c9a9ac825b216f903004cf6b6ffcb5bdca15d848919df4898976e10b89d7099b53bcda7482f642c42c08d46d82323f69c9a8aa8ed90dac5774a5404c37cc83cabf73aa5ef579794ebf9c2804e206edc20c964db25369d5fcbcf9627237ef8ebdd35123df1f3cae35671defff8f607cd7363dc704e50362fbe36bdd966198eefec9ba9b92826e6cbe184effeefe4243b3715b1b285ba158807ac7594abd455708dc4c8d0293715df45992f97ac9858b6888686155192a8de4940", 0xfb}, {&(0x7f0000000780)="c6ee806eec4bc24673772358dffe7801c0828a541c7d1cfb177db166ee7e52ea9a82f61142836ca881978b1205a14a1329f93e95d48a7d7a8b555c79d871d9c48f0dd43f1852f65612458652d04ddecb107349c4693e21b318ee0472a2ec22cbb46914c28800fcb4c08f282d65c6eb1a4fed2866c4f18b3633281fca09136877165cdfabd8ce42213414962feef72e9ef3de45b7189d65ea5ced28075688799a0ecce7a75f9d34e5ae09c6a585c2f07512531af8fad7f438a547f990400afe9a7616128287240275a98ff218d6cffdc24b1af2100141309943828cdecbb995274fab4d70d8", 0xe5}, {&(0x7f0000000880)="f1895a9e1e83577385d4a2c1be22506580a4bea9d836b76f8fd3fd42229aa6777804d7b3c2118c91a01e8f47c77655f321fbf534bf4ecd91a17f255ac8420cd8b09db6352b71a4df733ab2b04a9acea10b296604db2372d90fe4b82d2daf2ab44d9e75b02b1f70509dcb5c8caffc", 0x6e}], 0x5, &(0x7f0000000980)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r0, r1, 0xffffffffffffffff]}}], 0x38, 0x8800}}, {{&(0x7f00000009c0)=@file={0x0, './cgroup/cgroup.procs\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000a40)="35f9b53d89bad27a0f63937d00f8cf6203dab83eebf78615a4e41962b2d326ecb76762de4984bc34a00eb6918a83cbf6296c49e853267cff63d7e544902d9d4752be71eb390f115effb84bab4287a67669ad20e8f697e286c3224b6532a026f986e150b8cae2ebfbcf130ef1c75d3e8c16419c4d0fc5c8ac526ead446df87f7d46bcdd01e67ace7c38432a47f8a1a283f1", 0x91}, {&(0x7f0000000b00)="81b39ea2c4787c9a68ee25027b1e32bdf5526af9c3846e7e48e4d372f2c1383241d105351ba3b77f6755bd91860214fb388e22cff457444d54e27cd1df243f7ea402fabf", 0x44}, {&(0x7f0000000b80)="9e3ef3aba5f0fad4e0c8ed45c8a8fe6b35a217b01b3d65b1af0a0d0698d50a9fc04b0325aafd8fd33d088fe8dd2ec80aa193951f1384a25a7041ca2ac79d9b1aa23da711314cb6cf301f9d2ddaaaa014e8304bd4c567c1", 0x57}, {&(0x7f0000000c00)="35d530f7f76c704b34341f9e78cb7bb20d52f86114e78ca6a243fc25a1aaf2992734cb80ac32382d8d357403120f596362a2806fc5cc70bb21", 0x39}, {&(0x7f0000000c40)="29e3d0889d415dc36f99251003b7c0470f39063ed3ac80e1128b38696487d5e97fdde36a57", 0x25}, {&(0x7f0000000c80)="edfd515c0037923cfd79f424bfbb1835e64b14656a43e883b956bd6494f8d8c6affeced4c0c7ed4aea238ccd9219e29a99be369e61491326bfabfdea19d4f44210fc36107daba7268b2429c5f9c8bd96a0d15613645b5cd544b9590e45f326f28caedcea485e7eb09377297b4f0e11a36ca3a6c80a4f5ec2b6df46bc0cfcaa981f2a48a272c392858c6dc8150f8f7c1705259f4803138f8cd90174dd9941e24c0649e7cf592d541e44e874e664608dbd00e924f19f7b0a1228a2", 0xba}], 0x6, &(0x7f0000000dc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x30}}, {{&(0x7f0000000e00)=@file={0x0, './cgroup/cgroup.procs\x00'}, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000000e80)="690f2e654c63fc0e49dc8514539c877157b0db32b5576a27474ae642766046c7a593db7567e9a213c765d231211d233177357c82", 0x34}, {&(0x7f0000000ec0)="8d1f84ab3d98f1d8e0491db746ee2bd0f278d7130679883517c091be828a8dcb44bea692a11baee6d822ee666d06839dfcf64d8cc92ffbe3f7b0777d8f35ba814550e5fe", 0x44}, {&(0x7f0000000f40)="869198feeb3339f4647fbf48d2eb4ee577906be63ab29f490c3a7e8e97b6c579d1438569f7367d5e2a27675497d7945a6541361e36af2d32458e36cd4fbf55d972e2a11a86336295b705a7c70ce052a0a50ba85f881b15c5bf2d", 