, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:24:40 executing program 0: mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) [ 2874.433451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2874.435070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2874.444404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2874.445440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2874.446033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2874.447476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2874.447752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2874.454062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2874.460242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2874.466871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2874.468451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2874.479860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2874.512562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 00:24:40 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) creat(&(0x7f0000000000)='./file1\x00', 0x189) [ 2874.587208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2874.589389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2874.591068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2874.634232] 9pnet: Insufficient options for proto=fd 00:24:53 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:24:53 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='\x00', &(0x7f0000000080)='./file1\x00') lchown(&(0x7f0000000180)='./file1/file0\x00', 0xffffffffffffffff, 0xee01) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 00:24:53 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:24:53 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:24:53 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000580)={0x11040180, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) r0 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) mkdirat(r0, &(0x7f00000004c0)='./file1\x00', 0x103) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 00:24:53 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 00:24:53 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file ']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:24:53 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2887.150153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2887.165096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2887.183110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2887.189959] loop4: detected capacity change from 0 to 65536 [ 2887.191144] nfs: Bad value for 'rootcontext' [ 2887.204865] 9pnet: Insufficient options for proto=fd [ 2887.205534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2887.206927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2887.207804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 00:24:53 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) [ 2887.214673] 9pnet: Insufficient options for proto=fd [ 2887.230962] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2887.232523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2887.252533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2887.253666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2887.254568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2887.255451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2887.256297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2887.258416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2887.268565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2887.270245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2887.274010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:24:53 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:24:53 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2887.337964] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:53 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2887.355685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:24:53 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 00:24:53 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2887.378834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2887.379924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2887.380849] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2887.389973] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 00:24:53 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="c7848be6eb73ce2e4f49c9c72fc8c2", 0xf}, {&(0x7f0000000280)="ba6d7885a2c28e12d694b7fe63cb0aa00abfecb2a618eb5abb9cdf047e6dbe4163ce9ff84dceae76c1551fd04294d469beee0ed2ecb9cdc9570cd1613c12d0ec4586678515511df3e903c51606dd4246b7c5478357e57acc3f485526648c63feff955d43736bc2d347d52fc6cd24146f5b0a7a2096719813841daf66e0a7e56b7ac5b547af45455e43fcf6b74711ff333ae9da91e0b5936a818e55c2e465033964ba84ecf84ba8b3261de9ce7c3655d410a62d07836703b1970582cffa357bb6a5eb647bbb5a8cb855d159d0ef1105", 0xcf}, {&(0x7f00000001c0)="40da7210aa7221fdf31cbb54dbc9f3d3af1651f3320f2127ec70a2924f7d268d8f25cf1b8ca09962ce756de1fa98c7eeeb35790af4696d8e8d65d7e3edfd20a4f07157511b173f9077f42a254f73932aa2a083ded83595e2cf2b3b8dbe8919ab354965", 0x63}, {&(0x7f0000000380)="0b9206f1e98cc13984be5212a8ec43ea18907cbe72698a519a88860b19f6e38a0e9c387f5018425e4ea67515bb2b53072d08bbd1994e51628d0d7871ea7e2144f87a5cc8f8db04e2251a7621e770c40cf8e748af45a1474097aa79f6157f59990eb6ef48339093fbbe3ca563e950ffaabe7d2b55e63f5e0bd3949fa99e868c27ba471854fea9bbd36eee3d32eef447a5", 0x90}], 0x4, 0x2, 0x0) [ 2887.427543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2887.429113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2887.431202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2887.438260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2887.442282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2887.443316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2887.444203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:24:53 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40000, 0x48) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3dd3e020ff711361c7615bd4e300dcd5d35c20b4eef28461d534a022323d28cac8e69e15459cb89dd8c21dd07ffcf3a25a2f859a34cb410853", @ANYRESHEX, @ANYBLOB=',rootcontext=sysadm_u,obj_user=@{}/,/),defcontext=unconfined_u,\x00']) [ 2887.464335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2887.466400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2887.469421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:24:53 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000580)={0x11040180, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) r0 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) mkdirat(r0, &(0x7f00000004c0)='./file1\x00', 0x103) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) [ 2887.480302] 9pnet: Insufficient options for proto=fd 00:24:53 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:24:53 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2887.532664] 9pnet: Insufficient options for proto=fd [ 2887.536408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:24:53 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2887.574292] loop6: detected capacity change from 0 to 65536 [ 2887.575319] nfs: Bad value for 'rootcontext' [ 2887.592631] 9pnet: Insufficient options for proto=fd [ 2887.609136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2887.610852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2887.612328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2887.613860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2887.615503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2887.618512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:25:08 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:08 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 00:25:08 executing program 5: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x26048, 0x0, 0x8001, 0x0, 0x2, 0xc858, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r1, 0xa) r3 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x410000, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e22, 0x40, @private1}, 0x1c) 00:25:08 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:08 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:08 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x42240, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x8003, 0x40) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 00:25:08 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:08 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000580)={0x11040180, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) r0 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) mkdirat(r0, &(0x7f00000004c0)='./file1\x00', 0x103) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) [ 2902.515537] __nla_validate_parse: 2 callbacks suppressed [ 2902.515549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2902.536982] loop6: detected capacity change from 0 to 65536 [ 2902.538980] nfs: Bad value for 'rootcontext' [ 2902.548804] 9pnet: Insufficient options for proto=fd 00:25:08 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) [ 2902.558214] 9pnet: Insufficient options for proto=fd [ 2902.563821] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2902.566125] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2902.568493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2902.624072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2902.625901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2902.627482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2902.629136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2902.633638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2902.635445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2902.638331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2902.641130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2902.645357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:25:09 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000580)={0x11040180, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) r0 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) mkdirat(r0, &(0x7f00000004c0)='./file1\x00', 0x103) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) [ 2902.772587] loop6: detected capacity change from 0 to 65536 [ 2902.777268] nfs: Bad value for 'rootcontext' [ 2902.787026] 9pnet: Insufficient options for proto=fd 00:25:21 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000580)={0x11040180, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) r0 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) mkdirat(r0, &(0x7f00000004c0)='./file1\x00', 0x103) 00:25:21 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2915.310853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2915.320209] 9pnet: Insufficient options for proto=fd 00:25:21 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 00:25:21 executing program 4: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@dont_measure}]}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, 0x0, 0xffffffffffffff6b) sendmmsg(r1, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) fstatfs(r1, &(0x7f0000000280)=""/185) 00:25:21 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:21 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(0x0, &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:21 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xfffffffd, @private1, 0x768}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9bbb) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x26048, 0x0, 0x8001, 0x0, 0x2, 0xc858, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r0, 0xa) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c726f6f74636f6e746578743d73791361646d5f752c6f626a5f757365723d407b7d2f2c2f292c646566636f6e43d75314569bdd3656746578743d756e636f6e"]) 00:25:21 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2915.331796] loop6: detected capacity change from 0 to 65536 [ 2915.333374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2915.338675] nfs: Bad value for 'rootcontext' [ 2915.343817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:21 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) [ 2915.364803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2915.386448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2915.387431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2915.388489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2915.413049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2915.414580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2915.416215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:25:21 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 00:25:21 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(0x0, &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:21 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:21 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x10, 0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) [ 2915.455443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2915.456811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2915.457015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2915.460577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:25:21 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000580)={0x11040180, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) [ 2915.494889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 00:25:21 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 00:25:21 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(0x0, &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2915.534759] loop6: detected capacity change from 0 to 65536 [ 2915.536174] nfs: Bad value for 'rootcontext' 00:25:21 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:21 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2915.555969] 9pnet: Insufficient options for proto=fd 00:25:21 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x47) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9bbb) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='wlan0\x00'}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x26048, 0x0, 0x8001, 0x0, 0x2, 0xc858, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r0, 0xa) symlinkat(&(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000080)='./file1\x00') clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) [ 2915.570881] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:21 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000580)={0x11040180, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) [ 2915.591189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2915.623912] loop6: detected capacity change from 0 to 65536 [ 2915.625627] nfs: Bad value for 'rootcontext' [ 2915.647016] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2915.678126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2915.679797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2915.681414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2915.716283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2915.717860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2915.720202] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:25:35 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) 00:25:35 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, '+\\)^{'}}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 00:25:35 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:35 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2929.108397] 9pnet: Insufficient options for proto=fd 00:25:35 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) 00:25:35 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @mcast1, 0x101}, 0x1c) 00:25:35 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2929.125968] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2929.131691] 9pnet: Insufficient options for proto=fd 00:25:35 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x0) [ 2929.133866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2929.137207] loop6: detected capacity change from 0 to 65536 [ 2929.138441] nfs: Bad value for 'rootcontext' [ 2929.140224] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:25:35 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) [ 2929.183815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:25:35 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) 00:25:35 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) [ 2929.234198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2929.235760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2929.238468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:25:35 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2863616e733d66642c7266646e6f3d3d46a65c32e1ccb9483edd003b097f2602d400e5ca42dbffcc9403617b0bfe2cad9a9d3ae7d5ed2045a4f7418503e1e18e8dd932a9244458ecb73bd099c3d0c4bc7575d826e8db0817ea7fec630735e1098ba0606cea05c25870890ca41e61eae75be7a7c1465ad6407ba98ab641ec39caebe83884e225d21bf58b875766dde929c57c3f37453c959021236a779c462ab19863dbb91e00c4c4cf53ff965d817ec362454de6fa3a02e3c43547a70ee73950f9f713ee02188961b2475ad721aa2ce68eee5c33e22dbf81", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',rootcontext=sysadm_u,obj_user=@{}/,/),defcontext=unconfined_u,\x00']) [ 2929.267249] loop6: detected capacity change from 0 to 65536 [ 2929.270448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2929.270771] nfs: Bad value for 'rootcontext' [ 2929.271996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2929.274098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:25:35 executing program 6: syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) 00:25:35 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x0) [ 2929.318486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:35 executing program 6: syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) 00:25:35 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:35 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2929.385921] loop6: detected capacity change from 0 to 65536 [ 2929.386001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2929.423701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2929.424567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2929.425559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:25:35 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x0) 00:25:35 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2929.451346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2929.479405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2929.482856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2929.501778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2929.503323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2929.503441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2929.505540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2929.506228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2929.510712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:25:47 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2941.563491] 9pnet: Insufficient options for proto=fd [ 2941.572351] 9pnet: Insufficient options for proto=fd [ 2941.575504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 00:25:47 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}, {@euid_gt={'euid>', 0xee01}}]}}) 00:25:47 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:47 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c2", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:47 executing program 6: syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file1\x00', 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) 00:25:47 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x102, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x40) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x4, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '9p\x00'}}, {@access_user}, {@loose}, {@version_9p2000}, {@cache_fscache}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x1034000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="00f3ffffff0002", @ANYRESDEC=r2, @ANYBLOB=',rootcontext=sysadm_u,obj_user=@{}/,/),defcontext=unconfined_u,\x00']) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'dummy0\x00'}) 00:25:47 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:47 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2941.599625] loop6: detected capacity change from 0 to 65536 [ 2941.605884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:25:47 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) [ 2941.618460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2941.627208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2941.641922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:25:47 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), 0x0, 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) [ 2941.665837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2941.667836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2941.669398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2941.671033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2941.672700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2941.673370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2941.674324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2941.675166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2941.675314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2941.680939] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2941.683797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2941.692409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2941.694354] 9pnet: Insufficient options for proto=fd [ 2941.705013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2941.707261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2941.712819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:25:48 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@seclabel}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@smackfsdef}]}}) 00:25:48 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(0x0, &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2941.757650] loop6: detected capacity change from 0 to 65536 00:25:48 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:25:48 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) [ 2941.786177] 9pnet: Insufficient options for proto=fd [ 2941.796285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2941.799940] 9pnet: Insufficient options for proto=fd [ 2941.818490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:26:03 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4ba", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:03 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf5", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:03 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:03 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x26048, 0x0, 0x8001, 0x0, 0x2, 0xc858, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r1, 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x840062, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '/'}}, {@access_any}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, 'H{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) 00:26:03 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) 00:26:03 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), 0x0, 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) 00:26:03 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(0x0, &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:03 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4ba", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2957.297825] loop6: detected capacity change from 0 to 65536 [ 2957.314942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:26:03 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), 0x0, 0x80, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) [ 2957.326393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2957.339494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2957.344956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2957.349800] 9pnet: Insufficient options for proto=fd [ 2957.368585] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2957.376130] loop6: detected capacity change from 0 to 65536 00:26:03 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(0x0, &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2957.395504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2957.397259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2957.400306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2957.401514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2957.402177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2957.405940] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:26:03 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="de1f5713801107f00598ecfe1112f12ca52b3b5560104f24d5af14a2138bc5fd35cabc829b5c225df631012ac78b3ea3068dc3128e471044075728a5d1b9e442d68de042006cb1a2a47b75b371bc8dc620686f4cc112e6ac161552", 0x5b, 0x8001}, {&(0x7f0000000280)="d12cfde7ae9dc43632d4584d62932e4051699db009ef6838a416a2172182688e685c1a2e134f3329c8949e6c8c8a8ef916255abb569c622d03901302177c1a6bd98e133a013f11d267c51dd7615f007ffd74f3b2c44950edb146c97f0b7deef6bad0877afefcc59434abead143630549053bc61a23c5c5360e213c5b50ea82f8d1af58882cbae33d2cc28469f21fe3b4d137bf493b27334c370f50cad84767aa6decace195d1b0d1184a2d641aff6304d500891c4e386fed102d7880ad4300a394e1916d1ab335b93a11641c08eeafce37d46d8c60c9727c72eac5", 0xdb}, {&(0x7f0000000380)="b58125338698310edfce", 0xa, 0x8}], 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) [ 2957.429420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2957.430349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2957.431316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:26:03 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) 00:26:03 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2957.472435] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2957.485123] loop6: detected capacity change from 0 to 65536 [ 2957.488977] nfs: Bad value for 'rootcontext' 00:26:03 