0x5a}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="ae1be1afcb1fdf3ef74555e058c2ab64a0230b5cfd5051154af81c6a096e7c2451ab5da22b03e9dcd8ecba81171d813a947a01dcd8273049df945181c079ea2b3fcdabfa778c3bd5b8270339c3e691451a44ad08b9edc6408732ac0c2e21eae44e9cadfedd71657f39b683907e7c31d417c318beca8dab02c0ed721d5cc5397e113717adce70", 0x86}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000003080)="ea242c6ff5ff1b6110ac9395afd86a9a0888df9f16eaa6941a3d56bb2e565cb3a3e150786ae785df5cf946b6275092f588b018706cf6f41b497fa50a350e6c1e4063b8a359c6cb10ad5cdf60faeaf3f2e97f5df6a4e7e55489204fc13441c829a3b953c67aa82b25dfced7f003bdf454696e7f9add385b7bafd6ab17a7dfd3a91585342f7ca6bc4683338338b31b042e1163e5e23133e02bef38ae343ebeafdcaff57a8579d425a3fb8a44fee4fdbc4c6f590ba514e620883b0e7f248a96cdd2a158cb8441bd21141694d233934cb577a0cac9a1eda714d73d30d0b81f7e22282ada608fa98eb62aa7c552", 0xeb}, {&(0x7f0000003180)="7c450309866a5b477de451b65e3f300d264efff7e642b856566f27600f4eaf3bdb90660fd208d969a75f4605ae9ba810fadf0ff2b43a930fc9d9081759acbae8f84779ae4db8a4e2738726812f017f9e548cef63ab5bf7407b4a8914a58f4f7513ec87c56569d263", 0x68}, {&(0x7f0000003200)="f90c3be6684c7d0725c6c4baa7244cab61d76235d4c8039011262f4a6bfe91ea2b377d946af058ee02bf2b600784ab3875d3547cdd4354f0abe57201f63ef352d08f49fd329fb01c04e5a4", 0x4b}, {&(0x7f0000003280)="6ae36b8114aae69716c0075d429112ea5007009a7fae2fd4f5fb", 0x1a}], 0xa, &(0x7f0000003380)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}], 0x20, 0x4000040}}, {{&(0x7f00000033c0)=@file={0x1, './cgroup/cgroup.procs\x00'}, 0x6e, &(0x7f0000003640)=[{&(0x7f0000003440)="f2457feb0dee5ad9a347c616a8716ef8cde174591ee17872f46fe21655e28bf8faac17c3bc8ab7f57ae81f8a5873d1ac51af4b0310c595d7f2160415388ce41d", 0x40}, {&(0x7f0000003480)="f1ca9fc27ecc9b629f437517e14cedebd23cdc637866c3b075a21d5d8d8e846f8cb1a8317b2dd741fc95b24a61fe11b3345a68eec57fa6de8fbc1451025406e6c5dcaf613c3f8a011d05b892876ce4e18a9016cf4a5a8a31e25ece265f790806732c215422ce2ade800962e9fb83b7a84e", 0x71}, {&(0x7f0000003500)="06ec5031308a34f124882f79fa898b7563a38a332cb55673103ad013cdd7ebbc38c91fdff09d3da2833e637afb0745e299d4b65fbb593068a0ba18fe52b5896648b842416d212e8a0b89f531f87b6247de27fa00e8ae9ea8f0f0e7bf0465e214fdd42d8bc5faa62dba6727ec1a6d040200ad03ee07a0ebb05e9952789b0479abcc0c0fba531ea428494c1c79ecf1b7d96c1522e6bd35b7ae0c48b27f009b5955ed2591ee83b0abf25de55674552e845947ca1c22f0a5af44ac8d856bb24508fea1a28ee78fabd08ddac70ee4bc", 0xcd}, {&(0x7f0000003600)}], 0x4, &(0x7f0000003940)=[@rights={{0x34, 0x1, 0x1, [r2, r4, r3, r5, r6, r7, r1, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee00, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r12}}}], 0x98, 0x88000}}], 0x5, 0x100) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) 06:06:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x810, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:06:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 31) 06:06:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x7000000, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) [ 1490.526875] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:06:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 32) 06:06:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x15bdd, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1490.556319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:06:08 executing program 4: r0 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x11) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="09000000000000002e2f6367726f8cb7fb71fc8f7d72702e707265637300a92475e0f9093ac7c62a1f9636c64449211fccda8a58bdf603075b00011fd5ccbb3b3509923bad71a281b5e5a4a18c9a6ccadfbb045c7b39e630480a5e64be1833d8815d1ba949"]) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYRESHEX=r1, @ANYRESDEC, @ANYRESHEX=r1, @ANYRES64=r4]) 06:06:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:06:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x9000000, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:06:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x900, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:06:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1876e, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1490.668294] FAULT_INJECTION: forcing a failure. [ 1490.668294] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.669783] CPU: 0 PID: 8484 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1490.670818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1490.671819] Call Trace: [ 1490.672166] [ 1490.672474] dump_stack_lvl+0xc1/0xf0 [ 1490.672998] should_fail_ex+0x4b4/0x5b0 [ 1490.673540] ? p9_fcall_init+0x97/0x210 [ 1490.674057] should_failslab+0x9/0x20 [ 1490.674552] __kmem_cache_alloc_node+0x66/0x310 [ 1490.675161] ? p9_fcall_init+0x97/0x210 [ 1490.675686] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1490.676365] ? p9_fcall_init+0x97/0x210 [ 1490.676915] __kmalloc+0x4d/0x160 [ 1490.677392] p9_fcall_init+0x97/0x210 [ 1490.677914] p9_tag_alloc+0x16a/0x830 [ 1490.678423] ? __pfx_p9_tag_alloc+0x10/0x10 [ 1490.678985] ? perf_trace_lock+0xc1/0x480 [ 1490.679550] ? find_held_lock+0x2c/0x110 [ 1490.680117] ? __pfx_perf_trace_lock+0x10/0x10 [ 1490.680759] p9_client_prepare_req+0x17b/0x420 [ 1490.681374] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1490.682045] ? lock_release+0x1e3/0x680 [ 1490.682585] ? __pfx_lock_release+0x10/0x10 [ 1490.683149] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1490.683832] p9_client_rpc+0x1a1/0xcb0 [ 1490.684367] ? __pfx_p9_client_rpc+0x10/0x10 [ 1490.684969] ? __pfx_cgroup_file_poll+0x10/0x10 [ 1490.685592] ? kernfs_fop_poll+0x171/0x200 [ 1490.686154] ? __pfx_kernfs_fop_poll+0x10/0x10 [ 1490.686754] ? p9_fd_poll+0x1ec/0x2d0 [ 1490.687297] ? p9_fd_create+0x35b/0x540 [ 1490.687835] ? __pfx_p9_fd_create+0x10/0x10 [ 1490.688462] p9_client_create+0xb5b/0x1260 [ 1490.689046] ? __pfx_p9_client_create+0x10/0x10 [ 1490.689670] ? kasan_save_stack+0x32/0x50 [ 1490.690227] ? v9fs_session_init+0xec/0x17b0 [ 1490.690822] ? lockdep_init_map_type+0x21e/0x7e0 [ 1490.691446] ? __kasan_kmalloc+0x7f/0x90 [ 1490.692008] ? __raw_spin_lock_init+0x3a/0x110 [ 1490.692653] v9fs_session_init+0x1e0/0x17b0 [ 1490.693271] ? __pfx_v9fs_session_init+0x10/0x10 [ 1490.693899] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1490.694597] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1490.695228] ? v9fs_mount+0x9e/0xbd0 [ 1490.695741] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1490.696507] v9fs_mount+0xbd/0xbd0 [ 1490.697000] ? __pfx_v9fs_mount+0x10/0x10 [ 1490.697560] ? cap_capable+0x1be/0x220 [ 