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4ba", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2957.513873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2957.515484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2957.518495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:26:03 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x800, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) [ 2957.555263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 00:26:03 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2957.584564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2957.592888] 9pnet: Insufficient options for proto=fd [ 2957.608184] nfs: Bad value for 'rootcontext' [ 2957.631269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2957.632942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2957.635087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2957.655120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2970.495314] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2970.496832] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:26:16 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:16 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x0) 00:26:16 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:16 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}, {'[^\','}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) 00:26:16 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000280)=""/78, 0x4e}], 0x1, &(0x7f0000000300)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x2100) renameat(r0, &(0x7f0000000000)='./file1\x00', r1, &(0x7f0000000400)='./file1\x00') clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7473616e033d66642c726c649bffe3708301926c5d8c36c34a3e59984e14c605c0f3e911a9bbbfe5d8ed26fc4f20554ac4242b3f47f46bd98ccaa698d35e892651ec4ded694ef34082f377278233ca8e7b4fc45f8e3121a5e09d46a28bfdcd9b3a26e7b860a07940673d1dad2e857fed200b6d00ac02a9c7d36705ced93257402efc208b3540aab32cc016332d2f506ee6ff725b74486190f6c169517e19b5eb557bc1a8cd010f3f62c18503f32c5ad097bedf7f2998200fc86651c986f0df03dba1775e745030d21a7b98abcec13ef83fb8ede6151e57c598c04a8bc36411954f36452431596660cd", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',rootcontext=sysadm_u,obj_user=@{}/,/),defcontext=unconfined_u,\x00']) 00:26:16 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:16 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4ba", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:16 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2970.517261] nfs: Bad value for 'rootcontext' [ 2970.520206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2970.529348] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:26:16 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x0) 00:26:16 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2970.572499] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2970.583423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2970.601642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2970.603198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2970.604821] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2970.608010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2970.617339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2970.618983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2970.620855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2970.636749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2970.638345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2970.647393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2970.664353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2970.665919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2970.668824] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:26:28 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:26:28 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) clone3(&(0x7f0000000340)={0x5001480, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x24}, &(0x7f0000000280)=""/105, 0x69, &(0x7f0000000400)=""/223, &(0x7f0000000300)=[r0, r0], 0x2, {r2}}, 0x58) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) lstat(&(0x7f0000000880)='./file1\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x884080, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose}, {@access_user}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@version_u}, {@access_uid={'access', 0x3d, 0xee00}}, {@noextend}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@nodevmap}, {@dfltuid={'dfltuid', 0x3d, r5}}], [{@appraise}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '+/&(#]\xfb:'}}, {@subj_role={'subj_role', 0x3d, 'rfdno'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@euid_gt={'euid>', r6}}, {@smackfsroot={'smackfsroot', 0x3d, 'trans=fd,'}}]}}) 00:26:28 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file ']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2982.669466] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2982.690276] 9pnet: Insufficient options for proto=fd 00:26:28 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4ba", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:28 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:28 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', 0x0, 0x0, 0x0) 00:26:28 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:28 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file ']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) [ 2982.704806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2982.720163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2982.724268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:26:29 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2982.733386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2982.744831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2982.756311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2982.757895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2982.759830] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2982.784442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2982.785344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2982.786268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2982.794135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2982.795700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2982.797308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:26:29 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2982.865084] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:26:29 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:29 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, 0x26, 0x101, 0x0, 0x0, {0x1}, [@typed={0x90, 0x63, 0x0, 0x0, @binary="a0eab51f24f4074cfbfbbb07324cc62f701d9f2905855dd18b1f0d5ce7f3493090af5beef11c281fbcc10f4675223ffc29811a6d82c0c17acd7a40480a51d57b2b3cc217bf3558b4d61924aa0922349a895d495ac12b16cb2b0cb00a0c3d1fb5b695cfebd4ad94d1a5642d3ec010c0792e9f8a9bff9bc38d6a5f4c42eb9238b7bc3a2be2cefbfd2d17065093"}]}, 0xa4}, 0x1, 0x0, 0x0, 0xb0}, 0x8044) r3 = syz_io_uring_setup(0x22, &(0x7f0000000240)={0x0, 0x813d, 0x0, 0x0, 0x12d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000002a40)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x140010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x1000, 0x0, {0x0, r7}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280), 0x1, 0x0, 0x0, {0x0, r7}}, 0x37) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x26048, 0x0, 0x8001, 0x0, 0x2, 0xc858, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r1, 0xa) syz_io_uring_setup(0x3d6e, &(0x7f0000000180)={0x0, 0x39a, 0x8, 0x3, 0x28, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) [ 2982.896834] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:26:29 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:29 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2982.930249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2982.931103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2982.932000] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2982.943539] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2982.954189] 9pnet: Insufficient options for proto=fd 00:26:29 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4ba", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2982.971507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2982.972352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2982.973223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:26:29 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}, {'}:-!\\-#+/'}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) [ 2982.975915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2983.005831] nfs: Bad value for 'rootcontext' [ 2983.028248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2983.029852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2983.031461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2983.039288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2983.040917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2983.045911] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2983.063069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2983.064620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2983.074445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:26:29 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:29 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:29 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000940)={0x2, 0xadb, @start={0x0, 0x0, "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", "e27d426f2feb70bffef51d767a5ec6468b031b79e158f5861e04e11f140c55caec56697b975f3c60459f4c8c978c5eb41244459628105742cd01df201572c939bdbbdc2480603b0f0a8c906658642451246c152bb01b8b0464e341a60848071e483ddfeee255ae299dffa03db59ef1ea2b92914916cba3f48e48fedb2631c3c04d9d11ec1bf4a7dd18e8d8321b389dfb400d5a6103f246f98498810978c6f1e1d45d931d68567c1adecb37dbc63b9f6c1e6f69aaa7d37b0a7bebe5e8df14cdb0ddb388748cbc40a3b6be82dc28d78faebfc1e2dc92b53fecda6e047e55048baea9b6f4b4f33d345e9b411a2d56b2b4a137032d13bf6aa0617d7ea58201fd3c8335e9f941adbc4e77e943a2e90e6abd077a99410b3fd7359558b7d1639a890260d83ee869ca1d83a332aab6aa431200eb64340e93f93e31303166c91467df516c5ad4c061dc5c2e8c81efe3be8d2ce99f3c3d4fda6063278a343219118abbd70d84aa1c735ac02cafda0af8738f754c37daeb2066dc3afdb3cf6dc8554fbcc755fc169419bf5ac5ae6bfeb386e1f99fc6c3febaf7b4bcaa3963897c55dcfa671eb3cce9a4a92910457216ad1a4b9335d02082e193a9eb83a55dce17e1436b66ff692920754a75ced65adac26271eaa4ec61d9cfbb349521be85ab2137000fa6c6620615f3fd0ef6ad5ff6657ece5e059d4df49d08160ba8d1fb3c3cc3eb780d52682f8822516336530a16d69b372ee1cb748755cdc1c0c341d1749112a604a3ba74ad9f835d4b385df5a33daeec61bc113299064ffc866176ea29d2a2964ed5a1bf39e28efba0b06235d09506dc288bf2eb739220f1e1d11dfa74df8b9a2106cc1c7eac7fc5d023258051a8937050016210a023fecc50474ab4bb2a0c7fe440388e4467b8c6189a43531bf95fe2ae70da9a42adbd2a169c93af4a1ec9f8ab335d819f233b58f0cbb4c5f3efd4ba004b8c8ac9f79ac0352e7529b4bcb56252b17e0dff71c3e9571421a4fe0bcd8034559291fb723640ed6a5c1e58b5e89334aaf28972c5ebafdc723aa65dde3c6f9d0be7d4bd6719e643077b46e100dd44c03fdafae112065e9325869d321702fe8ae52bc2d2da2ff6cd6eb13fefffb6b005debf7ffcfce28902637a005350b9ea36b3627b578a31389d3812cbf92193b3771066c8274dfa8c30e5fcb7055729554aef0da4ec4da2f89b012de1db52960418acc1dce4b440dc4058bb619c5deef5572881665e89ec56fb657bdc51b5431c72b1d9a0f909ee1b4ff379f56a656d1f7fd0a46d9cd860f6f849cba91c2f613f331bcaae5aa3891959a31d839208acf6e24a6f9ad179839e7f7b00e7de047a90910ed037a63d525aece5088021274c2baf8a8c6a2e664dfde60be38e6c545b8a478a51a825143191069cd55ad2de97e133fa6ef0446a7aa75a15d5c423b3ba36d7bbbfb3"}, [0x1, 0x4, 0x4, 0x9, 0x5, 0x3, 0x200, 0x100000000, 0xff, 0x9, 0x3, 0x9a0000, 0x10001, 0xfffffffffffffff8, 0x4, 0x20, 0x0, 0x3ff, 0x92fd, 0x8, 0xcf3, 0x5, 0x1, 0x4, 0x8, 0x20, 0x2, 0x100000001, 0x7, 0x9, 0x8, 0xfffffffffffffffc, 0x5, 0x9, 0x654, 0x0, 0x101, 0x101, 0x5, 0x5, 0xaa7, 0x9, 0x4, 0xffffffffffff19ff, 0x1, 0xfff, 0x0, 0x6e8513f0, 0x689d, 0x1, 0x4649, 0x31, 0x7, 0x6, 0x80, 0xfffffffffffff098, 0x5, 0x40, 0x3, 0x3, 0x12, 0x200, 0xffff, 0x3]}) 00:26:29 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./fi']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2983.156311] 9pnet: Insufficient options for proto=fd [ 2983.170937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2983.172621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2983.174241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2983.182392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2983.184047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2983.185928] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2983.229015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2983.230728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2983.232761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2995.670362] nfs: Bad value for 'rootcontext' 00:26:41 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) fallocate(r0, 0x46, 0xfffffffffffffff8, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 00:26:41 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./fi']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:41 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}, {'(#'}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) 00:26:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:42 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x6e09, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_measure}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 00:26:42 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file ']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:42 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:42 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2995.689874] __nla_validate_parse: 4 callbacks suppressed [ 2995.689882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2995.694747] 9pnet: Insufficient options for proto=fd [ 2995.705088] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:26:42 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}, {'](.'}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) [ 2995.724757] nfs: Bad value for 'rootcontext' [ 2995.740276] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2995.749099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2995.750308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2995.751175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2995.756122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2995.770958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:26:42 executing program 7: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000940)={0x2, 0xadb, @start={0x0, 0x0, "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", "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"}, [0x1, 0x4, 0x4, 0x9, 0x5, 0x3, 0x200, 0x100000000, 0xff, 0x9, 0x3, 0x9a0000, 0x10001, 0xfffffffffffffff8, 0x4, 0x20, 0x0, 0x3ff, 0x92fd, 0x8, 0xcf3, 0x5, 0x1, 0x4, 0x8, 0x20, 0x2, 0x100000001, 0x7, 0x9, 0x8, 0xfffffffffffffffc, 0x5, 0x9, 0x654, 0x0, 0x101, 0x101, 0x5, 0x5, 0xaa7, 0x9, 0x4, 0xffffffffffff19ff, 0x1, 0xfff, 0x0, 0x6e8513f0, 0x689d, 0x1, 0x4649, 0x31, 0x7, 0x6, 0x80, 0xfffffffffffff098, 0x5, 0x40, 0x3, 0x3, 0x12, 0x200, 0xffff, 0x3]}) 00:26:42 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}, {'rootcontext'}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) [ 2995.805178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2995.806113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2995.807042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2995.809207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2995.810770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2995.818835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2995.819143] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2995.819710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:26:42 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2995.831933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2995.850669] nfs: Bad value for 'rootcontext' [ 2995.854003] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:26:42 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:42 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}, {'9p\x00'}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) [ 2995.891349] 9pnet: Insufficient options for proto=fd [ 2995.906185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2995.907813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2995.909457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:26:42 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x24) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@afid={'afid', 0x3d, 0x3}}, {@mmap}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) [ 2995.932811] nfs: Bad value for 'rootcontext' [ 2995.933030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:26:42 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:42 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:42 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 1) [ 2995.978053] 9pnet: Insufficient options for proto=fd [ 2995.987357] FAULT_INJECTION: forcing a failure. [ 2995.987357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2995.988926] CPU: 1 PID: 131066 Comm: syz-executor.4 Not tainted 5.10.237 #1 [ 2995.989753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.990740] Call Trace: [ 2995.991051] dump_stack+0x107/0x167 [ 2995.991478] should_fail.cold+0x5/0xa [ 2995.991924] _copy_from_user+0x2e/0x1b0 [ 2995.992392] __copy_msghdr_from_user+0x91/0x4b0 [ 2995.992931] ? __ia32_sys_shutdown+0x80/0x80 [ 2995.993446] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2995.994057] ? __lock_acquire+0x1657/0x5b00 [ 2995.994561] ? __lock_acquire+0xbb1/0x5b00 [ 2995.995056] sendmsg_copy_msghdr+0xa1/0x160 [ 2995.995556] ? do_recvmmsg+0x6d0/0x6d0 [ 2995.996014] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2995.996625] ? lock_downgrade+0x6d0/0x6d0 [ 2995.997107] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2995.997723] ___sys_sendmsg+0xc6/0x170 [ 2995.998176] ? sendmsg_copy_msghdr+0x160/0x160 [ 2995.998708] ? __fget_files+0x2cf/0x520 [ 2995.999175] ? lock_downgrade+0x6d0/0x6d0 [ 2995.999658] ? find_held_lock+0x2c/0x110 [ 2996.000132] ? __fget_files+0x2f8/0x520 [ 2996.000596] ? __fget_light+0xea/0x290 [ 2996.001058] __sys_sendmsg+0xe5/0x1b0 [ 2996.001508] ? __sys_sendmsg_sock+0x40/0x40 [ 2996.002038] ? rcu_read_lock_any_held+0x75/0xa0 [ 2996.002578] ? fput_many+0x2f/0x1a0 [ 2996.002998] ? ksys_write+0x1a9/0x260 [ 2996.003443] ? __ia32_sys_read+0xb0/0xb0 [ 2996.003914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2996.004529] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2996.005126] ? trace_hardirqs_on+0x5b/0x180 [ 2996.005640] do_syscall_64+0x33/0x40 [ 2996.006076] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2996.006671] RIP: 0033:0x7fb6eaed3b19 [ 2996.007103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2996.009248] RSP: 002b:00007fb6e8449188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2996.010159] RAX: ffffffffffffffda RBX: 00007fb6eafe6f60 RCX: 00007fb6eaed3b19 [ 2996.010995] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2996.011833] RBP: 00007fb6e84491d0 R08: 0000000000000000 R09: 0000000000000000 [ 2996.012676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2996.013522] R13: 00007fff07bfab5f R14: 00007fb6e8449300 R15: 0000000000022000 [ 2996.017722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2996.027988] FAULT_INJECTION: forcing a failure. [ 2996.027988] name failslab, interval 1, probability 0, space 0, times 0 [ 2996.029292] CPU: 1 PID: 131123 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 2996.030120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2996.031100] Call Trace: [ 2996.031408] dump_stack+0x107/0x167 [ 2996.031835] should_fail.cold+0x5/0xa [ 2996.032285] should_failslab+0x5/0x20 [ 2996.032749] __kmalloc_track_caller+0x79/0x370 [ 2996.033296] ? strndup_user+0x74/0xe0 [ 2996.033763] memdup_user+0x22/0xd0 [ 2996.034180] strndup_user+0x74/0xe0 [ 2996.034604] __x64_sys_mount+0x133/0x300 [ 2996.035093] ? copy_mnt_ns+0xa00/0xa00 [ 2996.035560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2996.036176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2996.036779] do_syscall_64+0x33/0x40 [ 2996.037219] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2996.037829] RIP: 0033:0x7f070967ab19 [ 2996.038266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2996.040412] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2996.041291] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 2996.042137] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 2996.042975] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 2996.043812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2996.044654] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 2996.050582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2996.052260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2996.053853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2996.093147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2996.094699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2996.096349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:26:54 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) (fail_nth: 1) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:26:54 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:54 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) umount2(&(0x7f0000000000)='./file1\x00', 0x3) [ 3008.613138] FAULT_INJECTION: forcing a failure. [ 3008.613138] name failslab, interval 1, probability 0, space 0, times 0 [ 3008.614574] CPU: 1 PID: 131180 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 3008.615427] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3008.616445] Call Trace: [ 3008.616780] dump_stack+0x107/0x167 [ 3008.617233] should_fail.cold+0x5/0xa [ 3008.617703] should_failslab+0x5/0x20 [ 3008.618179] __kmalloc_track_caller+0x79/0x370 [ 3008.618738] ? strndup_user+0x74/0xe0 [ 3008.619189] memdup_user+0x22/0xd0 [ 3008.619623] strndup_user+0x74/0xe0 [ 3008.620069] __x64_sys_mount+0x133/0x300 [ 3008.620565] ? copy_mnt_ns+0xa00/0xa00 [ 3008.621045] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3008.621655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3008.622288] do_syscall_64+0x33/0x40 [ 3008.622726] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3008.623345] RIP: 0033:0x7f908425db19 [ 3008.623784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3008.625067] FAULT_INJECTION: forcing a failure. [ 3008.625067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3008.626035] RSP: 002b:00007f90817d3188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3008.626048] RAX: ffffffffffffffda RBX: 00007f9084370f60 RCX: 00007f908425db19 [ 3008.626054] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3008.626061] RBP: 00007f90817d31d0 R08: 0000000020000100 R09: 0000000000000000 [ 3008.626068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3008.626074] R13: 00007ffff5b293ff R14: 00007f90817d3300 R15: 0000000000022000 [ 3008.633190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3008.634022] CPU: 0 PID: 131181 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3008.641011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3008.642554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3008.642748] Call Trace: [ 3008.642773] dump_stack+0x107/0x167 [ 3008.642795] should_fail.cold+0x5/0xa [ 3008.643657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3008.644172] _copy_from_user+0x2e/0x1b0 [ 3008.644730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3008.645396] __copy_msghdr_from_user+0x91/0x4b0 [ 3008.649290] ? __ia32_sys_shutdown+0x80/0x80 [ 3008.650232] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3008.651333] ? __lock_acquire+0x1657/0x5b00 [ 3008.652259] ? __lock_acquire+0xbb1/0x5b00 [ 3008.653162] sendmsg_copy_msghdr+0xa1/0x160 [ 3008.654098] ? do_recvmmsg+0x6d0/0x6d0 [ 3008.654925] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3008.656029] ? lock_downgrade+0x6d0/0x6d0 [ 3008.656911] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3008.658031] ___sys_sendmsg+0xc6/0x170 [ 3008.658868] ? sendmsg_copy_msghdr+0x160/0x160 [ 3008.659844] ? __fget_files+0x2cf/0x520 [ 3008.660683] ? lock_downgrade+0x6d0/0x6d0 [ 3008.661550] ? find_held_lock+0x2c/0x110 [ 3008.662432] ? __fget_files+0x2f8/0x520 [ 3008.663286] ? __fget_light+0xea/0x290 [ 3008.664107] __sys_sendmsg+0xe5/0x1b0 [ 3008.664920] ? __sys_sendmsg_sock+0x40/0x40 [ 3008.665833] ? rcu_read_lock_any_held+0x75/0xa0 [ 3008.666795] ? fput_many+0x2f/0x1a0 [ 3008.667566] ? ksys_write+0x1a9/0x260 [ 3008.668356] ? __ia32_sys_read+0xb0/0xb0 [ 3008.669209] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3008.670308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3008.671379] ? trace_hardirqs_on+0x5b/0x180 [ 3008.672275] do_syscall_64+0x33/0x40 [ 3008.673054] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3008.674134] RIP: 0033:0x7f8f5b2cdb19 [ 3008.674909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3008.678756] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3008.680330] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3008.681814] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3008.683297] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3008.684987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3008.686497] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 00:26:54 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:54 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:55 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:55 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}, {'rootcontext'}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) 00:26:55 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 2) 00:26:55 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:26:55 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3008.702852] nfs: Bad value for 'rootcontext' [ 3008.704543] FAULT_INJECTION: forcing a failure. [ 3008.704543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3008.706324] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3008.707201] CPU: 0 PID: 131189 