1490.698114] ? __pfx_v9fs_mount+0x10/0x10 [ 1490.698680] legacy_get_tree+0x109/0x220 [ 1490.699230] vfs_get_tree+0x92/0x360 [ 1490.699755] path_mount+0x133c/0x1e50 [ 1490.700296] ? kasan_quarantine_put+0x81/0x1d0 [ 1490.700917] ? __pfx_path_mount+0x10/0x10 [ 1490.701474] ? putname+0x102/0x140 [ 1490.701956] ? kmem_cache_free+0x10d/0x4d0 [ 1490.702527] ? putname+0x102/0x140 [ 1490.703038] __x64_sys_mount+0x286/0x310 [ 1490.703596] ? __pfx___x64_sys_mount+0x10/0x10 [ 1490.704236] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1490.704945] do_syscall_64+0x3f/0x90 [ 1490.705456] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1490.706144] RIP: 0033:0x7fc04a61bb19 [ 1490.706633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1490.708857] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1490.709823] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1490.710718] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1490.711621] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1490.712520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1490.713415] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1490.714364] 06:06:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:06:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 33) 06:06:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0xa17, 0x9, &(0x7f00000016c0)=[{&(0x7f0000000180)="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", 0x1000, 0x3}, {&(0x7f0000001180)="5ac99678e7248c2749ddcd6502e12716edd1a28332b654a94f923128c4ddbb51b61059b917ac938f8fda22ad51fdb3ddf8c58b5534cbcd3d7982e5bc84c42618fcf2f0d747d0b786a79c1b23ab7154861099efb5905aba3c8b856147df3ea333be3b6a7ceae75b3b597066b19be657253542d214c6ba6016445871d0596c2c730cb8f835987a780062f72c0ce5720225028658892e7a503b0f7eb0536e9d91551c259d28926679f6683551d1f782c01b0db723a1bf1f0cc92a4bab00cbb4508120344a", 0xc3, 0x80000000}, {&(0x7f0000001280)="b46d5b15879acd93d78d2e4798106e92c194e99443840e0b3bc605794b83471f0dbbcc9ffce05a4462205bfff2623e0d889b38c7", 0x34, 0x2}, {&(0x7f00000012c0)="61a72cbaed330b6d3b7522d1af2effc851668ec69ab092405913169e9e0a3594a60b78539b07a72780c8574277b1caa73d8c59ab1523c05097a9e4ce04c87771da4795fc68e5aaaa6e9862d76e4d3698fa7c7977597829549076ae2ac994ceb5c2ae444ed6e5800a95fac0f2fc23a38c11f52b337fbb904973cf477e42f26c13c7fb40db1f63f4edc1f2ffcc1cd50635c55a04ba8e6e74482301424ce98448c0338e54e1dbf95a5c7189c0278cf02eadb733d69724967b2700d43aef4241bf04590922", 0xc3, 0x80}, {&(0x7f00000013c0)="8bc665369537ccb6d89595a4818aeda61bf140bb05d5a8b010f9dbd54ac6c9ca6e01daf56df605cda8f9787df8e8c3175aef1ccb4d9bb80057542809e47826091978cfdff4b4005f931608a4b46c9bf09e210b665a70f8dbd032b19107953e937c59831966bdac4cbfe1d7e4bfd810aa53a3873edcd9c3129453cd967c49625dc2a70525fa", 0x85, 0x9}, {&(0x7f0000001480)="05382fdabf93d95ee2d74adf7a3ba040416119315d7fe8780554e06c13b4a0d1c0a553790aa8b6321beb17d8847d6e6d41395b9db30ec0aa8d49e1fc60e4890de9b4e2d613ec8c8ddc6276286500c2fb58bdf1f8dd433f844cb8ef9bc11a9c8d1aacf43d12734c6906289a8733", 0x6d, 0x4}, {&(0x7f0000001500)="b5fca2d548b27bf25dd9d2b49cf2ac9c1d063f65988d63d99c4b97bba708e276d595417bcb8485fc1ead8b31f17063f15cd57ad05ea348d7c42bb9938ab00b64d679fbe6f59846b8cb0ca5a92a18", 0x4e, 0x800}, {&(0x7f0000001580)="341401721e2c4f392ec82b5053fe6bde8a9d641c46d4", 0x16, 0x6}, {&(0x7f00000015c0)="64e905cb597bad77e09f32550d74ff86303f18d09b2f8c94b578652b01526a66cc26d911c6621710e22709df08bf5b2ac4709de5900c7bf95357ffb83c93148f847da87c74badb219a18e7cb2bd54ff4be75962dfc45cd0617250760652b7f9af1224649e20a8ff8a64c8b51234a85860956d9d0a18f54537107e7ba8dabf801339007c68141253188db9ff060b5ff5d5f315b1943c3546070a4c1e940220f6ad1898d9b5651c794a69bbfc972243c04c09d47f2481193bbbcea54cbfb1d56740a206660f5790afcbab297efe28a823203343a6c6d4052ba68c59f4ea6967d55ef179bb35f0c9ce05d919d4df92160a44335bceec9aaa6f3a819f65420", 0xfd, 0x8}], 0x20, &(0x7f00000017c0)={[{@utf8}, {@shortname_mixed}, {@shortname_lower}, {@utf8}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}], [{@hash}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x39, 0x31, 0x31, 0x36, 0x36, 0x38, 0x35], 0x2d, [0x65, 0x32, 0x63, 0x62], 0x2d, [0x64, 0x39, 0x66, 0x65], 0x2d, [0x39, 0x39, 0x61, 0x34], 0x2d, [0x37, 0x37, 0x38, 0x55, 0x61, 0x36, 0x61, 0x36]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x66, 0x35, 0x34, 0x0, 0x32, 0x66, 0x39], 0x2d, [0x32, 0x36, 0x63, 0x32], 0x2d, [0x64, 0x33, 0x61, 0x1], 0x2d, [0xe, 0x39, 0x34, 0x61], 0x2d, [0x66, 0x30, 0x36, 0x63, 0x65, 0x62, 0x66, 0x38]}}}]}) openat(r1, &(0x7f0000001880)='./cgroup/cgroup.procs\x00', 0x0, 0x195) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) move_mount(r2, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0xffffffffffffff9c, &(0x7f00000019c0)='./cgroup/cgroup.procs\x00', 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c0034dbb9bf6fbd106452fb24e20ac37f392c00d01343f7169549829b5b0d5e90c2b4a5831b71d01da193267bff0ac85abc39b52f0b40276dd8fc39c660873c22edb44275d74f40007bfe8f71d55543aefebea7807fe80ba791dfa4062464b748bba12ca6a0789bbebffafc68f80fd805fdd4da961d3b85bc6f4007673b475e7df45f686fdc073c09000000000000008f00489f505f638b54bab5b8ff31cbbb5153bef954775ab33d5094a0e0903c4795789a5669ce1d22374f558ce940d68fd2"]) 06:06:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2010000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:06:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1876f, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:06:21 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) 06:06:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xa00, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 06:06:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000100)={{0x0, 0x6}, {0x5}, 0x0, 0x3}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) creat(&(0x7f0000000140)='./file1\x00', 0x0) getpid() pidfd_open(0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000100)={{}, {0xffffffffffffffff}, 0x0, 0x3}) fsync(r3) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x400, 0x52) [ 1503.723398] loop4: detected capacity change from 0 to 264192 [ 1503.731132] loop4: detected capacity change from 0 to 264192 06:06:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x2700000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) [ 1503.805399] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:06:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0xb00, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1503.841211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:06:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 34) 06:06:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x7f51010000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:06:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x80000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:06:22 