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3008.709483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3008.711220] Call Trace: [ 3008.711773] dump_stack+0x107/0x167 [ 3008.712539] should_fail.cold+0x5/0xa [ 3008.713337] _copy_from_user+0x2e/0x1b0 [ 3008.714201] __copy_msghdr_from_user+0x91/0x4b0 [ 3008.715187] ? __ia32_sys_shutdown+0x80/0x80 [ 3008.716107] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3008.717201] ? __lock_acquire+0x1657/0x5b00 [ 3008.718118] ? __lock_acquire+0xbb1/0x5b00 [ 3008.719005] sendmsg_copy_msghdr+0xa1/0x160 [ 3008.719906] ? do_recvmmsg+0x6d0/0x6d0 [ 3008.720725] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3008.721835] ? lock_downgrade+0x6d0/0x6d0 [ 3008.722698] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3008.723817] ___sys_sendmsg+0xc6/0x170 [ 3008.724640] ? sendmsg_copy_msghdr+0x160/0x160 [ 3008.725622] ? __fget_files+0x2cf/0x520 [ 3008.726457] ? lock_downgrade+0x6d0/0x6d0 [ 3008.727331] ? find_held_lock+0x2c/0x110 [ 3008.728192] ? __fget_files+0x2f8/0x520 [ 3008.729029] ? __fget_light+0xea/0x290 [ 3008.729864] __sys_sendmsg+0xe5/0x1b0 [ 3008.730666] ? __sys_sendmsg_sock+0x40/0x40 [ 3008.731564] ? rcu_read_lock_any_held+0x75/0xa0 [ 3008.732550] ? fput_many+0x2f/0x1a0 [ 3008.733308] ? ksys_write+0x1a9/0x260 [ 3008.734119] ? __ia32_sys_read+0xb0/0xb0 [ 3008.734968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3008.736056] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3008.737125] ? trace_hardirqs_on+0x5b/0x180 [ 3008.738034] do_syscall_64+0x33/0x40 [ 3008.738817] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3008.739889] RIP: 0033:0x7f6ff23feb19 [ 3008.740668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3008.744560] RSP: 002b:00007f6fef974188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3008.746163] RAX: ffffffffffffffda RBX: 00007f6ff2511f60 RCX: 00007f6ff23feb19 [ 3008.747665] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3008.749176] RBP: 00007f6fef9741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3008.750710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3008.752235] R13: 00007fffd938225f R14: 00007f6fef974300 R15: 0000000000022000 [ 3008.778249] FAULT_INJECTION: forcing a failure. [ 3008.778249] name failslab, interval 1, probability 0, space 0, times 0 [ 3008.780673] CPU: 0 PID: 131323 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3008.782162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3008.783917] Call Trace: [ 3008.784477] dump_stack+0x107/0x167 [ 3008.785251] should_fail.cold+0x5/0xa [ 3008.786078] ? create_object.isra.0+0x3a/0xa20 [ 3008.787047] should_failslab+0x5/0x20 [ 3008.787852] kmem_cache_alloc+0x5b/0x310 [ 3008.788716] create_object.isra.0+0x3a/0xa20 [ 3008.789648] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3008.790733] __kmalloc_track_caller+0x177/0x370 [ 3008.791719] ? strndup_user+0x74/0xe0 [ 3008.792524] memdup_user+0x22/0xd0 [ 3008.793275] strndup_user+0x74/0xe0 [ 3008.794054] __x64_sys_mount+0x133/0x300 [ 3008.794924] ? copy_mnt_ns+0xa00/0xa00 [ 3008.795753] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3008.796867] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3008.797972] do_syscall_64+0x33/0x40 [ 3008.798760] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3008.799849] RIP: 0033:0x7f070967ab19 [ 3008.800634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3008.804485] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3008.806107] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3008.807621] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3008.809150] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3008.810677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3008.812198] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3008.814822] 9pnet: Insufficient options for proto=fd 00:26:55 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3008.838965] 9pnet: Insufficient options for proto=fd 00:26:55 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}, {'@{}/,/)'}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) 00:26:55 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3008.886404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3008.889549] nfs: Bad value for 'rootcontext' [ 3008.893077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3008.939097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3008.940143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3008.941040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3008.959005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3008.959856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3008.960747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:27:08 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:27:08 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:08 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) 00:27:08 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 3) 00:27:08 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:08 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:08 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 00:27:08 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3022.333484] nfs: Bad value for 'rootcontext' [ 3022.342853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3022.365485] FAULT_INJECTION: forcing a failure. [ 3022.365485] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:27:08 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3022.366999] CPU: 1 PID: 131529 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3022.368003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3022.369058] Call Trace: [ 3022.369384] dump_stack+0x107/0x167 [ 3022.369832] should_fail.cold+0x5/0xa [ 3022.370297] _copy_from_user+0x2e/0x1b0 [ 3022.370791] memdup_user+0x65/0xd0 [ 3022.371225] strndup_user+0x74/0xe0 [ 3022.371672] __x64_sys_mount+0x133/0x300 [ 3022.372172] ? copy_mnt_ns+0xa00/0xa00 [ 3022.372644] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3022.373294] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3022.373902] do_syscall_64+0x33/0x40 [ 3022.374369] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3022.374992] RIP: 0033:0x7f070967ab19 [ 3022.375447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3022.377570] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3022.378504] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3022.379368] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3022.380243] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3022.381115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3022.381988] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3022.383450] 9pnet: Insufficient options for proto=fd [ 3022.393569] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:27:08 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) [ 3022.402124] FAULT_INJECTION: forcing a failure. [ 3022.402124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3022.404797] CPU: 0 PID: 131533 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3022.406291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3022.408045] Call Trace: [ 3022.408612] dump_stack+0x107/0x167 [ 3022.409383] should_fail.cold+0x5/0xa [ 3022.410204] _copy_from_user+0x2e/0x1b0 [ 3022.411053] iovec_from_user+0x141/0x400 [ 3022.411922] __import_iovec+0x67/0x590 [ 3022.412748] ? __ia32_sys_shutdown+0x80/0x80 [ 3022.413428] nfs: Unknown parameter 'fsname' [ 3022.413681] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3022.413709] import_iovec+0x83/0xb0 [ 3022.416061] sendmsg_copy_msghdr+0x131/0x160 [ 3022.416988] ? do_recvmmsg+0x6d0/0x6d0 [ 3022.417817] ? lock_downgrade+0x6d0/0x6d0 [ 3022.418707] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3022.419823] ___sys_sendmsg+0xc6/0x170 [ 3022.420646] ? sendmsg_copy_msghdr+0x160/0x160 [ 3022.421615] ? __fget_files+0x2cf/0x520 [ 3022.422462] ? lock_downgrade+0x6d0/0x6d0 [ 3022.423353] ? find_held_lock+0x2c/0x110 [ 3022.424217] ? __fget_files+0x2f8/0x520 [ 3022.425067] ? __fget_light+0xea/0x290 [ 3022.425899] __sys_sendmsg+0xe5/0x1b0 [ 3022.426709] ? __sys_sendmsg_sock+0x40/0x40 [ 3022.427620] ? rcu_read_lock_any_held+0x75/0xa0 [ 3022.428621] ? fput_many+0x2f/0x1a0 [ 3022.429398] ? ksys_write+0x1a9/0x260 [ 3022.430230] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3022.431343] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3022.432432] ? trace_hardirqs_on+0x5b/0x180 [ 3022.433354] do_syscall_64+0x33/0x40 [ 3022.434155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3022.435254] RIP: 0033:0x7f8f5b2cdb19 [ 3022.436044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3022.439954] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3022.441562] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3022.443090] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3022.444604] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3022.446133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3022.447655] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 00:27:08 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 4) 00:27:08 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) [ 3022.460980] FAULT_INJECTION: forcing a failure. [ 3022.460980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3022.463765] CPU: 0 PID: 131531 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3022.465233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3022.465811] nfs: Unknown parameter 'fsname' [ 3022.466989] Call Trace: [ 3022.467010] dump_stack+0x107/0x167 [ 3022.467032] should_fail.cold+0x5/0xa [ 3022.469596] _copy_from_user+0x2e/0x1b0 [ 3022.470433] iovec_from_user+0x141/0x400 [ 3022.471297] __import_iovec+0x67/0x590 [ 3022.472116] ? __ia32_sys_shutdown+0x80/0x80 [ 3022.473039] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3022.474144] import_iovec+0x83/0xb0 [ 3022.474908] sendmsg_copy_msghdr+0x131/0x160 [ 3022.475837] ? do_recvmmsg+0x6d0/0x6d0 [ 3022.476663] ? lock_downgrade+0x6d0/0x6d0 [ 3022.477538] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3022.478665] ___sys_sendmsg+0xc6/0x170 [ 3022.479478] ? sendmsg_copy_msghdr+0x160/0x160 [ 3022.480449] ? __fget_files+0x2cf/0x520 [ 3022.481290] ? lock_downgrade+0x6d0/0x6d0 [ 3022.482174] ? find_held_lock+0x2c/0x110 [ 3022.483040] ? __fget_files+0x2f8/0x520 [ 3022.483891] ? __fget_light+0xea/0x290 [ 3022.484721] __sys_sendmsg+0xe5/0x1b0 [ 3022.485527] ? __sys_sendmsg_sock+0x40/0x40 [ 3022.486451] ? rcu_read_lock_any_held+0x75/0xa0 [ 3022.487425] ? fput_many+0x2f/0x1a0 [ 3022.488199] ? ksys_write+0x1a9/0x260 [ 3022.489014] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3022.490143] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3022.491240] ? trace_hardirqs_on+0x5b/0x180 [ 3022.492148] do_syscall_64+0x33/0x40 [ 3022.492937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3022.494025] RIP: 0033:0x7f6ff23feb19 [ 3022.494820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3022.498719] RSP: 002b:00007f6fef974188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3022.500330] RAX: ffffffffffffffda RBX: 00007f6ff2511f60 RCX: 00007f6ff23feb19 [ 3022.501848] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3022.503369] RBP: 00007f6fef9741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3022.504880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3022.506399] R13: 00007fffd938225f R14: 00007f6fef974300 R15: 0000000000022000 00:27:08 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[], [{@fsname={'fsname', 0x3d, '*@'}}, {@smackfsroot={'smackfsroot', 0x3d, '$@-'}}]}) [ 3022.527520] nfs: Unknown parameter 'fsname' [ 3022.532127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3022.533710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3022.535359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3022.551525] FAULT_INJECTION: forcing a failure. [ 3022.551525] name failslab, interval 1, probability 0, space 0, times 0 [ 3022.552854] CPU: 1 PID: 131629 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3022.553657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3022.554612] Call Trace: [ 3022.554917] dump_stack+0x107/0x167 [ 3022.555337] should_fail.cold+0x5/0xa [ 3022.555775] ? copy_mount_options+0x55/0x180 [ 3022.556288] should_failslab+0x5/0x20 [ 3022.556728] kmem_cache_alloc_trace+0x55/0x320 [ 3022.557256] ? _copy_from_user+0xfb/0x1b0 [ 3022.557734] copy_mount_options+0x55/0x180 [ 3022.558215] __x64_sys_mount+0x1a8/0x300 [ 3022.558685] ? copy_mnt_ns+0xa00/0xa00 [ 3022.559123] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3022.559698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3022.560270] do_syscall_64+0x33/0x40 [ 3022.560677] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3022.561278] RIP: 0033:0x7f070967ab19 [ 3022.561683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3022.563827] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3022.564708] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3022.565541] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3022.566382] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3022.567203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3022.568025] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 00:27:08 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:27:08 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080), &(0x7f0000000180)={'U+', 0xfff}, 0x16, 0x3) [ 3022.651664] 9pnet: Insufficient options for proto=fd 00:27:24 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8, 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)='./file1\x00', 0x4, 0x6000, 0x1}, 0x7) r3 = getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c63616368653d667363616368652c726f6f74636f6e746578743d73797361646d5f752c6f626a5f75a2a800000000f3436eb7fa2fa92eee7365723d407b7d2f2c2f292c65", @ANYRESDEC=r2, @ANYBLOB=',uid<', @ANYRESDEC=r2, @ANYBLOB=',euid<', @ANYRESDEC=r2, @ANYBLOB=',euid<', @ANYRESDEC=r3, @ANYBLOB=',audit,hash,\x00']) 00:27:24 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:27:24 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:24 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3038.048487] FAULT_INJECTION: forcing a failure. [ 3038.048487] name failslab, interval 1, probability 0, space 0, times 0 [ 3038.048981] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3038.050103] CPU: 1 PID: 131872 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3038.052854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3038.053988] Call Trace: [ 3038.054356] dump_stack+0x107/0x167 [ 3038.054871] should_fail.cold+0x5/0xa [ 3038.055399] ? create_object.isra.0+0x3a/0xa20 [ 3038.056021] should_failslab+0x5/0x20 [ 3038.056545] kmem_cache_alloc+0x5b/0x310 [ 3038.057114] create_object.isra.0+0x3a/0xa20 [ 3038.057720] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3038.058434] kmem_cache_alloc_trace+0x151/0x320 [ 3038.059076] ? _copy_from_user+0xfb/0x1b0 [ 3038.059525] FAULT_INJECTION: forcing a failure. [ 3038.059525] name failslab, interval 1, probability 0, space 0, times 0 [ 3038.059650] copy_mount_options+0x55/0x180 [ 3038.059665] __x64_sys_mount+0x1a8/0x300 [ 3038.059676] ? copy_mnt_ns+0xa00/0xa00 [ 3038.059693] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3038.059707] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3038.059720] do_syscall_64+0x33/0x40 [ 3038.059733] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3038.059742] RIP: 0033:0x7f070967ab19 [ 3038.059754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3038.059761] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3038.059775] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3038.059782] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3038.059790] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3038.059797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3038.059804] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3038.066559] nfs: Bad value for 'rootcontext' [ 3038.067396] CPU: 0 PID: 131873 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3038.076863] 9pnet: Insufficient options for proto=fd [ 3038.078254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3038.078261] Call Trace: [ 3038.078286] dump_stack+0x107/0x167 [ 3038.078308] should_fail.cold+0x5/0xa [ 3038.089541] ? __alloc_skb+0x6d/0x5b0 [ 3038.090346] should_failslab+0x5/0x20 [ 3038.091162] kmem_cache_alloc_node+0x55/0x330 [ 3038.092108] __alloc_skb+0x6d/0x5b0 [ 3038.092875] netlink_sendmsg+0x998/0xe00 [ 3038.093739] ? netlink_unicast+0x800/0x800 [ 3038.094654] ? netlink_unicast+0x800/0x800 [ 3038.095546] __sock_sendmsg+0x154/0x190 [ 3038.096385] ____sys_sendmsg+0x70d/0x870 [ 3038.097253] ? sock_write_iter+0x3d0/0x3d0 [ 3038.098141] ? do_recvmmsg+0x6d0/0x6d0 [ 3038.098976] ? lock_downgrade+0x6d0/0x6d0 [ 3038.099849] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3038.100960] ___sys_sendmsg+0xf3/0x170 [ 3038.101791] ? sendmsg_copy_msghdr+0x160/0x160 [ 3038.102764] ? __fget_files+0x2cf/0x520 [ 3038.103598] ? lock_downgrade+0x6d0/0x6d0 [ 3038.104473] ? find_held_lock+0x2c/0x110 [ 3038.105334] ? __fget_files+0x2f8/0x520 [ 3038.106177] ? __fget_light+0xea/0x290 [ 3038.107023] __sys_sendmsg+0xe5/0x1b0 [ 3038.107352] nfs: Bad value for 'rootcontext' [ 3038.107824] ? __sys_sendmsg_sock+0x40/0x40 [ 3038.107850] ? rcu_read_lock_any_held+0x75/0xa0 [ 3038.110299] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3038.111422] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3038.112503] ? trace_hardirqs_on+0x5b/0x180 [ 3038.113419] do_syscall_64+0x33/0x40 [ 3038.114200] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3038.115296] RIP: 0033:0x7f8f5b2cdb19 [ 3038.116079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3038.119953] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3038.121561] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3038.123080] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3038.124572] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3038.126080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3038.127591] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 00:27:24 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:24 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 5) 00:27:24 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:24 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}], [{@fsname={'fsname', 0x3d, '*@'}}]}) 00:27:24 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) 00:27:24 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 6) [ 3038.155045] FAULT_INJECTION: forcing a failure. [ 3038.155045] name failslab, interval 1, probability 0, space 0, times 0 [ 3038.156789] CPU: 1 PID: 131933 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3038.157732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3038.158856] Call Trace: [ 3038.159210] dump_stack+0x107/0x167 [ 3038.159698] should_fail.cold+0x5/0xa [ 3038.160206] ? __alloc_skb+0x6d/0x5b0 [ 3038.160728] should_failslab+0x5/0x20 [ 3038.161239] kmem_cache_alloc_node+0x55/0x330 [ 3038.161846] __alloc_skb+0x6d/0x5b0 [ 3038.162338] netlink_sendmsg+0x998/0xe00 [ 3038.162889] ? netlink_unicast+0x800/0x800 [ 3038.163457] ? netlink_unicast+0x800/0x800 [ 3038.164034] __sock_sendmsg+0x154/0x190 [ 3038.164567] ____sys_sendmsg+0x70d/0x870 [ 3038.165106] ? sock_write_iter+0x3d0/0x3d0 [ 3038.165680] ? do_recvmmsg+0x6d0/0x6d0 [ 3038.166208] ? lock_downgrade+0x6d0/0x6d0 [ 3038.166779] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3038.167483] ___sys_sendmsg+0xf3/0x170 [ 3038.167995] ? sendmsg_copy_msghdr+0x160/0x160 [ 3038.168605] ? __fget_files+0x2cf/0x520 [ 3038.169129] ? lock_downgrade+0x6d0/0x6d0 [ 3038.169688] ? find_held_lock+0x2c/0x110 [ 3038.170235] ? __fget_files+0x2f8/0x520 [ 3038.170779] ? __fget_light+0xea/0x290 [ 3038.171297] __sys_sendmsg+0xe5/0x1b0 [ 3038.171804] ? __sys_sendmsg_sock+0x40/0x40 [ 3038.172387] ? rcu_read_lock_any_held+0x75/0xa0 [ 3038.173009] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3038.173706] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3038.174395] ? trace_hardirqs_on+0x5b/0x180 [ 3038.174963] do_syscall_64+0x33/0x40 [ 3038.175456] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3038.176145] RIP: 0033:0x7f6ff23feb19 [ 3038.176646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3038.179120] RSP: 002b:00007f6fef974188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3038.180128] RAX: ffffffffffffffda RBX: 00007f6ff2511f60 RCX: 00007f6ff23feb19 [ 3038.181070] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3038.182022] RBP: 00007f6fef9741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3038.182988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3038.183938] R13: 00007fffd938225f R14: 00007f6fef974300 R15: 0000000000022000 [ 3038.185342] 9pnet: Insufficient options for proto=fd 00:27:24 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3038.250113] FAULT_INJECTION: forcing a failure. [ 3038.250113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3038.252684] CPU: 0 PID: 132121 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3038.254182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3038.255959] Call Trace: [ 3038.256522] dump_stack+0x107/0x167 [ 3038.257355] should_fail.cold+0x5/0xa [ 3038.258180] _copy_from_user+0x2e/0x1b0 [ 3038.259046] copy_mount_options+0x76/0x180 [ 3038.259948] __x64_sys_mount+0x1a8/0x300 [ 3038.260815] ? copy_mnt_ns+0xa00/0xa00 [ 3038.261644] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3038.262773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3038.263866] do_syscall_64+0x33/0x40 [ 3038.264654] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3038.265745] RIP: 0033:0x7f070967ab19 [ 3038.266539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:27:24 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3038.270423] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3038.272075] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3038.273582] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3038.275093] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3038.276609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3038.278116] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 00:27:24 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3038.336008] FAULT_INJECTION: forcing a failure. [ 3038.336008] name failslab, interval 1, probability 0, space 0, times 0 [ 3038.337730] CPU: 1 PID: 132178 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3038.338592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3038.339556] Call Trace: [ 3038.339889] dump_stack+0x107/0x167 [ 3038.340336] should_fail.cold+0x5/0xa [ 3038.340815] ? create_object.isra.0+0x3a/0xa20 [ 3038.341374] should_failslab+0x5/0x20 [ 3038.341845] kmem_cache_alloc+0x5b/0x310 [ 3038.342346] create_object.isra.0+0x3a/0xa20 [ 3038.342888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3038.343476] kmem_cache_alloc_node+0x169/0x330 [ 3038.344036] __alloc_skb+0x6d/0x5b0 [ 3038.344491] netlink_sendmsg+0x998/0xe00 [ 3038.344998] ? netlink_unicast+0x800/0x800 [ 3038.345521] ? netlink_unicast+0x800/0x800 [ 3038.346038] __sock_sendmsg+0x154/0x190 [ 3038.346537] ____sys_sendmsg+0x70d/0x870 [ 3038.347009] ? sock_write_iter+0x3d0/0x3d0 [ 3038.347522] ? do_recvmmsg+0x6d0/0x6d0 [ 3038.348005] ? lock_downgrade+0x6d0/0x6d0 [ 3038.348512] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3038.349150] ___sys_sendmsg+0xf3/0x170 [ 3038.349602] ? sendmsg_copy_msghdr+0x160/0x160 [ 3038.350157] ? __fget_files+0x2cf/0x520 [ 3038.350652] ? lock_downgrade+0x6d0/0x6d0 [ 3038.351132] ? find_held_lock+0x2c/0x110 [ 3038.351626] ? __fget_files+0x2f8/0x520 [ 3038.352113] ? __fget_light+0xea/0x290 [ 3038.352590] __sys_sendmsg+0xe5/0x1b0 [ 3038.353056] ? __sys_sendmsg_sock+0x40/0x40 [ 3038.353585] ? rcu_read_lock_any_held+0x75/0xa0 [ 3038.354132] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3038.354750] 9pnet: Insufficient options for proto=fd [ 3038.354784] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3038.354805] ? trace_hardirqs_on+0x5b/0x180 [ 3038.357016] do_syscall_64+0x33/0x40 [ 3038.357472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3038.358089] RIP: 0033:0x7f8f5b2cdb19 [ 3038.358550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3038.360644] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3038.361561] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3038.362388] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 00:27:24 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf5", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3038.363207] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3038.364227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3038.365035] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 [ 3038.385940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3038.395754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3038.397328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3038.400844] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3038.404541] FAULT_INJECTION: forcing a failure. [ 3038.404541] name failslab, interval 1, probability 0, space 0, times 0 [ 3038.406252] CPU: 1 PID: 132205 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3038.407093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3038.408020] Call Trace: [ 3038.408340] dump_stack+0x107/0x167 [ 3038.408781] should_fail.cold+0x5/0xa [ 3038.409248] ? create_object.isra.0+0x3a/0xa20 [ 3038.409807] should_failslab+0x5/0x20 [ 3038.410266] kmem_cache_alloc+0x5b/0x310 [ 3038.410766] create_object.isra.0+0x3a/0xa20 [ 3038.411292] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3038.411902] kmem_cache_alloc_node+0x169/0x330 [ 3038.412449] __alloc_skb+0x6d/0x5b0 [ 3038.412882] netlink_sendmsg+0x998/0xe00 [ 3038.413340] ? netlink_unicast+0x800/0x800 [ 3038.413848] ? netlink_unicast+0x800/0x800 [ 3038.414323] __sock_sendmsg+0x154/0x190 [ 3038.414803] ____sys_sendmsg+0x70d/0x870 [ 3038.415255] ? sock_write_iter+0x3d0/0x3d0 [ 3038.415751] ? do_recvmmsg+0x6d0/0x6d0 [ 3038.416214] ? lock_downgrade+0x6d0/0x6d0 [ 3038.416703] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3038.417324] ___sys_sendmsg+0xf3/0x170 [ 3038.417786] ? sendmsg_copy_msghdr+0x160/0x160 [ 3038.418330] ? __fget_files+0x2cf/0x520 [ 3038.418775] ? lock_downgrade+0x6d0/0x6d0 [ 3038.419267] ? find_held_lock+0x2c/0x110 [ 3038.419723] ? __fget_files+0x2f8/0x520 [ 3038.420168] ? __fget_light+0xea/0x290 [ 3038.420601] __sys_sendmsg+0xe5/0x1b0 [ 3038.421021] ? __sys_sendmsg_sock+0x40/0x40 [ 3038.421497] ? rcu_read_lock_any_held+0x75/0xa0 [ 3038.422059] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3038.422687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3038.423292] ? trace_hardirqs_on+0x5b/0x180 [ 3038.423798] do_syscall_64+0x33/0x40 [ 3038.424237] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3038.424835] RIP: 0033:0x7f6ff23feb19 00:27:24 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3038.425276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3038.427557] RSP: 002b:00007f6fef974188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3038.428398] RAX: ffffffffffffffda RBX: 00007f6ff2511f60 RCX: 00007f6ff23feb19 [ 3038.429187] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3038.429967] RBP: 00007f6fef9741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3038.430749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3038.431526] R13: 00007fffd938225f R14: 00007f6fef974300 R15: 0000000000022000 [ 3038.440026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3038.460440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3038.461307] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3038.461962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3038.466978] 9pnet: Insufficient options for proto=fd [ 3038.473463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3038.486733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:27:24 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000001c00)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@dont_hash}, {@context={'context', 0x3d, 'staff_u'}}]}}) 00:27:24 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:24 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:24 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 7) [ 3038.514023] FAULT_INJECTION: forcing a failure. [ 3038.514023] name failslab, interval 1, probability 0, space 0, times 0 [ 3038.515342] CPU: 1 PID: 132276 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3038.516136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3038.517085] Call Trace: [ 3038.517392] dump_stack+0x107/0x167 [ 3038.517810] should_fail.cold+0x5/0xa [ 3038.518255] ? getname_flags.part.0+0x50/0x4f0 [ 3038.518796] should_failslab+0x5/0x20 [ 3038.519242] kmem_cache_alloc+0x5b/0x310 [ 3038.519711] getname_flags.part.0+0x50/0x4f0 [ 3038.520235] ? _copy_from_user+0xfb/0x1b0 [ 3038.520711] user_path_at_empty+0xa1/0x100 [ 3038.521202] __x64_sys_mount+0x1e9/0x300 [ 3038.521669] ? copy_mnt_ns+0xa00/0xa00 [ 3038.522121] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3038.522735] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3038.523331] do_syscall_64+0x33/0x40 [ 3038.523761] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3038.524357] RIP: 0033:0x7f070967ab19 [ 3038.524791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3038.526918] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3038.527802] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3038.528624] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3038.529448] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3038.530272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3038.531111] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 00:27:36 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:36 executing program 5: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r2 = accept4(r0, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000000)=0x80, 0x800) dup2(r1, r2) 00:27:36 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 1) 00:27:36 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:27:36 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:36 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:36 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 8) 00:27:36 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf5", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3050.569447] FAULT_INJECTION: forcing a failure. [ 3050.569447] name failslab, interval 1, probability 0, space 0, times 0 [ 3050.571040] CPU: 0 PID: 132431 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3050.571908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3050.572935] Call Trace: [ 3050.573266] dump_stack+0x107/0x167 [ 3050.573722] should_fail.cold+0x5/0xa [ 3050.574210] should_failslab+0x5/0x20 [ 3050.574690] __kmalloc_node_track_caller+0x74/0x3b0 [ 3050.575310] ? netlink_sendmsg+0x998/0xe00 [ 3050.575838] __alloc_skb+0xb1/0x5b0 [ 3050.576290] netlink_sendmsg+0x998/0xe00 [ 3050.576801] ? netlink_unicast+0x800/0x800 [ 3050.577345] ? netlink_unicast+0x800/0x800 [ 3050.577872] __sock_sendmsg+0x154/0x190 [ 3050.578369] ____sys_sendmsg+0x70d/0x870 [ 3050.578881] ? sock_write_iter+0x3d0/0x3d0 [ 3050.579413] ? do_recvmmsg+0x6d0/0x6d0 [ 3050.579901] ? lock_downgrade+0x6d0/0x6d0 [ 3050.580420] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3050.581075] ___sys_sendmsg+0xf3/0x170 [ 3050.581559] ? sendmsg_copy_msghdr+0x160/0x160 [ 3050.582135] ? __fget_files+0x2cf/0x520 [ 3050.582636] ? lock_downgrade+0x6d0/0x6d0 [ 3050.583152] ? find_held_lock+0x2c/0x110 [ 3050.583659] ? __fget_files+0x2f8/0x520 [ 3050.584161] ? __fget_light+0xea/0x290 [ 3050.584642] __sys_sendmsg+0xe5/0x1b0 [ 3050.585110] ? __sys_sendmsg_sock+0x40/0x40 [ 3050.585644] ? rcu_read_lock_any_held+0x75/0xa0 [ 3050.586230] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3050.586890] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3050.587523] ? trace_hardirqs_on+0x5b/0x180 [ 3050.588059] FAULT_INJECTION: forcing a failure. [ 3050.588059] name failslab, interval 1, probability 0, space 0, times 0 [ 3050.589412] do_syscall_64+0x33/0x40 [ 3050.589875] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3050.590507] RIP: 0033:0x7f6ff23feb19 [ 3050.590965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3050.593231] RSP: 002b:00007f6fef974188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3050.594166] RAX: ffffffffffffffda RBX: 00007f6ff2511f60 RCX: 00007f6ff23feb19 [ 3050.595051] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3050.595929] RBP: 00007f6fef9741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3050.596807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3050.597686] R13: 00007fffd938225f R14: 00007f6fef974300 R15: 0000000000022000 [ 3050.598585] CPU: 1 PID: 132439 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3050.600423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3050.602509] Call Trace: [ 3050.603193] dump_stack+0x107/0x167 [ 3050.604116] should_fail.cold+0x5/0xa [ 3050.604182] FAULT_INJECTION: forcing a failure. [ 3050.604182] name failslab, interval 1, probability 0, space 0, times 0 [ 3050.605072] ? getname_flags.part.0+0x50/0x4f0 [ 3050.605098] should_failslab+0x5/0x20 [ 3050.605122] kmem_cache_alloc+0x5b/0x310 [ 3050.605150] getname_flags.part.0+0x50/0x4f0 [ 3050.610647] getname_flags+0x9a/0xe0 [ 3050.611585] do_mkdirat+0x8f/0x2b0 [ 3050.612482] ? user_path_create+0xf0/0xf0 [ 3050.613530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3050.614864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3050.616159] do_syscall_64+0x33/0x40 [ 3050.617097] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3050.618384] RIP: 0033:0x7f909c7eac27 [ 3050.619329] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3050.623260] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3050.624850] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3050.626348] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3050.627859] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3050.629353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3050.630849] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3050.632359] CPU: 0 PID: 132440 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3050.633236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3050.634247] Call Trace: [ 3050.634564] dump_stack+0x107/0x167 [ 3050.635013] should_fail.cold+0x5/0xa [ 3050.635479] should_failslab+0x5/0x20 [ 3050.635948] __kmalloc_node_track_caller+0x74/0x3b0 [ 3050.636553] ? netlink_sendmsg+0x998/0xe00 [ 3050.637062] __alloc_skb+0xb1/0x5b0 [ 3050.637502] netlink_sendmsg+0x998/0xe00 [ 3050.638003] ? netlink_unicast+0x800/0x800 [ 3050.638519] ? netlink_unicast+0x800/0x800 [ 3050.639039] __sock_sendmsg+0x154/0x190 [ 3050.639514] ____sys_sendmsg+0x70d/0x870 [ 3050.640005] ? sock_write_iter+0x3d0/0x3d0 [ 3050.640508] ? do_recvmmsg+0x6d0/0x6d0 [ 3050.640982] ? lock_downgrade+0x6d0/0x6d0 [ 3050.641483] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3050.642120] ___sys_sendmsg+0xf3/0x170 [ 3050.642594] ? sendmsg_copy_msghdr+0x160/0x160 [ 3050.643150] ? __fget_files+0x2cf/0x520 [ 3050.643637] ? lock_downgrade+0x6d0/0x6d0 [ 3050.644142] ? find_held_lock+0x2c/0x110 [ 3050.644631] ? __fget_files+0x2f8/0x520 [ 3050.645116] ? __fget_light+0xea/0x290 [ 3050.645581] __sys_sendmsg+0xe5/0x1b0 [ 3050.646041] ? __sys_sendmsg_sock+0x40/0x40 [ 3050.646316] FAULT_INJECTION: forcing a failure. [ 3050.646316] name failslab, interval 1, probability 0, space 0, times 0 [ 3050.646557] ? rcu_read_lock_any_held+0x75/0xa0 [ 3050.646587] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3050.650047] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3050.650668] ? trace_hardirqs_on+0x5b/0x180 [ 3050.651189] do_syscall_64+0x33/0x40 [ 3050.651639] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3050.652252] RIP: 0033:0x7f8f5b2cdb19 [ 3050.652695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3050.654913] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3050.655808] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3050.656648] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3050.657483] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3050.658319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3050.659163] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 [ 3050.660024] CPU: 1 PID: 132445 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3050.661472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3050.663183] Call Trace: [ 3050.663732] dump_stack+0x107/0x167 [ 3050.664483] should_fail.cold+0x5/0xa [ 3050.665270] ? create_object.isra.0+0x3a/0xa20 [ 3050.665751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3050.666209] should_failslab+0x5/0x20 [ 3050.667056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3050.667801] kmem_cache_alloc+0x5b/0x310 [ 3050.667826] create_object.isra.0+0x3a/0xa20 [ 3050.668702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3050.669392] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3050.669417] kmem_cache_alloc+0x159/0x310 [ 3050.673103] getname_flags.part.0+0x50/0x4f0 [ 3050.674006] ? _copy_from_user+0xfb/0x1b0 [ 3050.674863] user_path_at_empty+0xa1/0x100 [ 3050.675732] __x64_sys_mount+0x1e9/0x300 [ 3050.676567] ? copy_mnt_ns+0xa00/0xa00 [ 3050.677373] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3050.678482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3050.679548] do_syscall_64+0x33/0x40 [ 3050.680331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3050.681394] RIP: 0033:0x7f070967ab19 00:27:37 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3050.682148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3050.686103] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3050.687691] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3050.689152] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3050.690624] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3050.692076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3050.693541] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3050.695945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3050.698170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3050.703118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3050.709245] FAULT_INJECTION: forcing a failure. [ 3050.709245] name failslab, interval 1, probability 0, space 0, times 0 [ 3050.710778] CPU: 0 PID: 132455 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3050.711604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3050.712590] Call Trace: [ 3050.712899] dump_stack+0x107/0x167 [ 3050.713323] should_fail.cold+0x5/0xa [ 3050.713765] ? create_object.isra.0+0x3a/0xa20 [ 3050.714301] should_failslab+0x5/0x20 [ 3050.714748] kmem_cache_alloc+0x5b/0x310 [ 3050.715225] create_object.isra.0+0x3a/0xa20 [ 3050.715731] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3050.716324] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3050.716908] ? netlink_sendmsg+0x998/0xe00 [ 3050.717411] __alloc_skb+0xb1/0x5b0 [ 3050.717834] netlink_sendmsg+0x998/0xe00 [ 3050.718304] ? netlink_unicast+0x800/0x800 [ 3050.718813] ? netlink_unicast+0x800/0x800 [ 3050.719300] __sock_sendmsg+0x154/0x190 [ 3050.719759] ____sys_sendmsg+0x70d/0x870 [ 3050.720235] ? sock_write_iter+0x3d0/0x3d0 [ 3050.720721] ? do_recvmmsg+0x6d0/0x6d0 [ 3050.721188] ? lock_downgrade+0x6d0/0x6d0 [ 3050.721669] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3050.722275] ___sys_sendmsg+0xf3/0x170 [ 3050.722731] ? sendmsg_copy_msghdr+0x160/0x160 [ 3050.723258] ? __fget_files+0x2cf/0x520 [ 3050.723716] ? lock_downgrade+0x6d0/0x6d0 [ 3050.724196] ? find_held_lock+0x2c/0x110 [ 3050.724679] ? __fget_files+0x2f8/0x520 [ 3050.725137] ? __fget_light+0xea/0x290 [ 3050.725594] __sys_sendmsg+0xe5/0x1b0 [ 3050.726033] ? __sys_sendmsg_sock+0x40/0x40 [ 3050.726530] ? rcu_read_lock_any_held+0x75/0xa0 [ 3050.727077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3050.727682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3050.728275] ? trace_hardirqs_on+0x5b/0x180 [ 3050.728781] do_syscall_64+0x33/0x40 [ 3050.729211] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3050.729808] RIP: 0033:0x7f6ff23feb19 [ 3050.730234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3050.732374] RSP: 002b:00007f6fef974188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3050.733244] RAX: ffffffffffffffda RBX: 00007f6ff2511f60 RCX: 00007f6ff23feb19 [ 3050.734076] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3050.734914] RBP: 00007f6fef9741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3050.735745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3050.736579] R13: 00007fffd938225f R14: 00007f6fef974300 R15: 0000000000022000 [ 3050.738021] 9pnet: Insufficient options for proto=fd [ 3050.751368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3050.753419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:27:37 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 2) [ 3050.772119] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:27:37 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 9) 00:27:37 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3050.802877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3050.805274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3050.806847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3050.811214] FAULT_INJECTION: forcing a failure. [ 3050.811214] name failslab, interval 1, probability 0, space 0, times 0 [ 3050.812572] CPU: 0 PID: 132566 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3050.813364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3050.814299] Call Trace: [ 3050.814603] dump_stack+0x107/0x167 [ 3050.815025] should_fail.cold+0x5/0xa [ 3050.815467] ? create_object.isra.0+0x3a/0xa20 [ 3050.815986] should_failslab+0x5/0x20 [ 3050.816424] kmem_cache_alloc+0x5b/0x310 [ 3050.816884] ? ksys_write+0x21a/0x260 [ 3050.817317] create_object.isra.0+0x3a/0xa20 [ 3050.817812] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3050.818398] kmem_cache_alloc+0x159/0x310 [ 3050.818879] getname_flags.part.0+0x50/0x4f0 [ 3050.819378] getname_flags+0x9a/0xe0 [ 3050.819802] do_mkdirat+0x8f/0x2b0 [ 3050.820210] ? user_path_create+0xf0/0xf0 [ 3050.820686] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3050.820999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3050.821286] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3050.821308] do_syscall_64+0x33/0x40 [ 3050.822775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3050.823331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3050.823346] RIP: 0033:0x7f909c7eac27 [ 3050.824541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3050.824815] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3050.824822] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3050.824833] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3050.824848] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3050.831580] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3050.832385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3050.833192] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3050.845069] FAULT_INJECTION: forcing a failure. [ 3050.845069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3050.846482] CPU: 0 PID: 132592 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3050.847280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3050.848236] Call Trace: [ 3050.848536] dump_stack+0x107/0x167 [ 3050.848960] should_fail.cold+0x5/0xa [ 3050.849400] strncpy_from_user+0x34/0x470 [ 3050.849873] getname_flags.part.0+0x95/0x4f0 [ 3050.850372] ? _copy_from_user+0xfb/0x1b0 [ 3050.850859] user_path_at_empty+0xa1/0x100 [ 3050.851359] __x64_sys_mount+0x1e9/0x300 [ 3050.851818] ? copy_mnt_ns+0xa00/0xa00 [ 3050.852260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3050.852855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3050.853450] do_syscall_64+0x33/0x40 [ 3050.853876] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3050.854469] RIP: 0033:0x7f070967ab19 [ 3050.854901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3050.856983] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3050.857848] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3050.858659] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3050.859468] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3050.860277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3050.861086] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 00:27:37 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766666e6f3df017f8ec16b4dbb367ae332b106102999135ec0c482de8d7e3fea80decf277f3bb2fa08479b881ab1c06a787a79cf93aff44ad47476af270d300b439ca099de49fab2b6a1206038113d8", @ANYRESHEX, @ANYBLOB="2c726f6f74636f6e746578743d73797361646d5f752c6f626a5f757365723d407b7d2f067a8896f5b1f22b2c2f292c646566636f6e746578743d756e636f6e66696e65645f752c00"]) 00:27:37 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3050.883359] FAULT_INJECTION: forcing a failure. [ 3050.883359] name failslab, interval 1, probability 0, space 0, times 0 [ 3050.885940] CPU: 1 PID: 132653 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3050.887449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3050.889143] Call Trace: [ 3050.889685] dump_stack+0x107/0x167 [ 3050.890439] should_fail.cold+0x5/0xa 00:27:37 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3050.891235] ? create_object.isra.0+0x3a/0xa20 [ 3050.892277] should_failslab+0x5/0x20 [ 3050.893123] kmem_cache_alloc+0x5b/0x310 [ 3050.893995] create_object.isra.0+0x3a/0xa20 [ 3050.894937] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3050.896021] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3050.897089] ? netlink_sendmsg+0x998/0xe00 [ 3050.897990] __alloc_skb+0xb1/0x5b0 [ 3050.898782] netlink_sendmsg+0x998/0xe00 [ 3050.899650] ? netlink_unicast+0x800/0x800 [ 3050.900559] ? netlink_unicast+0x800/0x800 [ 3050.901458] __sock_sendmsg+0x154/0x190 [ 3050.902305] ____sys_sendmsg+0x70d/0x870 [ 3050.903177] ? sock_write_iter+0x3d0/0x3d0 [ 3050.904067] ? do_recvmmsg+0x6d0/0x6d0 [ 3050.904897] ? lock_downgrade+0x6d0/0x6d0 [ 3050.905770] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3050.906904] ___sys_sendmsg+0xf3/0x170 [ 3050.907736] ? sendmsg_copy_msghdr+0x160/0x160 [ 3050.908709] ? __fget_files+0x2cf/0x520 [ 3050.909553] ? lock_downgrade+0x6d0/0x6d0 [ 3050.910437] ? find_held_lock+0x2c/0x110 [ 3050.911320] ? __fget_files+0x2f8/0x520 [ 3050.912173] ? __fget_light+0xea/0x290 [ 3050.913009] __sys_sendmsg+0xe5/0x1b0 [ 3050.913818] ? __sys_sendmsg_sock+0x40/0x40 [ 3050.914740] ? rcu_read_lock_any_held+0x75/0xa0 [ 3050.915742] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3050.916856] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3050.917228] nfs: Bad value for 'rootcontext' [ 3050.917944] ? trace_hardirqs_on+0x5b/0x180 [ 3050.917966] do_syscall_64+0x33/0x40 [ 3050.917985] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3050.918001] RIP: 0033:0x7f8f5b2cdb19 [ 3050.922071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3050.926011] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3050.927648] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3050.929172] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3050.930699] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3050.932231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3050.933752] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 [ 3050.959175] FAULT_INJECTION: forcing a failure. [ 3050.959175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3050.960731] CPU: 0 PID: 132745 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3050.961530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3050.962508] Call Trace: [ 3050.962833] dump_stack+0x107/0x167 [ 3050.963262] should_fail.cold+0x5/0xa [ 3050.963710] _copy_from_iter_full+0x201/0xa60 [ 3050.964236] ? __virt_addr_valid+0x170/0x5d0 [ 3050.964762] ? __check_object_size+0x319/0x440 [ 3050.965295] netlink_sendmsg+0x879/0xe00 [ 3050.965774] ? netlink_unicast+0x800/0x800 [ 3050.966269] ? netlink_unicast+0x800/0x800 [ 3050.966769] __sock_sendmsg+0x154/0x190 [ 3050.967229] ____sys_sendmsg+0x70d/0x870 [ 3050.967698] ? sock_write_iter+0x3d0/0x3d0 [ 3050.968180] ? do_recvmmsg+0x6d0/0x6d0 [ 3050.968636] ? lock_downgrade+0x6d0/0x6d0 [ 3050.969114] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3050.969730] ___sys_sendmsg+0xf3/0x170 [ 3050.970181] ? sendmsg_copy_msghdr+0x160/0x160 [ 3050.970724] ? __fget_files+0x2cf/0x520 [ 3050.971188] ? lock_downgrade+0x6d0/0x6d0 [ 3050.971672] ? find_held_lock+0x2c/0x110 [ 3050.972153] ? __fget_files+0x2f8/0x520 [ 3050.972618] ? __fget_light+0xea/0x290 [ 3050.973073] __sys_sendmsg+0xe5/0x1b0 [ 3050.973512] ? __sys_sendmsg_sock+0x40/0x40 [ 3050.974013] ? rcu_read_lock_any_held+0x75/0xa0 [ 3050.974558] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3050.975173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3050.975774] ? trace_hardirqs_on+0x5b/0x180 [ 3050.976273] do_syscall_64+0x33/0x40 [ 3050.976708] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3050.977300] RIP: 0033:0x7f6ff23feb19 [ 3050.977731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3050.979859] RSP: 002b:00007f6fef974188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3050.980745] RAX: ffffffffffffffda RBX: 00007f6ff2511f60 RCX: 00007f6ff23feb19 [ 3050.981571] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3050.982397] RBP: 00007f6fef9741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3050.983232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3050.984059] R13: 00007fffd938225f R14: 00007f6fef974300 R15: 0000000000022000 [ 3050.985252] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3050.986993] 9pnet: Insufficient options for proto=fd [ 3051.073392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3051.075000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3051.077216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:27:51 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 10) 00:27:51 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:51 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:51 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 00:27:51 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:27:51 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf5", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:51 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:51 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 3) [ 3064.747451] FAULT_INJECTION: forcing a failure. [ 3064.747451] name failslab, interval 1, probability 0, space 0, times 0 [ 3064.749178] CPU: 1 PID: 132879 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3064.750428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3064.751646] Call Trace: [ 3064.752052] dump_stack+0x107/0x167 [ 3064.752627] should_fail.cold+0x5/0xa [ 3064.753176] ? rtnl_newlink+0x46/0xa0 [ 3064.753731] should_failslab+0x5/0x20 [ 3064.754287] kmem_cache_alloc_trace+0x55/0x320 [ 3064.754951] rtnl_newlink+0x46/0xa0 [ 3064.755455] ? __rtnl_newlink+0x1700/0x1700 [ 3064.756069] rtnetlink_rcv_msg+0x423/0xbb0 [ 3064.756671] ? rtnl_fdb_dump+0xa30/0xa30 [ 3064.757266] ? lock_acquire+0x197/0x470 [ 3064.757843] ? netlink_deliver_tap+0xf4/0xcc0 [ 3064.758475] netlink_rcv_skb+0x14b/0x430 [ 3064.759061] ? rtnl_fdb_dump+0xa30/0xa30 [ 3064.759642] ? netlink_ack+0xab0/0xab0 [ 3064.760202] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3064.760880] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3064.760925] FAULT_INJECTION: forcing a failure. [ 3064.760925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3064.761564] ? is_vmalloc_addr+0x7b/0xb0 [ 3064.761591] netlink_unicast+0x54e/0x800 [ 3064.765110] ? netlink_attachskb+0x870/0x870 [ 3064.765669] netlink_sendmsg+0x90f/0xe00 [ 3064.766208] ? netlink_unicast+0x800/0x800 [ 3064.766770] ? netlink_unicast+0x800/0x800 [ 3064.767346] __sock_sendmsg+0x154/0x190 [ 3064.767863] ____sys_sendmsg+0x70d/0x870 [ 3064.768400] ? sock_write_iter+0x3d0/0x3d0 [ 3064.768922] ? do_recvmmsg+0x6d0/0x6d0 [ 3064.769404] ? lock_downgrade+0x6d0/0x6d0 [ 3064.769917] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3064.770599] ___sys_sendmsg+0xf3/0x170 [ 3064.771125] ? sendmsg_copy_msghdr+0x160/0x160 [ 3064.771732] ? __fget_files+0x2cf/0x520 [ 3064.772255] ? lock_downgrade+0x6d0/0x6d0 [ 3064.772802] ? find_held_lock+0x2c/0x110 [ 3064.773341] ? __fget_files+0x2f8/0x520 [ 3064.773873] ? __fget_light+0xea/0x290 [ 3064.774392] __sys_sendmsg+0xe5/0x1b0 [ 3064.774904] ? __sys_sendmsg_sock+0x40/0x40 [ 3064.775480] ? rcu_read_lock_any_held+0x75/0xa0 [ 3064.776101] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3064.776807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3064.777473] ? trace_hardirqs_on+0x5b/0x180 [ 3064.778044] do_syscall_64+0x33/0x40 [ 3064.778536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3064.779215] RIP: 0033:0x7f6ff23feb19 [ 3064.779711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.782149] RSP: 002b:00007f6fef974188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3064.783154] RAX: ffffffffffffffda RBX: 00007f6ff2511f60 RCX: 00007f6ff23feb19 [ 3064.784088] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3064.785035] RBP: 00007f6fef9741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.785969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3064.786914] R13: 00007fffd938225f R14: 00007f6fef974300 R15: 0000000000022000 [ 3064.787877] CPU: 0 PID: 132880 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3064.789377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3064.791175] Call Trace: [ 3064.791738] dump_stack+0x107/0x167 [ 3064.792058] FAULT_INJECTION: forcing a failure. [ 3064.792058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3064.792506] should_fail.cold+0x5/0xa [ 3064.794809] _copy_from_iter_full+0x201/0xa60 [ 3064.795772] ? __virt_addr_valid+0x170/0x5d0 [ 3064.796690] ? __check_object_size+0x319/0x440 [ 3064.797664] netlink_sendmsg+0x879/0xe00 [ 3064.798522] ? netlink_unicast+0x800/0x800 [ 3064.799442] ? netlink_unicast+0x800/0x800 [ 3064.800333] __sock_sendmsg+0x154/0x190 [ 3064.801171] ____sys_sendmsg+0x70d/0x870 [ 3064.802017] ? sock_write_iter+0x3d0/0x3d0 [ 3064.802906] ? do_recvmmsg+0x6d0/0x6d0 [ 3064.803741] ? lock_downgrade+0x6d0/0x6d0 [ 3064.804604] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3064.805747] ___sys_sendmsg+0xf3/0x170 [ 3064.806594] ? sendmsg_copy_msghdr+0x160/0x160 [ 3064.807603] ? __fget_files+0x2cf/0x520 [ 3064.808462] ? lock_downgrade+0x6d0/0x6d0 [ 3064.809359] ? find_held_lock+0x2c/0x110 [ 3064.810246] ? __fget_files+0x2f8/0x520 [ 3064.811126] ? __fget_light+0xea/0x290 [ 3064.811977] __sys_sendmsg+0xe5/0x1b0 [ 3064.812803] ? __sys_sendmsg_sock+0x40/0x40 [ 3064.813746] ? rcu_read_lock_any_held+0x75/0xa0 [ 3064.814770] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3064.815918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3064.817030] ? trace_hardirqs_on+0x5b/0x180 [ 3064.817962] do_syscall_64+0x33/0x40 [ 3064.818771] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3064.819887] RIP: 0033:0x7f8f5b2cdb19 [ 3064.820691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.824678] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3064.826323] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3064.827869] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3064.829404] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.830947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3064.832483] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 [ 3064.834047] CPU: 1 PID: 132883 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3064.834989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3064.836068] Call Trace: [ 3064.836410] dump_stack+0x107/0x167 [ 3064.836888] should_fail.cold+0x5/0xa [ 3064.837392] strncpy_from_user+0x34/0x470 [ 3064.837936] getname_flags.part.0+0x95/0x4f0 [ 3064.838511] getname_flags+0x9a/0xe0 [ 3064.839007] do_mkdirat+0x8f/0x2b0 [ 3064.839471] ? user_path_create+0xf0/0xf0 [ 3064.840011] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3064.840691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3064.841362] do_syscall_64+0x33/0x40 [ 3064.841848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3064.842513] RIP: 0033:0x7f909c7eac27 [ 3064.843003] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.845411] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3064.846401] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3064.847331] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3064.848257] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3064.849189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3064.850114] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3064.858182] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3064.864988] 9pnet: Insufficient options for proto=fd [ 3064.869187] FAULT_INJECTION: forcing a failure. [ 3064.869187] name failslab, interval 1, probability 0, space 0, times 0 [ 3064.871572] CPU: 0 PID: 132887 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3064.873045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3064.874743] Call Trace: [ 3064.875291] dump_stack+0x107/0x167 [ 3064.876046] should_fail.cold+0x5/0xa [ 3064.876826] ? alloc_fs_context+0x57/0x840 [ 3064.877695] should_failslab+0x5/0x20 [ 3064.878478] kmem_cache_alloc_trace+0x55/0x320 [ 3064.879429] alloc_fs_context+0x57/0x840 [ 3064.880264] path_mount+0xaa3/0x2120 [ 3064.881029] ? strncpy_from_user+0x9e/0x470 [ 3064.881907] ? finish_automount+0xa90/0xa90 [ 3064.882808] ? getname_flags.part.0+0x1dd/0x4f0 [ 3064.883773] ? _copy_from_user+0xfb/0x1b0 [ 3064.884635] __x64_sys_mount+0x282/0x300 [ 3064.885469] ? copy_mnt_ns+0xa00/0xa00 [ 3064.886273] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3064.887369] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3064.888439] do_syscall_64+0x33/0x40 [ 3064.889213] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3064.890284] RIP: 0033:0x7f070967ab19 [ 3064.891065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.894846] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3064.896420] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3064.897872] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3064.899349] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3064.900796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3064.902266] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3064.905857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:27:51 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:27:51 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:27:51 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 4) [ 3064.972969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3064.973932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3064.974921] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:27:51 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3065.000343] FAULT_INJECTION: forcing a failure. [ 3065.000343] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.001953] CPU: 1 PID: 133095 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3065.002797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3065.003793] Call Trace: [ 3065.004120] dump_stack+0x107/0x167 [ 3065.004561] should_fail.cold+0x5/0xa [ 3065.005027] ? __d_alloc+0x2a/0x990 [ 3065.005464] should_failslab+0x5/0x20 [ 3065.005916] kmem_cache_alloc+0x5b/0x310 [ 3065.006395] ? __d_lookup+0x3bf/0x760 [ 3065.006860] __d_alloc+0x2a/0x990 [ 3065.007282] d_alloc+0x46/0x1c0 [ 3065.007675] __lookup_hash+0xcc/0x190 [ 3065.008143] filename_create+0x186/0x4a0 [ 3065.008457] FAULT_INJECTION: forcing a failure. [ 3065.008457] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.008629] ? filename_parentat+0x570/0x570 [ 3065.008655] ? getname_flags.part.0+0x1dd/0x4f0 [ 3065.008671] do_mkdirat+0xa2/0x2b0 [ 3065.008683] ? user_path_create+0xf0/0xf0 [ 3065.008701] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.008724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3065.014246] do_syscall_64+0x33/0x40 [ 3065.014691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3065.015298] RIP: 0033:0x7f909c7eac27 [ 3065.015740] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.017924] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3065.018827] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3065.019663] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3065.020498] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3065.021320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3065.022150] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3065.023004] CPU: 0 PID: 133077 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3065.024490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3065.026258] Call Trace: [ 3065.026819] dump_stack+0x107/0x167 [ 3065.027609] should_fail.cold+0x5/0xa [ 3065.028414] ? create_object.isra.0+0x3a/0xa20 [ 3065.029378] should_failslab+0x5/0x20 [ 3065.030178] kmem_cache_alloc+0x5b/0x310 [ 3065.031039] ? mutex_lock_io_nested+0xf30/0xf30 [ 3065.032021] create_object.isra.0+0x3a/0xa20 [ 3065.032957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3065.034038] kmem_cache_alloc_trace+0x151/0x320 [ 3065.035042] rtnl_newlink+0x46/0xa0 [ 3065.035802] ? __rtnl_newlink+0x1700/0x1700 [ 3065.036712] rtnetlink_rcv_msg+0x423/0xbb0 [ 3065.037606] ? rtnl_fdb_dump+0xa30/0xa30 [ 3065.038472] ? lock_acquire+0x197/0x470 [ 3065.039314] ? netlink_deliver_tap+0xf4/0xcc0 [ 3065.040258] netlink_rcv_skb+0x14b/0x430 [ 3065.041110] ? rtnl_fdb_dump+0xa30/0xa30 [ 3065.041963] ? netlink_ack+0xab0/0xab0 [ 3065.042783] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3065.043773] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3065.044735] ? is_vmalloc_addr+0x7b/0xb0 [ 3065.045607] netlink_unicast+0x54e/0x800 00:27:51 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4ba", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3065.046459] ? netlink_attachskb+0x870/0x870 [ 3065.047552] netlink_sendmsg+0x90f/0xe00 [ 3065.048421] ? netlink_unicast+0x800/0x800 [ 3065.049330] ? netlink_unicast+0x800/0x800 [ 3065.050224] __sock_sendmsg+0x154/0x190 [ 3065.051081] ____sys_sendmsg+0x70d/0x870 [ 3065.051942] ? sock_write_iter+0x3d0/0x3d0 [ 3065.052839] ? do_recvmmsg+0x6d0/0x6d0 [ 3065.053669] ? lock_downgrade+0x6d0/0x6d0 [ 3065.054551] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3065.055688] ___sys_sendmsg+0xf3/0x170 [ 3065.056516] ? sendmsg_copy_msghdr+0x160/0x160 [ 3065.057487] ? __fget_files+0x2cf/0x520 [ 3065.058325] ? lock_downgrade+0x6d0/0x6d0 [ 3065.059206] ? find_held_lock+0x2c/0x110 [ 3065.060077] ? __fget_files+0x2f8/0x520 [ 3065.060933] ? __fget_light+0xea/0x290 [ 3065.061764] __sys_sendmsg+0xe5/0x1b0 [ 3065.062577] ? __sys_sendmsg_sock+0x40/0x40 [ 3065.063502] ? rcu_read_lock_any_held+0x75/0xa0 [ 3065.064507] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.065611] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3065.066691] ? trace_hardirqs_on+0x5b/0x180 [ 3065.067617] do_syscall_64+0x33/0x40 [ 3065.068410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3065.069497] RIP: 0033:0x7f6ff23feb19 [ 3065.070270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.074163] RSP: 002b:00007f6fef974188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3065.075774] RAX: ffffffffffffffda RBX: 00007f6ff2511f60 RCX: 00007f6ff23feb19 [ 3065.077257] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3065.078748] RBP: 00007f6fef9741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3065.080255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3065.081757] R13: 00007fffd938225f R14: 00007f6fef974300 R15: 0000000000022000 [ 3065.085303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:27:51 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 5) [ 3065.121120] FAULT_INJECTION: forcing a failure. [ 3065.121120] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.122528] CPU: 1 PID: 133154 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3065.123344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3065.124277] Call Trace: [ 3065.124580] dump_stack+0x107/0x167 [ 3065.124996] should_fail.cold+0x5/0xa [ 3065.125437] ? create_object.isra.0+0x3a/0xa20 [ 3065.125957] should_failslab+0x5/0x20 [ 3065.126392] kmem_cache_alloc+0x5b/0x310 [ 3065.126853] create_object.isra.0+0x3a/0xa20 [ 3065.127354] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3065.127931] kmem_cache_alloc+0x159/0x310 [ 3065.128399] ? __d_lookup+0x3bf/0x760 [ 3065.128835] __d_alloc+0x2a/0x990 [ 3065.129228] d_alloc+0x46/0x1c0 [ 3065.129603] __lookup_hash+0xcc/0x190 [ 3065.130032] filename_create+0x186/0x4a0 [ 3065.130492] ? filename_parentat+0x570/0x570 [ 3065.131008] ? getname_flags.part.0+0x1dd/0x4f0 [ 3065.131547] do_mkdirat+0xa2/0x2b0 [ 3065.131951] ? user_path_create+0xf0/0xf0 [ 3065.132436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.133034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3065.133624] do_syscall_64+0x33/0x40 [ 3065.134049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3065.134630] RIP: 0033:0x7f909c7eac27 [ 3065.135057] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.137162] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3065.138045] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3065.138881] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3065.139720] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3065.140547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3065.141373] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 00:27:51 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x810, r0, 0x4624d000) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) [ 3065.165264] nfs: Bad value for 'rootcontext' 00:27:51 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 11) 00:27:51 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 6) [ 3065.191929] 9pnet: Insufficient options for proto=fd [ 3065.198972] FAULT_INJECTION: forcing a failure. [ 3065.198972] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.200797] CPU: 1 PID: 133101 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3065.201605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3065.202557] Call Trace: [ 3065.202866] dump_stack+0x107/0x167 [ 3065.203296] should_fail.cold+0x5/0xa [ 3065.203739] ? rtnl_newlink+0x46/0xa0 [ 3065.204177] should_failslab+0x5/0x20 [ 3065.204613] kmem_cache_alloc_trace+0x55/0x320 [ 3065.205136] rtnl_newlink+0x46/0xa0 [ 3065.205551] ? __rtnl_newlink+0x1700/0x1700 [ 3065.206048] rtnetlink_rcv_msg+0x423/0xbb0 [ 3065.206534] ? rtnl_fdb_dump+0xa30/0xa30 [ 3065.207020] ? lock_acquire+0x197/0x470 [ 3065.207478] ? netlink_deliver_tap+0xf4/0xcc0 [ 3065.207993] netlink_rcv_skb+0x14b/0x430 [ 3065.208456] ? rtnl_fdb_dump+0xa30/0xa30 [ 3065.208925] ? netlink_ack+0xab0/0xab0 [ 3065.209370] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3065.209899] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3065.210425] ? is_vmalloc_addr+0x7b/0xb0 [ 3065.210900] netlink_unicast+0x54e/0x800 [ 3065.211371] ? netlink_attachskb+0x870/0x870 [ 3065.211882] netlink_sendmsg+0x90f/0xe00 [ 3065.212350] ? netlink_unicast+0x800/0x800 [ 3065.212838] ? netlink_unicast+0x800/0x800 [ 3065.213331] __sock_sendmsg+0x154/0x190 [ 3065.213782] ____sys_sendmsg+0x70d/0x870 [ 3065.214257] ? sock_write_iter+0x3d0/0x3d0 [ 3065.214744] ? do_recvmmsg+0x6d0/0x6d0 [ 3065.215202] ? lock_downgrade+0x6d0/0x6d0 [ 3065.215687] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3065.216297] ___sys_sendmsg+0xf3/0x170 [ 3065.216746] ? sendmsg_copy_msghdr+0x160/0x160 [ 3065.217276] ? __fget_files+0x2cf/0x520 [ 3065.217729] ? lock_downgrade+0x6d0/0x6d0 [ 3065.218204] ? find_held_lock+0x2c/0x110 [ 3065.218679] ? __fget_files+0x2f8/0x520 [ 3065.219146] ? __fget_light+0xea/0x290 [ 3065.219595] __sys_sendmsg+0xe5/0x1b0 [ 3065.220032] ? __sys_sendmsg_sock+0x40/0x40 [ 3065.220538] ? rcu_read_lock_any_held+0x75/0xa0 [ 3065.221077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.221684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3065.222274] ? trace_hardirqs_on+0x5b/0x180 [ 3065.222770] do_syscall_64+0x33/0x40 [ 3065.223206] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3065.223795] RIP: 0033:0x7f8f5b2cdb19 [ 3065.224227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.226321] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3065.227203] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3065.228015] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3065.228846] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3065.229674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3065.230500] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 [ 3065.231930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:27:51 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x44, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3065.261990] FAULT_INJECTION: forcing a failure. [ 3065.261990] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.263303] CPU: 1 PID: 133394 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3065.264093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3065.265032] Call Trace: [ 3065.265339] dump_stack+0x107/0x167 [ 3065.265759] should_fail.cold+0x5/0xa [ 3065.266193] ? create_object.isra.0+0x3a/0xa20 [ 3065.266712] should_failslab+0x5/0x20 [ 3065.267159] kmem_cache_alloc+0x5b/0x310 [ 3065.267627] create_object.isra.0+0x3a/0xa20 [ 3065.268122] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3065.268717] kmem_cache_alloc_trace+0x151/0x320 [ 3065.269259] alloc_fs_context+0x57/0x840 [ 3065.269725] path_mount+0xaa3/0x2120 [ 3065.270162] ? strncpy_from_user+0x9e/0x470 [ 3065.270657] ? finish_automount+0xa90/0xa90 [ 3065.271158] ? getname_flags.part.0+0x1dd/0x4f0 [ 3065.271689] ? _copy_from_user+0xfb/0x1b0 [ 3065.272168] __x64_sys_mount+0x282/0x300 [ 3065.272627] ? copy_mnt_ns+0xa00/0xa00 [ 3065.273073] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.273674] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3065.274267] do_syscall_64+0x33/0x40 [ 3065.274694] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3065.275298] RIP: 0033:0x7f070967ab19 [ 3065.275723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.277831] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3065.278699] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3065.279518] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3065.280337] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3065.281141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3065.281952] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 00:27:51 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3065.288299] FAULT_INJECTION: forcing a failure. [ 3065.288299] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.289188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:27:51 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4ba", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3065.290749] CPU: 0 PID: 133424 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3065.290760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3065.290767] Call Trace: [ 3065.290792] dump_stack+0x107/0x167 [ 3065.290813] should_fail.cold+0x5/0xa [ 3065.290834] ? ext4_alloc_inode+0x1a/0x670 [ 3065.290857] should_failslab+0x5/0x20 [ 3065.298870] kmem_cache_alloc+0x5b/0x310 [ 3065.299747] ? security_compute_validatetrans.part.0+0x960/0x960 [ 3065.301044] ? ext4_init_journal_params+0x350/0x350 [ 3065.301571] 9pnet: Insufficient options for proto=fd [ 3065.302096] ext4_alloc_inode+0x1a/0x670 [ 3065.302116] ? ext4_init_journal_params+0x350/0x350 [ 3065.304591] alloc_inode+0x63/0x240 [ 3065.305360] new_inode+0x23/0x250 [ 3065.306093] __ext4_new_inode+0x32c/0x5370 [ 3065.307000] ? avc_has_extended_perms+0xf40/0xf40 [ 3065.308044] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3065.309084] ? dquot_initialize_needed+0x290/0x290 [ 3065.310133] ? selinux_determine_inode_label+0x1ab/0x340 [ 3065.311305] ext4_mkdir+0x32c/0xb10 [ 3065.312095] ? ext4_rmdir+0xf70/0xf70 [ 3065.312917] vfs_mkdir+0x493/0x750 [ 3065.313681] do_mkdirat+0x150/0x2b0 [ 3065.314457] ? user_path_create+0xf0/0xf0 [ 3065.315356] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.316465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3065.317554] do_syscall_64+0x33/0x40 [ 3065.318347] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3065.319436] RIP: 0033:0x7f909c7eac27 [ 3065.320229] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.324107] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3065.325730] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3065.327257] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3065.328770] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3065.330280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3065.331792] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 00:27:51 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 12) [ 3065.347245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3065.348100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3065.348999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3065.351070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3065.383128] FAULT_INJECTION: forcing a failure. [ 3065.383128] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.385646] CPU: 0 PID: 133481 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3065.387135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3065.388880] Call Trace: [ 3065.389443] dump_stack+0x107/0x167 [ 3065.390209] should_fail.cold+0x5/0xa [ 3065.391157] ? legacy_init_fs_context+0x44/0xe0 [ 3065.392133] should_failslab+0x5/0x20 [ 3065.392936] kmem_cache_alloc_trace+0x55/0x320 [ 3065.393890] ? lockdep_init_map_type+0x2c7/0x780 [ 3065.394909] legacy_init_fs_context+0x44/0xe0 [ 3065.395853] ? generic_parse_monolithic+0x1f0/0x1f0 00:27:51 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x48, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:27:51 executing program 5: syz_usb_connect$cdc_ecm(0x3, 0x82, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x80, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x20, {{0x8, 0x24, 0x6, 0x0, 0x0, "7d56a9"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffa, 0xbb47, 0x42}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @acm={0x4, 0x24, 0x2, 0xa}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0xb8, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x8, 0xc78}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6f, 0x7f, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x40, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x9, 0x7}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x3e, 0x6, 0x2, 0x10, 0x85}, 0x4c, &(0x7f0000000280)={0x5, 0xf, 0x4c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "a80897efe41571babbf390a5837b8aca"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x2, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0xa0, 0x3, 0x5e09, 0xf00f, 0x5, [0x0, 0xc0, 0x0]}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x2, 0xf, 0x20, [0xffff30, 0xff30]}]}, 0x8, [{0x7c, &(0x7f0000000300)=@string={0x7c, 0x3, "4fa11fd3be21ce03cf80bd20e3cda9671c33d20d12a3360ff49894fbfe2635fe9b0dd28af20ab513dafa41855c258e7b76244d0f8cc6e02b8bf94dcec92c4b31611e7f2634c83b0cb06dbae86ae2562b0dffa525641ee9f48d43112a5e840339d0b168d46ce89467ace77627ba6ea27e28be0d1f963b732c6ddb"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x83, &(0x7f0000000440)=@string={0x83, 0x3, "750717f27474b6f8ccd9d8aab5fc15fdcdb93517502a602f54e036969ce1ce74f38eadc519e0ae8921cc5f3c386028218d79aff8a21269d8a768cc53085ac8ca5bab0495cecc5532aee7115bb35f852243e6f72c7c7c9b1e65b3f1326d8e62e64bcc7914610d71d10a81d5d7e26fbf473f0e5d22fb080e2d04e84b75c61e8051f9"}}, {0xb4, &(0x7f0000000500)=@string={0xb4, 0x3, "6a7a319541fa7d8e9cea3e1164f7c59dc2a4392f6bb0532e871e929580135026ed3091bc22512dd55ff59017af7190de851058d98cf95e655b9521da270f76badf914dfa20de588aa16b60be5efe1aa6b4fa48363ab5d05d2c52fb2f8c9a69caa3917d67e84e87b29cbbd6483a6e8ddb5f310ebcb7942713acc83dc309e44304f50395f14af033d8100bf0dfeb01a2547080b938ed08e3d073b3c89dbe2bd3d1a7c34f0cccc53cc91ab783fb90a8ce804188"}}, {0xd0, &(0x7f00000005c0)=@string={0xd0, 0x3, "d0500c37fe346aeb33b7ed533232b4690f644fd05414729bf6a089a8d5effde1b99127182d7c12167a3a0bb512d3c284cf9b6a85af694a7f29c75d52be8cd0d9cd07fc1ed425e4d3b040ee61d09d85d4c84127711a4f0d62dd1260c6a386ff83ff48302dc4bf4986160a887db7409f1b6bf554d83a6e5851c346ebba5a12b67ffc92c74179110799408dc44119114f6485b4fcb5f59849de7a89604f6ddeee87bfa7d43d6dd002352a9a4c8e443561eacff839248621974f7da59ed203c30ddc0328c009e6d5014eb967597fdc85"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x415}}]}) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r2, r1, 0x0, 0x9bbb) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x26048, 0x0, 0x8001, 0x0, 0x2, 0xc858, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r1, 0xa) r3 = inotify_init() dup3(r1, r3, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000000000000850347a56e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',rootcontext=sysadm_u,obj_user=@{}/,/),defcontext=unconfined_u,\x00']) [ 3065.396899] alloc_fs_context+0x4fd/0x840 [ 3065.397823] path_mount+0xaa3/0x2120 [ 3065.398619] ? strncpy_from_user+0x9e/0x470 [ 3065.399539] ? finish_automount+0xa90/0xa90 [ 3065.400445] ? getname_flags.part.0+0x1dd/0x4f0 [ 3065.401419] ? _copy_from_user+0xfb/0x1b0 [ 3065.402302] __x64_sys_mount+0x282/0x300 [ 3065.403164] ? copy_mnt_ns+0xa00/0xa00 [ 3065.403988] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.405091] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3065.406183] do_syscall_64+0x33/0x40 [ 3065.406977] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3065.408061] RIP: 0033:0x7f070967ab19 [ 3065.408849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.412735] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3065.414339] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3065.415853] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3065.417348] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3065.418854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3065.420362] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 00:27:51 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3065.440227] udc-core: couldn't find an available UDC or it's busy [ 3065.441019] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 3065.450813] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3065.465203] FAULT_INJECTION: forcing a failure. [ 3065.465203] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.466671] CPU: 1 PID: 133637 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 3065.467480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3065.468443] Call Trace: [ 3065.468750] dump_stack+0x107/0x167 [ 3065.469169] should_fail.cold+0x5/0xa [ 3065.469609] ? __sta_info_destroy_part2+0x2b1/0x4f0 [ 3065.470186] should_failslab+0x5/0x20 [ 3065.470623] kmem_cache_alloc_trace+0x55/0x320 [ 3065.471170] __sta_info_destroy_part2+0x2b1/0x4f0 [ 3065.471731] __sta_info_flush+0x3a0/0x520 [ 3065.472211] ? __sta_info_destroy+0x50/0x50 [ 3065.472708] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.473316] ? trace_hardirqs_on+0x5b/0x180 [ 3065.473816] ? cfg80211_put_bss+0x1b0/0x270 [ 3065.474317] ? __local_bh_enable_ip+0x9d/0x100 [ 3065.474860] ieee80211_ibss_disconnect+0x115/0x750 [ 3065.475437] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.476053] ieee80211_ibss_leave+0x12/0x160 [ 3065.476559] __cfg80211_leave_ibss+0x183/0x4f0 [ 3065.477103] __cfg80211_leave+0x14b/0x370 [ 3065.477583] cfg80211_netdev_notifier_call+0x385/0x10c0 [ 3065.478189] ? ipmr_device_event+0x192/0x1f0 [ 3065.478708] raw_notifier_call_chain+0xb3/0x110 [ 3065.479256] call_netdevice_notifiers_info+0xba/0x130 [ 3065.479846] __dev_close_many+0xf3/0x2f0 [ 3065.480314] ? skb_crc32c_csum_help.part.0+0x4d0/0x4d0 [ 3065.480928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.481527] ? __local_bh_enable_ip+0x9d/0x100 [ 3065.482054] ? trace_hardirqs_on+0x5b/0x180 [ 3065.482557] __dev_change_flags+0x299/0x6e0 [ 3065.483068] ? dev_set_allmulti+0x30/0x30 [ 3065.483552] dev_change_flags+0x8a/0x160 [ 3065.484022] do_setlink+0x911/0x3ac0 [ 3065.484455] ? rtnl_getlink+0xaa0/0xaa0 [ 3065.484908] ? printk+0xba/0xf1 [ 3065.485289] ? record_print_text.cold+0x16/0x16 [ 3065.485824] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3065.486405] ? trace_hardirqs_on+0x5b/0x180 [ 3065.486922] ? mark_held_locks+0x9e/0xe0 [ 3065.487392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.487989] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3065.488606] ? trace_hardirqs_on+0x5b/0x180 [ 3065.489104] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3065.489730] __rtnl_newlink+0xc3e/0x1700 [ 3065.490200] ? rtnl_setlink+0x3c0/0x3c0 [ 3065.490658] ? __is_insn_slot_addr+0x123/0x290 [ 3065.491190] ? unwind_next_frame+0x13ef/0x1a90 [ 3065.491711] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3065.492316] ? 