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') pread64(r2, &(0x7f0000000000)=""/55, 0x37, 0x600) memfd_secret(0x80000) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0x1, 0x88, 0x2, 0x0, 0x2, 0x81100, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x91e5, 0x54ec, 0x800, 0x3, 0x4, 0x1, 0x9d18, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r0, 0xa) perf_event_open(0x0, 0x0, 0x1, r1, 0x2) r3 = gettid() ioprio_set$pid(0x2, r3, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) clone3(&(0x7f00000003c0)={0x240000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x41}, &(0x7f0000000240)=""/212, 0xd4, &(0x7f0000000340)=""/48, &(0x7f0000000380)=[r3], 0x1, {r4}}, 0x58) [ 1504.025980] FAULT_INJECTION: forcing a failure. [ 1504.025980] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.027632] CPU: 0 PID: 8532 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230726 #1 [ 1504.028711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1504.029701] Call Trace: [ 1504.030038] [ 1504.030340] dump_stack_lvl+0xc1/0xf0 [ 1504.030852] should_fail_ex+0x4b4/0x5b0 [ 1504.031376] ? p9_fcall_init+0x97/0x210 [ 1504.031892] should_failslab+0x9/0x20 [ 1504.032391] __kmem_cache_alloc_node+0x66/0x310 [ 1504.033000] ? p9_fcall_init+0x97/0x210 [ 1504.033515] ? kasan_set_track+0x25/0x30 [ 1504.034051] ? p9_fcall_init+0x97/0x210 [ 1504.034561] __kmalloc+0x4d/0x160 [ 1504.035020] p9_fcall_init+0x97/0x210 [ 1504.035520] p9_tag_alloc+0x20c/0x830 [ 1504.036034] ? __pfx_p9_tag_alloc+0x10/0x10 [ 1504.036586] ? perf_trace_lock+0xc1/0x480 [ 1504.037125] ? find_held_lock+0x2c/0x110 [ 1504.037661] ? __pfx_perf_trace_lock+0x10/0x10 [ 1504.038266] p9_client_prepare_req+0x17b/0x420 [ 1504.038853] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1504.039491] ? lock_release+0x1e3/0x680 [ 1504.040010] ? __pfx_lock_release+0x10/0x10 [ 1504.040572] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1504.041244] p9_client_rpc+0x1a1/0xcb0 [ 1504.041765] ? __pfx_p9_client_rpc+0x10/0x10 [ 1504.042324] ? __pfx_cgroup_file_poll+0x10/0x10 [ 1504.042923] ? kernfs_fop_poll+0x171/0x200 [ 1504.043491] ? __pfx_kernfs_fop_poll+0x10/0x10 [ 1504.044076] ? p9_fd_poll+0x1ec/0x2d0 [ 1504.044604] ? p9_fd_create+0x35b/0x540 [ 1504.045128] ? __pfx_p9_fd_create+0x10/0x10 [ 1504.045725] p9_client_create+0xb5b/0x1260 [ 1504.046311] ? __pfx_p9_client_create+0x10/0x10 [ 1504.046918] ? kasan_save_stack+0x32/0x50 [ 1504.047457] ? v9fs_session_init+0xec/0x17b0 [ 1504.048026] ? lockdep_init_map_type+0x21e/0x7e0 [ 1504.048641] ? __kasan_kmalloc+0x7f/0x90 [ 1504.049194] ? __raw_spin_lock_init+0x3a/0x110 [ 1504.049811] v9fs_session_init+0x1e0/0x17b0 [ 1504.050400] ? __pfx_v9fs_session_init+0x10/0x10 [ 1504.051017] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1504.051694] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 1504.052311] ? v9fs_mount+0x9e/0xbd0 [ 1504.052834] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1504.053545] v9fs_mount+0xbd/0xbd0 [ 1504.054024] ? __pfx_v9fs_mount+0x10/0x10 [ 1504.054556] ? cap_capable+0x1be/0x220 [ 1504.055077] ? __pfx_v9fs_mount+0x10/0x10 [ 1504.055611] legacy_get_tree+0x109/0x220 [ 1504.056137] vfs_get_tree+0x92/0x360 [ 