0xffffffffa0000000 [ 3065.492721] ? __is_insn_slot_addr+0x14c/0x290 [ 3065.493249] ? kernel_text_address+0xf2/0x120 [ 3065.493758] ? __kernel_text_address+0x9/0x40 [ 3065.494268] ? unwind_get_return_address+0x55/0xa0 [ 3065.494828] ? create_prof_cpu_mask+0x20/0x20 [ 3065.495359] ? arch_stack_walk+0x99/0xf0 [ 3065.495828] ? stack_trace_save+0x8c/0xc0 [ 3065.496341] ? mark_held_locks+0x9e/0xe0 [ 3065.496805] ? trace_hardirqs_on+0x5b/0x180 [ 3065.497303] ? kasan_unpoison_shadow+0x33/0x50 [ 3065.497822] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3065.498411] rtnl_newlink+0x64/0xa0 [ 3065.498826] ? __rtnl_newlink+0x1700/0x1700 [ 3065.499327] rtnetlink_rcv_msg+0x423/0xbb0 [ 3065.499819] ? rtnl_fdb_dump+0xa30/0xa30 [ 3065.500291] ? lock_acquire+0x197/0x470 [ 3065.500752] ? netlink_deliver_tap+0xf4/0xcc0 [ 3065.501272] netlink_rcv_skb+0x14b/0x430 [ 3065.501737] ? rtnl_fdb_dump+0xa30/0xa30 [ 3065.502204] ? netlink_ack+0xab0/0xab0 [ 3065.502654] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3065.503185] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3065.503707] ? is_vmalloc_addr+0x7b/0xb0 [ 3065.504173] netlink_unicast+0x54e/0x800 [ 3065.504638] ? netlink_attachskb+0x870/0x870 [ 3065.505145] netlink_sendmsg+0x90f/0xe00 [ 3065.505614] ? netlink_unicast+0x800/0x800 [ 3065.506111] ? netlink_unicast+0x800/0x800 [ 3065.506608] __sock_sendmsg+0x154/0x190 [ 3065.507067] ____sys_sendmsg+0x70d/0x870 [ 3065.507533] ? sock_write_iter+0x3d0/0x3d0 [ 3065.508014] ? do_recvmmsg+0x6d0/0x6d0 [ 3065.508461] ? lock_downgrade+0x6d0/0x6d0 [ 3065.508940] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3065.509545] ___sys_sendmsg+0xf3/0x170 [ 3065.509989] ? sendmsg_copy_msghdr+0x160/0x160 [ 3065.510522] ? __fget_files+0x2cf/0x520 [ 3065.510984] ? lock_downgrade+0x6d0/0x6d0 [ 3065.511462] ? find_held_lock+0x2c/0x110 [ 3065.511937] ? __fget_files+0x2f8/0x520 [ 3065.512398] ? __fget_light+0xea/0x290 [ 3065.512844] __sys_sendmsg+0xe5/0x1b0 [ 3065.513278] ? __sys_sendmsg_sock+0x40/0x40 [ 3065.513777] ? rcu_read_lock_any_held+0x75/0xa0 [ 3065.514312] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3065.514934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3065.515524] ? trace_hardirqs_on+0x5b/0x180 [ 3065.516020] do_syscall_64+0x33/0x40 [ 3065.516450] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3065.517036] RIP: 0033:0x7f6ff23feb19 [ 3065.517467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.519574] RSP: 002b:00007f6fef974188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3065.520448] RAX: ffffffffffffffda RBX: 00007f6ff2511f60 RCX: 00007f6ff23feb19 [ 3065.521264] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3065.522076] RBP: 00007f6fef9741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3065.522890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3065.523709] R13: 00007fffd938225f R14: 00007f6fef974300 R15: 0000000000022000 [ 3065.597553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3065.598737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3065.599650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3066.041097] udc-core: couldn't find an available UDC or it's busy [ 3066.042022] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 3079.781351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3079.795143] FAULT_INJECTION: forcing a failure. [ 3079.795143] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.797318] FAULT_INJECTION: forcing a failure. [ 3079.797318] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.797435] CPU: 0 PID: 133763 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3079.801078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3079.802712] Call Trace: [ 3079.803249] dump_stack+0x107/0x167 [ 3079.803972] should_fail.cold+0x5/0xa [ 3079.804722] ? create_object.isra.0+0x3a/0xa20 [ 3079.805616] should_failslab+0x5/0x20 [ 3079.806362] kmem_cache_alloc+0x5b/0x310 [ 3079.807155] create_object.isra.0+0x3a/0xa20 [ 3079.808016] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3079.809008] kmem_cache_alloc+0x159/0x310 [ 3079.809819] ? ext4_init_journal_params+0x350/0x350 [ 3079.810788] ext4_alloc_inode+0x1a/0x670 [ 3079.811586] ? ext4_init_journal_params+0x350/0x350 [ 3079.812556] alloc_inode+0x63/0x240 [ 3079.813269] new_inode+0x23/0x250 [ 3079.813946] __ext4_new_inode+0x32c/0x5370 [ 3079.814766] ? avc_has_extended_perms+0xf40/0xf40 [ 3079.815734] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3079.816676] ? dquot_initialize_needed+0x290/0x290 [ 3079.817635] ? selinux_determine_inode_label+0x1ab/0x340 [ 3079.818700] ext4_mkdir+0x32c/0xb10 [ 3079.819425] ? ext4_rmdir+0xf70/0xf70 [ 3079.820175] vfs_mkdir+0x493/0x750 [ 3079.820867] do_mkdirat+0x150/0x2b0 [ 3079.821577] ? user_path_create+0xf0/0xf0 [ 3079.822392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3079.823422] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3079.824427] do_syscall_64+0x33/0x40 [ 3079.825150] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3079.826134] RIP: 0033:0x7f909c7eac27 [ 3079.826855] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3079.830415] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3079.831894] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3079.833276] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3079.834668] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3079.836054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3079.837437] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3079.838847] CPU: 1 PID: 133764 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3079.840369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3079.842150] Call Trace: [ 3079.842721] dump_stack+0x107/0x167 [ 3079.843590] should_fail.cold+0x5/0xa [ 3079.844399] ? create_object.isra.0+0x3a/0xa20 [ 3079.845268] FAULT_INJECTION: forcing a failure. [ 3079.845268] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.845362] should_failslab+0x5/0x20 [ 3079.845388] kmem_cache_alloc+0x5b/0x310 [ 3079.849118] create_object.isra.0+0x3a/0xa20 [ 3079.850050] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3079.851126] kmem_cache_alloc_trace+0x151/0x320 [ 3079.852117] ? lockdep_init_map_type+0x2c7/0x780 [ 3079.853126] legacy_init_fs_context+0x44/0xe0 [ 3079.854067] ? generic_parse_monolithic+0x1f0/0x1f0 [ 3079.855113] alloc_fs_context+0x4fd/0x840 [ 3079.856005] path_mount+0xaa3/0x2120 [ 3079.856797] ? strncpy_from_user+0x9e/0x470 [ 3079.857704] ? finish_automount+0xa90/0xa90 [ 3079.858614] ? getname_flags.part.0+0x1dd/0x4f0 [ 3079.859609] ? _copy_from_user+0xfb/0x1b0 [ 3079.860496] __x64_sys_mount+0x282/0x300 [ 3079.861347] ? copy_mnt_ns+0xa00/0xa00 [ 3079.862173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3079.863298] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3079.864387] do_syscall_64+0x33/0x40 [ 3079.865173] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3079.866251] RIP: 0033:0x7f070967ab19 [ 3079.867041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3079.870939] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3079.872560] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3079.874078] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3079.875589] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3079.877103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3079.878611] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3079.880166] CPU: 0 PID: 133760 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3079.881540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3079.883129] Call Trace: [ 3079.883637] dump_stack+0x107/0x167 [ 3079.884329] should_fail.cold+0x5/0xa [ 3079.885050] ? create_object.isra.0+0x3a/0xa20 [ 3079.885913] should_failslab+0x5/0x20 [ 3079.886629] kmem_cache_alloc+0x5b/0x310 [ 3079.887421] create_object.isra.0+0x3a/0xa20 [ 3079.888249] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3079.889208] kmem_cache_alloc_trace+0x151/0x320 [ 3079.890083] rtnl_newlink+0x46/0xa0 [ 3079.890758] ? __rtnl_newlink+0x1700/0x1700 [ 3079.891578] rtnetlink_rcv_msg+0x423/0xbb0 [ 3079.892369] ? rtnl_fdb_dump+0xa30/0xa30 [ 3079.893130] ? lock_acquire+0x197/0x470 [ 3079.893876] ? netlink_deliver_tap+0xf4/0xcc0 [ 3079.894717] netlink_rcv_skb+0x14b/0x430 [ 3079.895480] ? rtnl_fdb_dump+0xa30/0xa30 [ 3079.896240] ? netlink_ack+0xab0/0xab0 [ 3079.896964] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3079.897821] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3079.898682] ? is_vmalloc_addr+0x7b/0xb0 [ 3079.899462] netlink_unicast+0x54e/0x800 [ 3079.900230] ? netlink_attachskb+0x870/0x870 [ 3079.901065] netlink_sendmsg+0x90f/0xe00 [ 3079.901827] ? netlink_unicast+0x800/0x800 [ 3079.902624] ? netlink_unicast+0x800/0x800 [ 3079.903422] __sock_sendmsg+0x154/0x190 [ 3079.904173] ____sys_sendmsg+0x70d/0x870 [ 3079.904930] ? sock_write_iter+0x3d0/0x3d0 [ 3079.905726] ? do_recvmmsg+0x6d0/0x6d0 [ 3079.906446] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3079.907430] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3079.908432] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3079.909433] ___sys_sendmsg+0xf3/0x170 [ 3079.910158] ? sendmsg_copy_msghdr+0x160/0x160 [ 3079.911000] ? __fget_files+0x2cf/0x520 [ 3079.911745] ? lock_downgrade+0x6d0/0x6d0 [ 3079.912512] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3079.913479] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3079.914472] ? trace_hardirqs_on+0x5b/0x180 [ 3079.915279] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3079.916285] ? sockfd_lookup_light+0xca/0x180 [ 3079.917127] ? __sanitizer_cov_trace_pc+0x3c/0x60 [ 3079.918016] __sys_sendmsg+0xe5/0x1b0 [ 3079.918717] ? __sys_sendmsg_sock+0x40/0x40 [ 3079.919514] ? trace_hardirqs_on+0x5b/0x180 [ 3079.920328] ? __sys_sendmsg+0x1b0/0x1b0 [ 3079.921076] ? __x64_sys_sendmsg+0x1/0xb0 [ 3079.921839] do_syscall_64+0x33/0x40 [ 3079.922528] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3079.923487] RIP: 0033:0x7f8f5b2cdb19 [ 3079.924171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3079.927570] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3079.928958] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3079.930256] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3079.931148] 9pnet: Insufficient options for proto=fd [ 3079.931554] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3079.931564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3079.931575] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 [ 3079.931842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:28:06 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:06 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:06 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x3f}, 0x8b00, 0x0, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8902, 0x0) ioctl$SG_IO(r1, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x0) r3 = getpid() ptrace(0x4208, r3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9bbb) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x26048, 0x0, 0x8001, 0x0, 0x2, 0xc858, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0x4) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x365301, 0x0) perf_event_open(0x0, r3, 0x4, r4, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x1d0, 0x35, 0x1, 0x70bd25, 0x25dfdbfe, {0x1b}, [@nested={0x1bc, 0x77, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xa}}, @typed={0x8, 0x20, 0x0, 0x0, @fd=r2}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="06f6c5046685958930411e6732b5da5a7911b599dcd75ade473fc2afdfef1889b575b59aead663bdb6a12599924865d9062aad0e04ee14207ce7caeedd7931e63d2e8928233d56272bf211fadb0b92a6cb66c8d256feffa0107b3492098a206906badcdb82e5a368d2dc65de0401a850a5ad81a2d6689e8ac65ba04e5d42cfcc1076cb6ac74d48ffc36fc10548201189adc85770ffa8b19f0764c62af333574b43b5054a979bceff53693149600474bfd1e91bf0c586abc6f7d3e8c3292e67fdec7be8839acdd918652f49dd7c3a94605d12456918c1cecbd758cbb947eb3f4c11d07f215c7c6a67e8", @typed={0x4, 0x58}, @typed={0x8, 0x6b, 0x0, 0x0, @pid=r3}, @typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@mcast2}, @generic="4d6d1b5e3eaa8c039936872d505a450badbb410f241d432316c09c0c9fb967c1bf318673929173ac0b98c1a860e9c292e6024492803ab040f3b7d5987b6e5bc369d6d12f2647f50306e91220b5ddac2190520e9b139ac084e2a9b451e82c0b7a91505cb171f6d8769cf868e6b27d2b15b72a1a36ee1294474b32aebabef9cdc63c4c35f0fd3e3d8f970a14"]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f00000000c0)="7ee87bcb4a12717b7e4fecb1a509469ba6c16525e8dcba7a99737a314ab0181b6084e973ddd9cbfc9a010a98a1a3216dd72d5f2dcbb168409ecc370b0a6635d397aa8a5c44e422a7d183cab3ec70a0dd01a886118c30d7ab8db4b0b6b9b0678ee88c85c16745013d53ea2da5dd4f2a291661a521c2835668dbb7f989a19b71d15abe144a20999fc03e1d60e6d93696032a75daa3ca690400c9d4d9ff7c64e32427d39d2130fc2222ae088ee8b9b5d474580338c25918a8c7dc40fbd9baaecab85c1e41987e6be81ef5c0b1e965", 0xcd) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 00:28:06 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 11) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:06 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 13) 00:28:06 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 7) 00:28:06 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:28:06 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4ba", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3079.952673] nfs: Bad value for 'rootcontext' [ 3079.963040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3080.011112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3080.012713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3080.015201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:28:06 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x68, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:28:06 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 8) [ 3080.083286] FAULT_INJECTION: forcing a failure. [ 3080.083286] name failslab, interval 1, probability 0, space 0, times 0 [ 3080.085087] CPU: 0 PID: 134063 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3080.086171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3080.087460] Call Trace: [ 3080.087874] dump_stack+0x107/0x167 [ 3080.088448] should_fail.cold+0x5/0xa [ 3080.089045] ? security_inode_alloc+0x34/0x160 [ 3080.089755] should_failslab+0x5/0x20 [ 3080.090357] kmem_cache_alloc+0x5b/0x310 [ 3080.090993] security_inode_alloc+0x34/0x160 [ 3080.091736] inode_init_always+0xa4e/0xd10 [ 3080.092398] alloc_inode+0x84/0x240 [ 3080.093005] new_inode+0x23/0x250 [ 3080.093547] __ext4_new_inode+0x32c/0x5370 [ 3080.094263] ? avc_has_extended_perms+0xf40/0xf40 [ 3080.095086] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3080.095902] ? dquot_initialize_needed+0x290/0x290 [ 3080.096716] ? selinux_determine_inode_label+0x1ab/0x340 [ 3080.097629] ext4_mkdir+0x32c/0xb10 [ 3080.098236] ? ext4_rmdir+0xf70/0xf70 [ 3080.098882] vfs_mkdir+0x493/0x750 [ 3080.099479] do_mkdirat+0x150/0x2b0 [ 3080.100074] ? user_path_create+0xf0/0xf0 [ 3080.100726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3080.101582] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3080.102435] do_syscall_64+0x33/0x40 [ 3080.103058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3080.103899] RIP: 0033:0x7f909c7eac27 [ 3080.104507] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3080.107526] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3080.108781] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3080.109947] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3080.111133] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3080.112310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3080.113482] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 00:28:19 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 9) 00:28:19 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:19 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3092.720399] FAULT_INJECTION: forcing a failure. [ 3092.720399] name failslab, interval 1, probability 0, space 0, times 0 [ 3092.722935] CPU: 1 PID: 134080 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3092.724420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3092.726160] Call Trace: [ 3092.726720] dump_stack+0x107/0x167 [ 3092.727496] should_fail.cold+0x5/0xa [ 3092.728297] ? create_object.isra.0+0x3a/0xa20 [ 3092.729262] should_failslab+0x5/0x20 [ 3092.730060] kmem_cache_alloc+0x5b/0x310 [ 3092.730917] create_object.isra.0+0x3a/0xa20 [ 3092.731840] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3092.732913] kmem_cache_alloc+0x159/0x310 [ 3092.733792] security_inode_alloc+0x34/0x160 [ 3092.734717] inode_init_always+0xa4e/0xd10 [ 3092.735625] alloc_inode+0x84/0x240 [ 3092.736392] new_inode+0x23/0x250 [ 3092.736446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3092.737122] __ext4_new_inode+0x32c/0x5370 [ 3092.737141] ? avc_has_extended_perms+0xf40/0xf40 [ 3092.737183] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3092.737213] ? dquot_initialize_needed+0x290/0x290 [ 3092.742826] ? selinux_determine_inode_label+0x1ab/0x340 [ 3092.743986] ext4_mkdir+0x32c/0xb10 [ 3092.744766] ? ext4_rmdir+0xf70/0xf70 [ 3092.745579] vfs_mkdir+0x493/0x750 [ 3092.746332] do_mkdirat+0x150/0x2b0 [ 3092.747108] ? user_path_create+0xf0/0xf0 [ 3092.747997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 00:28:19 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x68, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:28:19 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:19 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 14) 00:28:19 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c2", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:19 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3092.749539] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3092.750858] do_syscall_64+0x33/0x40 [ 3092.751666] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3092.752751] RIP: 0033:0x7f909c7eac27 [ 3092.753539] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3092.757446] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3092.759064] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3092.760587] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3092.762099] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3092.763627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3092.765142] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 00:28:19 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x74, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3092.800269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3092.810494] FAULT_INJECTION: forcing a failure. [ 3092.810494] name failslab, interval 1, probability 0, space 0, times 0 [ 3092.812939] CPU: 1 PID: 134097 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3092.814431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3092.816203] Call Trace: [ 3092.816763] dump_stack+0x107/0x167 [ 3092.817536] should_fail.cold+0x5/0xa [ 3092.818345] ? legacy_init_fs_context+0x44/0xe0 [ 3092.819334] should_failslab+0x5/0x20 [ 3092.820154] kmem_cache_alloc_trace+0x55/0x320 [ 3092.821124] ? lockdep_init_map_type+0x2c7/0x780 [ 3092.822138] legacy_init_fs_context+0x44/0xe0 [ 3092.823079] ? generic_parse_monolithic+0x1f0/0x1f0 [ 3092.824146] alloc_fs_context+0x4fd/0x840 [ 3092.825031] path_mount+0xaa3/0x2120 [ 3092.825838] ? strncpy_from_user+0x9e/0x470 [ 3092.826747] ? finish_automount+0xa90/0xa90 [ 3092.827668] ? getname_flags.part.0+0x1dd/0x4f0 [ 3092.828652] ? _copy_from_user+0xfb/0x1b0 [ 3092.829541] __x64_sys_mount+0x282/0x300 [ 3092.830396] ? copy_mnt_ns+0xa00/0xa00 [ 3092.831223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3092.832337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3092.833437] do_syscall_64+0x33/0x40 [ 3092.834248] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3092.835333] RIP: 0033:0x7f070967ab19 [ 3092.836127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3092.840037] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3092.841651] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3092.843155] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3092.844676] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3092.846187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3092.847705] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3092.855442] FAULT_INJECTION: forcing a failure. [ 3092.855442] name failslab, interval 1, probability 0, space 0, times 0 [ 3092.858218] CPU: 1 PID: 134095 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3092.859729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3092.861494] Call Trace: [ 3092.862052] dump_stack+0x107/0x167 [ 3092.862832] should_fail.cold+0x5/0xa [ 3092.863662] ? __sta_info_destroy_part2+0x2b1/0x4f0 [ 3092.864530] nfs: Bad value for 'rootcontext' [ 3092.864724] should_failslab+0x5/0x20 [ 3092.866522] kmem_cache_alloc_trace+0x55/0x320 [ 3092.867509] __sta_info_destroy_part2+0x2b1/0x4f0 [ 3092.868541] __sta_info_flush+0x3a0/0x520 [ 3092.869432] ? __sta_info_destroy+0x50/0x50 [ 3092.870350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3092.871475] ? trace_hardirqs_on+0x5b/0x180 [ 3092.872397] ? cfg80211_put_bss+0x1b0/0x270 [ 3092.873316] ? __local_bh_enable_ip+0x9d/0x100 [ 3092.874297] ieee80211_ibss_disconnect+0x115/0x750 [ 3092.875341] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3092.876472] ieee80211_ibss_leave+0x12/0x160 [ 3092.877410] __cfg80211_leave_ibss+0x183/0x4f0 [ 3092.878390] __cfg80211_leave+0x14b/0x370 [ 3092.879285] cfg80211_netdev_notifier_call+0x385/0x10c0 [ 3092.880434] ? ipmr_device_event+0x192/0x1f0 [ 3092.881392] raw_notifier_call_chain+0xb3/0x110 [ 3092.882397] call_netdevice_notifiers_info+0xba/0x130 [ 3092.883552] __dev_close_many+0xf3/0x2f0 [ 3092.884417] ? skb_crc32c_csum_help.part.0+0x4d0/0x4d0 [ 3092.885534] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3092.886642] ? __local_bh_enable_ip+0x9d/0x100 [ 3092.887618] ? trace_hardirqs_on+0x5b/0x180 [ 3092.888538] __dev_change_flags+0x299/0x6e0 [ 3092.889452] ? dev_set_allmulti+0x30/0x30 [ 3092.890339] dev_change_flags+0x8a/0x160 [ 3092.891204] do_setlink+0x911/0x3ac0 [ 3092.892013] ? vprintk_func+0x93/0x140 [ 3092.892839] ? rtnl_getlink+0xaa0/0xaa0 [ 3092.893673] ? printk+0xba/0xf1 [ 3092.894375] ? record_print_text.cold+0x16/0x16 [ 3092.895359] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3092.896434] ? trace_hardirqs_on+0x5b/0x180 [ 3092.897362] ? __nla_validate_parse+0x2d8/0x2b10 [ 3092.898375] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3092.899500] ? nla_get_range_signed+0x520/0x520 [ 3092.900483] ? __lock_acquire+0xbb1/0x5b00 [ 3092.901402] __rtnl_newlink+0xc3e/0x1700 [ 3092.902276] ? rtnl_setlink+0x3c0/0x3c0 [ 3092.903120] ? __is_insn_slot_addr+0x123/0x290 [ 3092.904103] ? unwind_next_frame+0x13ef/0x1a90 00:28:19 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7a, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3092.905069] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3092.906409] ? 0xffffffffa0000000 [ 3092.907143] ? __is_insn_slot_addr+0x14c/0x290 [ 3092.908122] ? kernel_text_address+0xf2/0x120 [ 3092.909076] ? __kernel_text_address+0x9/0x40 [ 3092.910021] ? unwind_get_return_address+0x55/0xa0 [ 3092.911056] ? create_prof_cpu_mask+0x20/0x20 [ 3092.912017] ? arch_stack_walk+0x99/0xf0 [ 3092.912890] ? stack_trace_save+0x8c/0xc0 [ 3092.913825] ? mark_held_locks+0x9e/0xe0 [ 3092.914685] ? trace_hardirqs_on+0x5b/0x180 [ 3092.915602] ? kasan_unpoison_shadow+0x33/0x50 [ 3092.916564] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3092.917642] rtnl_newlink+0x64/0xa0 [ 3092.918405] ? __rtnl_newlink+0x1700/0x1700 [ 3092.919317] rtnetlink_rcv_msg+0x423/0xbb0 [ 3092.920216] ? rtnl_fdb_dump+0xa30/0xa30 [ 3092.921085] ? lock_acquire+0x197/0x470 [ 3092.921922] ? netlink_deliver_tap+0xf4/0xcc0 [ 3092.922876] netlink_rcv_skb+0x14b/0x430 00:28:19 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 10) [ 3092.923740] ? rtnl_fdb_dump+0xa30/0xa30 [ 3092.924718] ? netlink_ack+0xab0/0xab0 [ 3092.925538] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3092.926508] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3092.927483] ? is_vmalloc_addr+0x7b/0xb0 [ 3092.928340] netlink_unicast+0x54e/0x800 [ 3092.929203] ? netlink_attachskb+0x870/0x870 [ 3092.930141] netlink_sendmsg+0x90f/0xe00 [ 3092.931005] ? netlink_unicast+0x800/0x800 [ 3092.931923] ? netlink_unicast+0x800/0x800 [ 3092.932817] __sock_sendmsg+0x154/0x190 [ 3092.933657] ____sys_sendmsg+0x70d/0x870 [ 3092.934512] ? sock_write_iter+0x3d0/0x3d0 [ 3092.935405] ? do_recvmmsg+0x6d0/0x6d0 [ 3092.936244] ? lock_downgrade+0x6d0/0x6d0 [ 3092.937127] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3092.938239] ___sys_sendmsg+0xf3/0x170 [ 3092.939066] ? sendmsg_copy_msghdr+0x160/0x160 [ 3092.940049] ? __fget_files+0x2cf/0x520 [ 3092.940886] ? lock_downgrade+0x6d0/0x6d0 [ 3092.941757] ? find_held_lock+0x2c/0x110 [ 3092.942627] ? __fget_files+0x2f8/0x520 [ 3092.943487] ? __fget_light+0xea/0x290 [ 3092.944314] __sys_sendmsg+0xe5/0x1b0 [ 3092.945121] ? __sys_sendmsg_sock+0x40/0x40 [ 3092.946031] ? rcu_read_lock_any_held+0x75/0xa0 [ 3092.947027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3092.948144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3092.949229] ? trace_hardirqs_on+0x5b/0x180 [ 3092.950139] do_syscall_64+0x33/0x40 [ 3092.950929] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3092.952019] RIP: 0033:0x7f8f5b2cdb19 [ 3092.952802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3092.956700] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3092.958308] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3092.959815] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3092.961336] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3092.962865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3092.964380] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 00:28:19 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x68, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3093.006168] FAULT_INJECTION: forcing a failure. [ 3093.006168] name failslab, interval 1, probability 0, space 0, times 0 [ 3093.008537] CPU: 0 PID: 134308 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3093.009978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3093.011685] Call Trace: [ 3093.012236] dump_stack+0x107/0x167 [ 3093.012989] should_fail.cold+0x5/0xa [ 3093.013786] ? jbd2__journal_start+0x190/0x7e0 [ 3093.014729] should_failslab+0x5/0x20 [ 3093.015521] kmem_cache_alloc+0x5b/0x310 [ 3093.016364] jbd2__journal_start+0x190/0x7e0 [ 3093.017271] __ext4_journal_start_sb+0x214/0x390 [ 3093.018253] __ext4_new_inode+0x2e0b/0x5370 [ 3093.019152] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3093.020158] ? dquot_initialize_needed+0x290/0x290 [ 3093.021165] ? selinux_determine_inode_label+0x1ab/0x340 [ 3093.022278] ext4_mkdir+0x32c/0xb10 [ 3093.023036] ? ext4_rmdir+0xf70/0xf70 [ 3093.023837] vfs_mkdir+0x493/0x750 [ 3093.024569] do_mkdirat+0x150/0x2b0 [ 3093.025318] ? user_path_create+0xf0/0xf0 [ 3093.026177] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3093.027248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3093.028313] do_syscall_64+0x33/0x40 [ 3093.029069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3093.030130] RIP: 0033:0x7f909c7eac27 [ 3093.030897] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3093.034644] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3093.036211] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3093.037677] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3093.039133] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3093.040597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3093.042057] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3093.043609] EXT4-fs error (device sda) in __ext4_new_inode:1086: Out of memory [ 3093.057296] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3093.059547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3093.063618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3093.065127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3093.072926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3093.164082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3093.165792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3093.167339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3106.928807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3106.932093] FAULT_INJECTION: forcing a failure. [ 3106.932093] name failslab, interval 1, probability 0, space 0, times 0 [ 3106.934703] CPU: 0 PID: 134323 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3106.936508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3106.938609] Call Trace: [ 3106.939286] dump_stack+0x107/0x167 [ 3106.940237] should_fail.cold+0x5/0xa [ 3106.941217] ? create_object.isra.0+0x3a/0xa20 [ 3106.942387] should_failslab+0x5/0x20 [ 3106.943388] kmem_cache_alloc+0x5b/0x310 [ 3106.944065] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3106.944351] create_object.isra.0+0x3a/0xa20 [ 3106.946538] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3106.947863] kmem_cache_alloc+0x159/0x310 [ 3106.948955] jbd2__journal_start+0x190/0x7e0 [ 3106.950089] __ext4_journal_start_sb+0x214/0x390 [ 3106.951315] __ext4_new_inode+0x2e0b/0x5370 [ 3106.952468] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3106.953730] ? dquot_initialize_needed+0x290/0x290 [ 3106.955000] ? selinux_determine_inode_label+0x1ab/0x340 [ 3106.956197] ext4_mkdir+0x32c/0xb10 [ 3106.957150] ? ext4_rmdir+0xf70/0xf70 [ 3106.958147] vfs_mkdir+0x493/0x750 [ 3106.959068] do_mkdirat+0x150/0x2b0 [ 3106.960008] ? user_path_create+0xf0/0xf0 [ 3106.961277] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3106.962628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3106.963966] do_syscall_64+0x33/0x40 [ 3106.964928] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3106.966238] RIP: 0033:0x7f909c7eac27 [ 3106.967196] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3106.971913] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3106.973861] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3106.975687] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3106.977534] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3106.979372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3106.981237] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3106.988631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3106.990530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3106.999153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3107.002304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:28:33 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 11) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:33 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c2", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:33 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x99, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:28:33 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 11) 00:28:33 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x68, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:28:33 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 15) 00:28:33 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:33 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, 0x26, 0x101, 0x0, 0x0, {}, [@typed={0x90, 0x64, 0x0, 0x0, @binary="a0eab51f24f4074cfbfbbb07324cc62f701d9f2905855dd18b1f0d5ce7f3493090af5beef11c281fbcc10f4675223ffc29811a6d82c0c17acd7a40480a51d57b2b3cc217bf3558b4d61924aa0922349a895d495ac12b16cb2b0cb00a0c3d1fb5b695cfebd4ad94d1a5642d3ec010c0792e9f8a9bff9bc38d6a5f4c42eb9238b7bc3a2be2cefbfd2d17065093"}]}, 0xa4}, 0x1, 0x0, 0x0, 0xb0}, 0x8044) gettid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x64b7, 0x5, &(0x7f0000000400)=[{&(0x7f0000000140)="2219859e1a7bd586fd422ff5f866fc60398e49c343acfed3d516c9548abcf953e842a8fc3f088aa9e7edd783360d287516d3aa79608299a2f99a821106b19e33c9357650b34095771199b538c25c95ad545715a2791a437de1811a811fc81a", 0x5f, 0x7ff}, {&(0x7f00000001c0)="cfb88035f6beab31ad22663958cee10bf870d2db58d5b9ca64211184c3dd6c2d03bde43d677eb3b82e42435539bdcaba486f73c4e8ac44cfbd68eed7da3374b292f8f2efddc63831367ca42392831a5f8487086d004640b82829ea7e88c3e9fb0630ef7971137fc5e32cd7d05b16135e11e9574bf96b6fe356884bf9a574d62ff602fb1009bfb3ed8463a597b1ed5201315de6ca38a592219e3d7eaf731290c7b73eb866f615b86e63173dcac3e569adfbf162a8e1c06b3c8ed1537186d1a485710a3d4b63bf701e3510b406b8cf735e060140ee999f7e888d3d818fb3e93cfc755e75eb75", 0xe5, 0x5}, {&(0x7f00000002c0)="655866ad2a548712830bec401abaab8d4b61287dd2e2bc9fe92b143183ebf37a1f9ed8bdbb51eeaf2812cafd35ba0661be1d7e6350eb50a02b04635b0864945fff822fc9c9d52def2876444045564b0038cb11b466924efb04f346292a5b83304b977972b8d27ca6643803d406e465d9597341569e742a69fc45eba6146089b034f6db59a119431ae039884c428cbc8f2cf3bdafdf63992d6eafc6179b9c48b859ad09a6147306384638143c5cce235601917c55929c7be383178b0def6347b946eb7fcb906fe1fb096e5fe849e95724096bc65e5a38c1c8397d9c494ea8c9761df8b6208102e8ebd7743e95f05a04e93991e26fd90f67e734", 0xf9, 0x101}, {&(0x7f00000003c0)="faae155e803312f71d5567355e1f743bde63f0594a8078806c26cf647eef394934fe939c37465b", 0x27, 0xfffffffffffffff9}, {&(0x7f0000000600)="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", 0x1000, 0x8001}], 0x0, &(0x7f0000001600)={[{@map_normal}, {@hide}], [{@obj_role={'obj_role', 0x3d, '%!'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@seclabel}, {@fsname={'fsname', 0x3d, ')'}}, {@dont_measure}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001680)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x604}, 0x1}, 0x4) r2 = fork() ptrace$setopts(0x4206, r2, 0x10001, 0x10002d) ptrace(0x10, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x0) ptrace$cont(0x7, r2, 0x8, 0x8) wait4(0x0, &(0x7f0000000040), 0x80000000, &(0x7f0000000540)) [ 3107.027345] FAULT_INJECTION: forcing a failure. [ 3107.027345] name failslab, interval 1, probability 0, space 0, times 0 [ 3107.030265] CPU: 0 PID: 134338 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3107.032064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3107.034186] Call Trace: [ 3107.034857] dump_stack+0x107/0x167 [ 3107.035810] should_fail.cold+0x5/0xa [ 3107.036782] ? create_object.isra.0+0x3a/0xa20 [ 3107.037971] should_failslab+0x5/0x20 [ 3107.038956] kmem_cache_alloc+0x5b/0x310 [ 3107.040007] ? cred_has_capability.isra.0+0x152/0x2b0 [ 3107.041341] create_object.isra.0+0x3a/0xa20 [ 3107.042460] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3107.043038] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3107.043783] kmem_cache_alloc_trace+0x151/0x320 [ 3107.043812] ? v9fs_write_inode+0x60/0x60 [ 3107.046886] v9fs_mount+0x5a/0x8f0 [ 3107.047825] ? v9fs_write_inode+0x60/0x60 [ 3107.048903] legacy_get_tree+0x105/0x220 [ 3107.049955] vfs_get_tree+0x8e/0x300 [ 3107.050921] path_mount+0x1429/0x2120 [ 3107.052011] ? strncpy_from_user+0x9e/0x470 [ 3107.053078] ? finish_automount+0xa90/0xa90 [ 3107.054142] ? getname_flags.part.0+0x1dd/0x4f0 [ 3107.055292] ? _copy_from_user+0xfb/0x1b0 [ 3107.056303] __x64_sys_mount+0x282/0x300 [ 3107.057154] ? copy_mnt_ns+0xa00/0xa00 [ 3107.057889] loop5: detected capacity change from 0 to 8388096 [ 3107.057979] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.058004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3107.060837] do_syscall_64+0x33/0x40 [ 3107.061622] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3107.062694] RIP: 0033:0x7f070967ab19 [ 3107.063487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3107.067339] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3107.067999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3107.068926] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3107.068936] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3107.068946] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3107.068956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3107.068971] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3107.069801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3107.076452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3107.088161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3107.104463] FAULT_INJECTION: forcing a failure. [ 3107.104463] name failslab, interval 1, probability 0, space 0, times 0 [ 3107.107098] CPU: 0 PID: 134329 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3107.108587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3107.110323] Call Trace: [ 3107.110877] dump_stack+0x107/0x167 [ 3107.111642] should_fail.cold+0x5/0xa [ 3107.112040] nfs: Bad value for 'rootcontext' [ 3107.112458] ? create_object.isra.0+0x3a/0xa20 [ 3107.113923] should_failslab+0x5/0x20 [ 3107.114718] kmem_cache_alloc+0x5b/0x310 [ 3107.115579] create_object.isra.0+0x3a/0xa20 [ 3107.116507] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3107.117594] kmem_cache_alloc_trace+0x151/0x320 [ 3107.117793] 9pnet: Insufficient options for proto=fd [ 3107.118573] __sta_info_destroy_part2+0x2b1/0x4f0 [ 3107.120148] ? __sta_info_flush+0x34a/0x520 [ 3107.121052] __sta_info_flush+0x3a0/0x520 [ 3107.121929] ? __sta_info_destroy+0x50/0x50 [ 3107.122831] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.123937] ? trace_hardirqs_on+0x5b/0x180 [ 3107.124838] ? cfg80211_put_bss+0x1b0/0x270 [ 3107.125739] ? __local_bh_enable_ip+0x9d/0x100 [ 3107.126704] ieee80211_ibss_disconnect+0x115/0x750 [ 3107.127751] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.128853] ieee80211_ibss_leave+0x12/0x160 [ 3107.129776] __cfg80211_leave_ibss+0x183/0x4f0 [ 3107.130738] __cfg80211_leave+0x14b/0x370 [ 3107.131610] cfg80211_netdev_notifier_call+0x385/0x10c0 [ 3107.132739] ? ipmr_device_event+0x192/0x1f0 [ 3107.133666] raw_notifier_call_chain+0xb3/0x110 [ 3107.134650] call_netdevice_notifiers_info+0xba/0x130 [ 3107.135735] __dev_close_many+0xf3/0x2f0 [ 3107.136588] ? skb_crc32c_csum_help.part.0+0x4d0/0x4d0 [ 3107.137687] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.138782] ? __local_bh_enable_ip+0x9d/0x100 [ 3107.139748] ? trace_hardirqs_on+0x5b/0x180 [ 3107.140655] __dev_change_flags+0x299/0x6e0 [ 3107.141563] ? dev_set_allmulti+0x30/0x30 [ 3107.142445] dev_change_flags+0x8a/0x160 [ 3107.143296] do_setlink+0x911/0x3ac0 [ 3107.144093] ? vprintk_func+0x93/0x140 [ 3107.144908] ? rtnl_getlink+0xaa0/0xaa0 [ 3107.145741] ? printk+0xba/0xf1 [ 3107.146434] ? record_print_text.cold+0x16/0x16 [ 3107.147418] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3107.148488] ? trace_hardirqs_on+0x5b/0x180 [ 3107.149409] ? __nla_validate_parse+0x2d8/0x2b10 [ 3107.150415] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3107.151519] ? nla_get_range_signed+0x520/0x520 [ 3107.152511] ? __lock_acquire+0xbb1/0x5b00 [ 3107.153420] __rtnl_newlink+0xc3e/0x1700 [ 3107.154286] ? rtnl_setlink+0x3c0/0x3c0 00:28:33 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 16) 00:28:33 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 12) [ 3107.155122] ? __is_insn_slot_addr+0x123/0x290 [ 3107.156445] ? unwind_next_frame+0x13ef/0x1a90 [ 3107.157413] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3107.158539] ? 0xffffffffa0000000 [ 3107.159273] ? __is_insn_slot_addr+0x14c/0x290 [ 3107.160251] ? kernel_text_address+0xf2/0x120 [ 3107.161200] ? __kernel_text_address+0x9/0x40 [ 3107.162147] ? unwind_get_return_address+0x55/0xa0 [ 3107.163171] ? create_prof_cpu_mask+0x20/0x20 [ 3107.164130] ? arch_stack_walk+0x99/0xf0 [ 3107.165005] ? stack_trace_save+0x8c/0xc0 [ 3107.165948] ? mark_held_locks+0x9e/0xe0 [ 3107.166824] ? trace_hardirqs_on+0x5b/0x180 [ 3107.167738] ? kasan_unpoison_shadow+0x33/0x50 00:28:33 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3107.168696] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3107.169822] rtnl_newlink+0x64/0xa0 [ 3107.170597] ? __rtnl_newlink+0x1700/0x1700 [ 3107.171502] rtnetlink_rcv_msg+0x423/0xbb0 [ 3107.172401] ? rtnl_fdb_dump+0xa30/0xa30 [ 3107.173258] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3107.174412] ? rtnl_fdb_dump+0xa30/0xa30 [ 3107.175276] netlink_rcv_skb+0x14b/0x430 [ 3107.176137] ? rtnl_fdb_dump+0xa30/0xa30 [ 3107.176997] ? netlink_ack+0xab0/0xab0 [ 3107.177819] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3107.178968] ? rtnl_fdb_dump+0xa30/0xa30 [ 3107.179836] netlink_unicast+0x54e/0x800 [ 3107.180711] ? netlink_attachskb+0x870/0x870 [ 3107.181280] FAULT_INJECTION: forcing a failure. [ 3107.181280] name failslab, interval 1, probability 0, space 0, times 0 [ 3107.181652] netlink_sendmsg+0x90f/0xe00 [ 3107.181678] ? netlink_unicast+0x800/0x800 [ 3107.184675] ? netlink_unicast+0x800/0x800 [ 3107.185557] __sock_sendmsg+0x154/0x190 [ 3107.186384] ____sys_sendmsg+0x70d/0x870 [ 3107.187231] ? sock_write_iter+0x3d0/0x3d0 [ 3107.188118] ? do_recvmmsg+0x6d0/0x6d0 [ 3107.188928] ? lock_downgrade+0x6d0/0x6d0 [ 3107.189798] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3107.190895] ___sys_sendmsg+0xf3/0x170 [ 3107.191718] ? sendmsg_copy_msghdr+0x160/0x160 [ 3107.192667] ? __fget_files+0x2cf/0x520 [ 3107.193492] ? lock_downgrade+0x6d0/0x6d0 [ 3107.194355] ? find_held_lock+0x2c/0x110 [ 3107.195208] ? __fget_files+0x2f8/0x520 [ 3107.196052] ? __fget_light+0xea/0x290 [ 3107.196868] __sys_sendmsg+0xe5/0x1b0 [ 3107.197660] ? __sys_sendmsg_sock+0x40/0x40 [ 3107.198552] ? rcu_read_lock_any_held+0x75/0xa0 [ 3107.199539] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.200637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3107.201703] ? trace_hardirqs_on+0x5b/0x180 [ 3107.202601] do_syscall_64+0x33/0x40 [ 3107.203371] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3107.204440] RIP: 0033:0x7f8f5b2cdb19 [ 3107.205216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3107.209068] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3107.210653] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3107.212149] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3107.213631] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3107.215108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3107.216593] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 [ 3107.218099] CPU: 1 PID: 134517 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3107.218936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3107.219886] Call Trace: [ 3107.220195] dump_stack+0x107/0x167 [ 3107.220607] should_fail.cold+0x5/0xa [ 3107.221042] ? create_object.isra.0+0x3a/0xa20 [ 3107.221596] should_failslab+0x5/0x20 [ 3107.222033] kmem_cache_alloc+0x5b/0x310 [ 3107.222497] create_object.isra.0+0x3a/0xa20 [ 3107.222991] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3107.223569] kmem_cache_alloc+0x159/0x310 [ 3107.224046] jbd2__journal_start+0x190/0x7e0 [ 3107.224544] __ext4_journal_start_sb+0x214/0x390 [ 3107.225087] __ext4_new_inode+0x2e0b/0x5370 [ 3107.225606] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3107.226170] ? dquot_initialize_needed+0x290/0x290 [ 3107.226744] ? selinux_determine_inode_label+0x1ab/0x340 [ 3107.227364] ext4_mkdir+0x32c/0xb10 [ 3107.227802] ? ext4_rmdir+0xf70/0xf70 [ 3107.228250] vfs_mkdir+0x493/0x750 [ 3107.228660] do_mkdirat+0x150/0x2b0 [ 3107.229072] ? user_path_create+0xf0/0xf0 [ 3107.229554] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.230149] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3107.230740] do_syscall_64+0x33/0x40 [ 3107.231166] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3107.231757] RIP: 0033:0x7f909c7eac27 [ 3107.232180] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3107.234258] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3107.235122] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3107.235951] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3107.236752] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3107.237550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3107.238361] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 00:28:33 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x199, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3107.262075] FAULT_INJECTION: forcing a failure. [ 3107.262075] name failslab, interval 1, probability 0, space 0, times 0 [ 3107.264690] CPU: 0 PID: 134553 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3107.266165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3107.267953] Call Trace: [ 3107.268508] dump_stack+0x107/0x167 [ 3107.269276] should_fail.cold+0x5/0xa [ 3107.270078] ? v9fs_mount+0x5a/0x8f0 [ 3107.270854] should_failslab+0x5/0x20 [ 3107.271656] kmem_cache_alloc_trace+0x55/0x320 [ 3107.272623] ? v9fs_write_inode+0x60/0x60 [ 3107.273484] v9fs_mount+0x5a/0x8f0 [ 3107.274228] ? v9fs_write_inode+0x60/0x60 [ 3107.275100] legacy_get_tree+0x105/0x220 [ 3107.275958] vfs_get_tree+0x8e/0x300 [ 3107.276735] path_mount+0x1429/0x2120 [ 3107.277536] ? strncpy_from_user+0x9e/0x470 [ 3107.278436] ? finish_automount+0xa90/0xa90 [ 3107.279347] ? getname_flags.part.0+0x1dd/0x4f0 [ 3107.280328] ? _copy_from_user+0xfb/0x1b0 [ 3107.281196] __x64_sys_mount+0x282/0x300 [ 3107.282049] ? copy_mnt_ns+0xa00/0xa00 [ 3107.282872] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.283981] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3107.285054] do_syscall_64+0x33/0x40 [ 3107.285832] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3107.286904] RIP: 0033:0x7f070967ab19 [ 3107.287690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3107.291525] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3107.293120] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3107.294604] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3107.296107] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3107.297591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3107.299070] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 00:28:33 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x299, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3107.308570] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3107.314952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3107.315267] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3107.316570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3107.319300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3107.322968] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3107.335156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3107.336026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3107.337011] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3107.366409] nfs: Bad value for 'rootcontext' 00:28:33 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:33 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r2, 0x2ff, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000380)=@random='y', 0x1, 0x0) 00:28:33 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 12) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:33 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:33 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c2", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:33 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 17) [ 3107.426875] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3107.432864] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:33 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 13) [ 3107.446997] FAULT_INJECTION: forcing a failure. [ 3107.446997] name failslab, interval 1, probability 0, space 0, times 0 [ 3107.448487] CPU: 1 PID: 134669 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3107.449286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3107.450228] Call Trace: [ 3107.450534] dump_stack+0x107/0x167 [ 3107.450951] should_fail.cold+0x5/0xa [ 3107.451402] ? cfg80211_sinfo_alloc_tid_stats+0x8f/0x110 [ 3107.452025] should_failslab+0x5/0x20 [ 3107.452461] kmem_cache_alloc_trace+0x55/0x320 [ 3107.452996] cfg80211_sinfo_alloc_tid_stats+0x8f/0x110 [ 3107.453596] sta_set_sinfo+0x2040/0x35c0 [ 3107.454057] ? kasan_unpoison_shadow+0x33/0x50 [ 3107.454574] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3107.455153] __sta_info_destroy_part2+0x2ce/0x4f0 [ 3107.455707] __sta_info_flush+0x3a0/0x520 [ 3107.456181] ? __sta_info_destroy+0x50/0x50 [ 3107.456673] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.457286] ? trace_hardirqs_on+0x5b/0x180 [ 3107.457776] ? cfg80211_put_bss+0x1b0/0x270 [ 3107.458277] ? __local_bh_enable_ip+0x9d/0x100 [ 3107.458802] ieee80211_ibss_disconnect+0x115/0x750 [ 3107.459364] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.459988] ieee80211_ibss_leave+0x12/0x160 [ 3107.460489] __cfg80211_leave_ibss+0x183/0x4f0 [ 3107.461007] __cfg80211_leave+0x14b/0x370 [ 3107.461486] cfg80211_netdev_notifier_call+0x385/0x10c0 [ 3107.462096] ? ipmr_device_event+0x192/0x1f0 [ 3107.462607] raw_notifier_call_chain+0xb3/0x110 [ 3107.463147] call_netdevice_notifiers_info+0xba/0x130 [ 3107.463743] __dev_close_many+0xf3/0x2f0 [ 3107.464221] ? skb_crc32c_csum_help.part.0+0x4d0/0x4d0 [ 3107.464819] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.465420] ? __local_bh_enable_ip+0x9d/0x100 [ 3107.465950] ? trace_hardirqs_on+0x5b/0x180 [ 3107.466448] __dev_change_flags+0x299/0x6e0 [ 3107.466946] ? dev_set_allmulti+0x30/0x30 [ 3107.467421] ? mark_lock+0xf5/0x2df0 [ 3107.467853] dev_change_flags+0x8a/0x160 [ 3107.468331] do_setlink+0x911/0x3ac0 [ 3107.468758] ? ___ratelimit+0x29a/0x440 [ 3107.469214] ? rtnl_getlink+0xaa0/0xaa0 [ 3107.469667] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.470262] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3107.470846] ? trace_hardirqs_on+0x5b/0x180 [ 3107.471340] ? ___ratelimit+0x1fc/0x440 [ 3107.471800] ? __nla_validate_parse+0x2d8/0x2b10 [ 3107.472347] ? lock_chain_count+0x20/0x20 [ 3107.472814] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3107.473409] ? nla_get_range_signed+0x520/0x520 [ 3107.473935] ? __lock_acquire+0xbb1/0x5b00 [ 3107.474427] __rtnl_newlink+0xc3e/0x1700 [ 3107.474897] ? rtnl_setlink+0x3c0/0x3c0 [ 3107.475358] ? __is_insn_slot_addr+0x123/0x290 [ 3107.475902] ? unwind_next_frame+0x13ef/0x1a90 [ 3107.476423] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3107.477038] ? 