1504.056645] path_mount+0x133c/0x1e50 [ 1504.057157] ? kasan_quarantine_put+0x81/0x1d0 [ 1504.057741] ? __pfx_path_mount+0x10/0x10 [ 1504.058272] ? putname+0x102/0x140 [ 1504.058737] ? kmem_cache_free+0x10d/0x4d0 [ 1504.059295] ? putname+0x102/0x140 [ 1504.059788] __x64_sys_mount+0x286/0x310 [ 1504.060320] ? __pfx___x64_sys_mount+0x10/0x10 [ 1504.060939] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1504.061618] do_syscall_64+0x3f/0x90 [ 1504.062109] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1504.062763] RIP: 0033:0x7fc04a61bb19 [ 1504.063237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1504.065379] RSP: 002b:00007fc047b91188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1504.066293] RAX: ffffffffffffffda RBX: 00007fc04a72ef60 RCX: 00007fc04a61bb19 [ 1504.067150] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000000 [ 1504.067997] RBP: 00007fc047b911d0 R08: 0000000020000140 R09: 0000000000000000 [ 1504.068853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1504.069706] R13: 00007ffc083ed9cf R14: 00007fc047b91300 R15: 0000000000022000 [ 1504.070616] 06:06:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x48000000, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000200000000000000011000000505050505050"], 0x40}}, 0x0) 06:06:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x1008, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1504.176850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1504.189861] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 06:06:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 06:06:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 35) VM DIAGNOSIS: 06:11:32 Registers: info registers vcpu 0 RAX=000000000069877f RBX=0000000000000000 RCX=ffffffff8459066e RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8128e0f5 RBP=dffffc0000000000 RSP=ffffffff85407e10 R8 =0000000000000001 R9 =ffffed100d9c6a00 R10=ffff88806ce35003 R11=0000000000000001 R12=ffffffff85d4a350 R13=1ffffffff0a80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff845915ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c001fa7008 CR3=000000000cb60000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004184395300000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000a2906b RBX=0000000000000001 RCX=ffffffff8459066e RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8128e0f5 RBP=dffffc0000000000 RSP=ffff888008e0fe70 R8 =0000000000000001 R9 =ffffed100d9e6a00 R10=ffff88806cf35003 R11=0000000000000001 R12=ffffffff85d4a350 R13=1ffff110011c1fd3 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff845915ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc88989f010 CR3=000000000cb60000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00fc01fe016c6c6f502e726567616e61 XMM02=000000000000000040f6f20000000000 XMM03=0000020202060401098d864dfc25e484 XMM04=000000c0000a67b0000000c0000a6780 XMM05=000000c0000a6810000000c0000a67e0 XMM06=000000c0000a6870000000c0000a6840 XMM07=000000c0000a68d0000000c0000a68a0 XMM08=000000c0000a67b0000000c0000a6780 XMM09=000000c0000a6810000000c0000a67e0 XMM10=000000c0000a6870000000c0000a6840 XMM11=000000c0000a68d0000000c0000a68a0 XMM12=000000c00005a5a0000000c0000a6900 XMM13=000000c0000a6960000000c0000a6930 XMM14=000000c0000a69c0000000c0000a6990 XMM15=000000c0000a6a20000000c0000a69f0