0xffffffffa0000000 [ 3107.477443] ? __is_insn_slot_addr+0x14c/0x290 [ 3107.477977] ? kernel_text_address+0xf2/0x120 [ 3107.478490] ? __kernel_text_address+0x9/0x40 [ 3107.479010] ? unwind_get_return_address+0x55/0xa0 [ 3107.479585] ? create_prof_cpu_mask+0x20/0x20 [ 3107.480123] ? arch_stack_walk+0x99/0xf0 [ 3107.480607] ? stack_trace_save+0x8c/0xc0 [ 3107.481125] ? kasan_unpoison_shadow+0x33/0x50 [ 3107.481656] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3107.482236] rtnl_newlink+0x64/0xa0 [ 3107.482657] ? __rtnl_newlink+0x1700/0x1700 [ 3107.483146] rtnetlink_rcv_msg+0x423/0xbb0 [ 3107.483641] ? rtnl_fdb_dump+0xa30/0xa30 [ 3107.484122] ? lock_acquire+0x197/0x470 [ 3107.484576] ? netlink_deliver_tap+0xf4/0xcc0 [ 3107.485091] netlink_rcv_skb+0x14b/0x430 [ 3107.485552] ? rtnl_fdb_dump+0xa30/0xa30 [ 3107.486013] ? netlink_ack+0xab0/0xab0 [ 3107.486453] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3107.486618] FAULT_INJECTION: forcing a failure. [ 3107.486618] name failslab, interval 1, probability 0, space 0, times 0 [ 3107.486976] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3107.486989] ? is_vmalloc_addr+0x7b/0xb0 [ 3107.487003] netlink_unicast+0x54e/0x800 [ 3107.487022] ? netlink_attachskb+0x870/0x870 [ 3107.487040] netlink_sendmsg+0x90f/0xe00 [ 3107.487056] ? netlink_unicast+0x800/0x800 [ 3107.492418] ? netlink_unicast+0x800/0x800 [ 3107.492909] __sock_sendmsg+0x154/0x190 [ 3107.493370] ____sys_sendmsg+0x70d/0x870 [ 3107.493839] ? sock_write_iter+0x3d0/0x3d0 [ 3107.494338] ? do_recvmmsg+0x6d0/0x6d0 [ 3107.494795] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3107.495407] ___sys_sendmsg+0xf3/0x170 [ 3107.495867] ? sendmsg_copy_msghdr+0x160/0x160 [ 3107.496400] ? __fget_files+0x2cf/0x520 [ 3107.496858] ? lock_downgrade+0x6d0/0x6d0 [ 3107.497343] ? find_held_lock+0x2c/0x110 [ 3107.497819] ? __fget_files+0x2f8/0x520 [ 3107.498284] ? __fget_light+0xea/0x290 [ 3107.498738] __sys_sendmsg+0xe5/0x1b0 [ 3107.499181] ? __sys_sendmsg_sock+0x40/0x40 [ 3107.499678] ? rcu_read_lock_any_held+0x75/0xa0 [ 3107.500240] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.500846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3107.501438] ? trace_hardirqs_on+0x5b/0x180 [ 3107.501936] do_syscall_64+0x33/0x40 [ 3107.502371] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3107.502966] RIP: 0033:0x7f8f5b2cdb19 [ 3107.503406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3107.505540] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3107.506421] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3107.507244] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3107.508073] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3107.508903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3107.509729] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 [ 3107.510603] CPU: 0 PID: 134676 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3107.512115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3107.513888] Call Trace: [ 3107.514452] dump_stack+0x107/0x167 [ 3107.515228] should_fail.cold+0x5/0xa [ 3107.515508] FAULT_INJECTION: forcing a failure. [ 3107.515508] name failslab, interval 1, probability 0, space 0, times 0 [ 3107.516054] ? create_object.isra.0+0x3a/0xa20 [ 3107.516079] should_failslab+0x5/0x20 [ 3107.519085] kmem_cache_alloc+0x5b/0x310 [ 3107.519965] ? sidtab_sid2str_get+0x65/0x720 [ 3107.520905] create_object.isra.0+0x3a/0xa20 [ 3107.521846] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3107.522933] __kmalloc_track_caller+0x177/0x370 [ 3107.523931] ? sidtab_sid2str_get+0x17e/0x720 [ 3107.524901] kmemdup+0x23/0x50 [ 3107.525593] sidtab_sid2str_get+0x17e/0x720 [ 3107.526517] sidtab_entry_to_string+0x33/0x110 [ 3107.527493] security_sid_to_context_core+0x33c/0x5d0 [ 3107.528606] selinux_inode_init_security+0x4ab/0x690 [ 3107.529694] ? selinux_dentry_init_security+0x280/0x280 [ 3107.530829] ? get_cached_acl_rcu+0x120/0x120 [ 3107.531795] ? find_held_lock+0x2c/0x110 [ 3107.532671] security_inode_init_security+0x151/0x360 [ 3107.533762] ? ext4_init_acl+0x310/0x310 [ 3107.534635] ? inode_free_by_rcu+0x20/0x20 [ 3107.535554] ? chksum_update+0x4c/0xb0 [ 3107.536403] __ext4_new_inode+0x386e/0x5370 [ 3107.537350] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3107.538394] ? dquot_initialize_needed+0x290/0x290 [ 3107.539440] ? selinux_determine_inode_label+0x1ab/0x340 [ 3107.540619] ext4_mkdir+0x32c/0xb10 [ 3107.541406] ? ext4_rmdir+0xf70/0xf70 [ 3107.542228] vfs_mkdir+0x493/0x750 [ 3107.542990] do_mkdirat+0x150/0x2b0 [ 3107.543773] ? user_path_create+0xf0/0xf0 [ 3107.544660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.545774] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3107.546882] do_syscall_64+0x33/0x40 [ 3107.547675] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3107.548778] RIP: 0033:0x7f909c7eac27 [ 3107.549568] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3107.553501] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3107.555116] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3107.556637] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3107.558147] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3107.559667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3107.561192] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3107.562731] CPU: 1 PID: 134682 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3107.563549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3107.564510] Call Trace: [ 3107.564817] dump_stack+0x107/0x167 [ 3107.565240] should_fail.cold+0x5/0xa [ 3107.565687] should_failslab+0x5/0x20 [ 3107.566130] __kmalloc_track_caller+0x79/0x370 [ 3107.566659] ? v9fs_session_init+0xa7/0x1680 [ 3107.567164] ? kernel_text_address+0xf2/0x120 [ 3107.567681] kstrdup+0x36/0x70 [ 3107.568062] v9fs_session_init+0xa7/0x1680 [ 3107.568552] ? lock_release+0x680/0x680 [ 3107.569010] ? find_held_lock+0x2c/0x110 [ 3107.569487] ? kmem_cache_alloc_trace+0x151/0x320 [ 3107.570042] ? v9fs_show_options+0x690/0x690 [ 3107.570555] ? trace_hardirqs_on+0x5b/0x180 [ 3107.571054] ? kasan_unpoison_shadow+0x33/0x50 [ 3107.571582] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3107.572179] v9fs_mount+0x79/0x8f0 [ 3107.572589] ? v9fs_write_inode+0x60/0x60 [ 3107.573069] legacy_get_tree+0x105/0x220 [ 3107.573548] vfs_get_tree+0x8e/0x300 [ 3107.573978] path_mount+0x1429/0x2120 [ 3107.574419] ? strncpy_from_user+0x9e/0x470 [ 3107.574917] ? finish_automount+0xa90/0xa90 [ 3107.575425] ? getname_flags.part.0+0x1dd/0x4f0 [ 3107.575966] ? _copy_from_user+0xfb/0x1b0 [ 3107.576446] __x64_sys_mount+0x282/0x300 [ 3107.576919] ? copy_mnt_ns+0xa00/0xa00 [ 3107.577368] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3107.577970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3107.578566] do_syscall_64+0x33/0x40 [ 3107.578996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3107.579582] RIP: 0033:0x7f070967ab19 [ 3107.580019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3107.582136] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3107.583014] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3107.583854] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3107.584676] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3107.585505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3107.586330] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3107.598188] nfs: Bad value for 'rootcontext' [ 3107.609419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3107.610999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3107.613166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3107.614740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3107.616360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3107.619095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3107.625198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3107.626780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3107.630038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3107.692531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3107.694408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3107.696037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:28:47 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 14) 00:28:47 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3121.177524] FAULT_INJECTION: forcing a failure. [ 3121.177524] name failslab, interval 1, probability 0, space 0, times 0 [ 3121.179172] CPU: 1 PID: 134992 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3121.180071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3121.181121] Call Trace: [ 3121.181466] dump_stack+0x107/0x167 [ 3121.181937] should_fail.cold+0x5/0xa [ 3121.182419] ? ext4_find_extent+0xa77/0xd70 [ 3121.182965] should_failslab+0x5/0x20 [ 3121.183446] __kmalloc+0x72/0x390 [ 3121.183888] ext4_find_extent+0xa77/0xd70 [ 3121.184422] ext4_ext_map_blocks+0x1c8/0x5830 [ 3121.184998] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3121.185667] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3121.186355] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 3121.187018] ? ext4_ext_release+0x10/0x10 [ 3121.187551] ? lock_release+0x680/0x680 [ 3121.188069] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 3121.188669] ? lock_downgrade+0x6d0/0x6d0 [ 3121.189208] ? down_read+0x10f/0x430 [ 3121.189676] ? down_write+0x160/0x160 [ 3121.190162] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 3121.190754] ext4_map_blocks+0x8e1/0x1910 [ 3121.191286] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3121.191860] ? __brelse+0x84/0xa0 [ 3121.192308] ? __ext4_new_inode+0x148/0x5370 [ 3121.192890] ext4_append+0x1b8/0x4e0 [ 3121.193364] ? ext4_move_extents+0x3050/0x3050 [ 3121.193934] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3121.194552] ext4_init_new_dir+0x25e/0x4d0 [ 3121.195086] ? ext4_init_dot_dotdot+0x610/0x610 [ 3121.195672] ext4_mkdir+0x3c1/0xb10 [ 3121.196142] ? ext4_rmdir+0xf70/0xf70 [ 3121.196625] vfs_mkdir+0x493/0x750 [ 3121.197073] do_mkdirat+0x150/0x2b0 [ 3121.197528] ? user_path_create+0xf0/0xf0 [ 3121.198051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3121.198714] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3121.199360] do_syscall_64+0x33/0x40 [ 3121.199825] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3121.200740] RIP: 0033:0x7f909c7eac27 [ 3121.201376] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3121.203667] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3121.204652] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3121.205544] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 00:28:47 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:47 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0xf, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:47 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 18) 00:28:47 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:47 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 13) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:47 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 3121.206611] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:28:47 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x399, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3121.207692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3121.208748] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3121.212919] __nla_validate_parse: 3 callbacks suppressed [ 3121.212931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3121.222032] FAULT_INJECTION: forcing a failure. [ 3121.222032] name failslab, interval 1, probability 0, space 0, times 0 [ 3121.223501] CPU: 1 PID: 135003 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3121.224375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3121.225392] Call Trace: [ 3121.225716] dump_stack+0x107/0x167 [ 3121.226172] should_fail.cold+0x5/0xa [ 3121.226645] should_failslab+0x5/0x20 [ 3121.227118] __kmalloc_track_caller+0x79/0x370 [ 3121.227677] ? v9fs_session_init+0xe9/0x1680 [ 3121.228236] ? kernel_text_address+0xf2/0x120 [ 3121.228796] kstrdup+0x36/0x70 [ 3121.229195] v9fs_session_init+0xe9/0x1680 [ 3121.229724] ? lock_release+0x680/0x680 [ 3121.230217] ? find_held_lock+0x2c/0x110 [ 3121.230721] ? kmem_cache_alloc_trace+0x151/0x320 [ 3121.231317] ? v9fs_show_options+0x690/0x690 [ 3121.231868] ? trace_hardirqs_on+0x5b/0x180 [ 3121.232407] ? kasan_unpoison_shadow+0x33/0x50 [ 3121.232968] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3121.233596] v9fs_mount+0x79/0x8f0 [ 3121.234044] ? v9fs_write_inode+0x60/0x60 [ 3121.234552] legacy_get_tree+0x105/0x220 [ 3121.235056] vfs_get_tree+0x8e/0x300 [ 3121.235509] path_mount+0x1429/0x2120 [ 3121.235988] ? strncpy_from_user+0x9e/0x470 [ 3121.236527] ? finish_automount+0xa90/0xa90 [ 3121.237060] ? getname_flags.part.0+0x1dd/0x4f0 [ 3121.237631] ? _copy_from_user+0xfb/0x1b0 [ 3121.238143] __x64_sys_mount+0x282/0x300 [ 3121.238639] ? copy_mnt_ns+0xa00/0xa00 [ 3121.239119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3121.239762] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3121.240403] do_syscall_64+0x33/0x40 [ 3121.240863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3121.241503] RIP: 0033:0x7f070967ab19 [ 3121.241960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3121.244226] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3121.245170] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3121.246046] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3121.246924] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3121.247796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3121.248687] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3121.259903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3121.262173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3121.264351] FAULT_INJECTION: forcing a failure. [ 3121.264351] name failslab, interval 1, probability 0, space 0, times 0 [ 3121.265818] CPU: 1 PID: 135002 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3121.266677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3121.267707] Call Trace: [ 3121.268038] dump_stack+0x107/0x167 [ 3121.268485] should_fail.cold+0x5/0xa [ 3121.268958] ? create_object.isra.0+0x3a/0xa20 [ 3121.269523] should_failslab+0x5/0x20 [ 3121.269993] kmem_cache_alloc+0x5b/0x310 [ 3121.270503] create_object.isra.0+0x3a/0xa20 [ 3121.271052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3121.271681] kmem_cache_alloc_trace+0x151/0x320 [ 3121.272270] cfg80211_sinfo_alloc_tid_stats+0x8f/0x110 [ 3121.272915] sta_set_sinfo+0x2040/0x35c0 [ 3121.273407] ? kasan_unpoison_shadow+0x33/0x50 [ 3121.273966] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3121.274586] __sta_info_destroy_part2+0x2ce/0x4f0 [ 3121.275168] __sta_info_flush+0x3a0/0x520 [ 3121.275672] ? __sta_info_destroy+0x50/0x50 [ 3121.276212] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3121.276852] ? trace_hardirqs_on+0x5b/0x180 [ 3121.277384] ? cfg80211_put_bss+0x1b0/0x270 [ 3121.277915] ? __local_bh_enable_ip+0x9d/0x100 [ 3121.278478] ieee80211_ibss_disconnect+0x115/0x750 [ 3121.279080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3121.279728] ieee80211_ibss_leave+0x12/0x160 [ 3121.280281] __cfg80211_leave_ibss+0x183/0x4f0 [ 3121.280841] __cfg80211_leave+0x14b/0x370 [ 3121.281352] cfg80211_netdev_notifier_call+0x385/0x10c0 [ 3121.282004] ? ipmr_device_event+0x192/0x1f0 [ 3121.282549] raw_notifier_call_chain+0xb3/0x110 [ 3121.283124] call_netdevice_notifiers_info+0xba/0x130 [ 3121.283760] __dev_close_many+0xf3/0x2f0 [ 3121.284348] ? skb_crc32c_csum_help.part.0+0x4d0/0x4d0 [ 3121.284981] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3121.285633] ? __local_bh_enable_ip+0x9d/0x100 [ 3121.286188] ? trace_hardirqs_on+0x5b/0x180 [ 3121.286715] __dev_change_flags+0x299/0x6e0 [ 3121.287246] ? dev_set_allmulti+0x30/0x30 [ 3121.287758] dev_change_flags+0x8a/0x160 [ 3121.288270] do_setlink+0x911/0x3ac0 [ 3121.288729] ? vprintk_func+0x93/0x140 [ 3121.289202] ? rtnl_getlink+0xaa0/0xaa0 [ 3121.289681] ? printk+0xba/0xf1 [ 3121.290081] ? record_print_text.cold+0x16/0x16 [ 3121.290642] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3121.291250] ? trace_hardirqs_on+0x5b/0x180 [ 3121.291780] ? __nla_validate_parse+0x2d8/0x2b10 [ 3121.292359] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3121.292992] ? nla_get_range_signed+0x520/0x520 [ 3121.293556] ? __lock_acquire+0xbb1/0x5b00 [ 3121.294081] __rtnl_newlink+0xc3e/0x1700 [ 3121.294583] ? rtnl_setlink+0x3c0/0x3c0 [ 3121.295064] ? __is_insn_slot_addr+0x123/0x290 [ 3121.295628] ? unwind_next_frame+0x13ef/0x1a90 [ 3121.296186] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3121.296824] ? 0xffffffffa0000000 [ 3121.297240] ? __is_insn_slot_addr+0x14c/0x290 [ 3121.297792] ? kernel_text_address+0xf2/0x120 [ 3121.298348] ? __kernel_text_address+0x9/0x40 [ 3121.298888] ? unwind_get_return_address+0x55/0xa0 [ 3121.299479] ? create_prof_cpu_mask+0x20/0x20 [ 3121.300029] ? arch_stack_walk+0x99/0xf0 [ 3121.300523] ? stack_trace_save+0x8c/0xc0 [ 3121.301054] ? mark_held_locks+0x9e/0xe0 [ 3121.301544] ? trace_hardirqs_on+0x5b/0x180 [ 3121.302062] ? kasan_unpoison_shadow+0x33/0x50 [ 3121.302604] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3121.303216] rtnl_newlink+0x64/0xa0 [ 3121.303650] ? __rtnl_newlink+0x1700/0x1700 [ 3121.304180] rtnetlink_rcv_msg+0x423/0xbb0 [ 3121.304689] ? rtnl_fdb_dump+0xa30/0xa30 [ 3121.305176] ? lock_acquire+0x197/0x470 [ 3121.305654] ? netlink_deliver_tap+0xf4/0xcc0 [ 3121.306204] netlink_rcv_skb+0x14b/0x430 [ 3121.306688] ? rtnl_fdb_dump+0xa30/0xa30 [ 3121.307172] ? netlink_ack+0xab0/0xab0 [ 3121.307635] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3121.308196] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3121.308747] ? is_vmalloc_addr+0x7b/0xb0 [ 3121.309236] netlink_unicast+0x54e/0x800 [ 3121.309724] ? netlink_attachskb+0x870/0x870 [ 3121.310251] netlink_sendmsg+0x90f/0xe00 [ 3121.310737] ? netlink_unicast+0x800/0x800 [ 3121.311246] ? netlink_unicast+0x800/0x800 [ 3121.311753] __sock_sendmsg+0x154/0x190 [ 3121.312242] ____sys_sendmsg+0x70d/0x870 [ 3121.312733] ? sock_write_iter+0x3d0/0x3d0 [ 3121.313244] ? do_recvmmsg+0x6d0/0x6d0 [ 3121.313716] ? lock_downgrade+0x6d0/0x6d0 [ 3121.314224] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3121.314866] ___sys_sendmsg+0xf3/0x170 [ 3121.315347] ? sendmsg_copy_msghdr+0x160/0x160 [ 3121.315902] ? __fget_files+0x2cf/0x520 [ 3121.316391] ? lock_downgrade+0x6d0/0x6d0 [ 3121.316891] ? find_held_lock+0x2c/0x110 [ 3121.317398] ? __fget_files+0x2f8/0x520 [ 3121.317891] ? __fget_light+0xea/0x290 [ 3121.318371] __sys_sendmsg+0xe5/0x1b0 [ 3121.318827] ? __sys_sendmsg_sock+0x40/0x40 [ 3121.319352] ? rcu_read_lock_any_held+0x75/0xa0 [ 3121.319918] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3121.320579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3121.321208] ? trace_hardirqs_on+0x5b/0x180 [ 3121.321728] do_syscall_64+0x33/0x40 [ 3121.322188] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3121.322825] RIP: 0033:0x7f8f5b2cdb19 [ 3121.323295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3121.325546] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3121.326468] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3121.327361] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3121.328245] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3121.329095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3121.329950] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 00:28:47 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 19) 00:28:47 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 15) [ 3121.411803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3121.415231] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3121.423554] FAULT_INJECTION: forcing a failure. [ 3121.423554] name failslab, interval 1, probability 0, space 0, times 0 [ 3121.426025] CPU: 0 PID: 135213 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3121.427537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3121.429364] Call Trace: [ 3121.429936] dump_stack+0x107/0x167 [ 3121.430719] should_fail.cold+0x5/0xa [ 3121.431531] ? create_object.isra.0+0x3a/0xa20 [ 3121.432519] should_failslab+0x5/0x20 [ 3121.433330] kmem_cache_alloc+0x5b/0x310 [ 3121.434204] create_object.isra.0+0x3a/0xa20 [ 3121.435138] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3121.436240] __kmalloc+0x16e/0x390 [ 3121.437001] ext4_find_extent+0xa77/0xd70 [ 3121.437897] ext4_ext_map_blocks+0x1c8/0x5830 [ 3121.438872] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3121.439997] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3121.441113] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 3121.442234] ? ext4_ext_release+0x10/0x10 [ 3121.443128] ? lock_release+0x680/0x680 [ 3121.443987] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 3121.444995] ? lock_downgrade+0x6d0/0x6d0 [ 3121.445891] ? down_read+0x10f/0x430 [ 3121.446681] ? down_write+0x160/0x160 [ 3121.447494] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 3121.448510] ext4_map_blocks+0x8e1/0x1910 [ 3121.449408] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3121.450368] ? __brelse+0x84/0xa0 [ 3121.451108] ? __ext4_new_inode+0x148/0x5370 [ 3121.452061] ext4_append+0x1b8/0x4e0 [ 3121.452861] ? ext4_move_extents+0x3050/0x3050 [ 3121.453838] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3121.454879] ext4_init_new_dir+0x25e/0x4d0 [ 3121.455787] ? ext4_init_dot_dotdot+0x610/0x610 [ 3121.456531] FAULT_INJECTION: forcing a failure. [ 3121.456531] name failslab, interval 1, probability 0, space 0, times 0 [ 3121.456796] ext4_mkdir+0x3c1/0xb10 [ 3121.458882] ? ext4_rmdir+0xf70/0xf70 [ 3121.459706] vfs_mkdir+0x493/0x750 [ 3121.460479] do_mkdirat+0x150/0x2b0 [ 3121.461255] ? user_path_create+0xf0/0xf0 [ 3121.462146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3121.463267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3121.464375] do_syscall_64+0x33/0x40 [ 3121.465174] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3121.466261] RIP: 0033:0x7f909c7eac27 [ 3121.467057] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3121.470981] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3121.472613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3121.474127] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3121.475651] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3121.477177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3121.478693] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3121.480241] CPU: 1 PID: 135215 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3121.481054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3121.482010] Call Trace: [ 3121.482318] dump_stack+0x107/0x167 [ 3121.482739] should_fail.cold+0x5/0xa [ 3121.483178] ? create_object.isra.0+0x3a/0xa20 [ 3121.483704] should_failslab+0x5/0x20 [ 3121.484156] kmem_cache_alloc+0x5b/0x310 [ 3121.484627] create_object.isra.0+0x3a/0xa20 [ 3121.485130] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3121.485719] __kmalloc_track_caller+0x177/0x370 [ 3121.486260] ? v9fs_session_init+0xe9/0x1680 [ 3121.486775] kstrdup+0x36/0x70 [ 3121.487150] v9fs_session_init+0xe9/0x1680 [ 3121.487645] ? lock_release+0x680/0x680 [ 3121.488109] ? find_held_lock+0x2c/0x110 [ 3121.488585] ? kmem_cache_alloc_trace+0x151/0x320 [ 3121.489137] ? v9fs_show_options+0x690/0x690 [ 3121.489652] ? trace_hardirqs_on+0x5b/0x180 [ 3121.490147] ? kasan_unpoison_shadow+0x33/0x50 [ 3121.490338] nfs: Bad value for 'rootcontext' [ 3121.490673] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3121.490686] v9fs_mount+0x79/0x8f0 [ 3121.490696] ? v9fs_write_inode+0x60/0x60 [ 3121.490718] legacy_get_tree+0x105/0x220 [ 3121.493581] vfs_get_tree+0x8e/0x300 [ 3121.494010] path_mount+0x1429/0x2120 [ 3121.494451] ? strncpy_from_user+0x9e/0x470 [ 3121.494942] ? finish_automount+0xa90/0xa90 [ 3121.495440] ? getname_flags.part.0+0x1dd/0x4f0 [ 3121.495986] ? _copy_from_user+0xfb/0x1b0 [ 3121.496470] __x64_sys_mount+0x282/0x300 [ 3121.496932] ? copy_mnt_ns+0xa00/0xa00 [ 3121.497383] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3121.497984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3121.498576] do_syscall_64+0x33/0x40 [ 3121.499007] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3121.499596] RIP: 0033:0x7f070967ab19 [ 3121.500036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3121.502142] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3121.503005] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3121.503823] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3121.504652] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3121.505468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3121.506298] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3121.520221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3121.521118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3121.522023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3121.522863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3121.523656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3121.524903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3121.525745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3121.526720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3121.529144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3121.545517] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3121.583144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3121.584858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3121.588009] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3121.591080] 9pnet: Insufficient options for proto=fd 00:29:00 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3b4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:29:00 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:00 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:00 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 20) 00:29:00 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 16) 00:29:00 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 14) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:00 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:00 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x48, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3134.500899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3134.511065] FAULT_INJECTION: forcing a failure. [ 3134.511065] name failslab, interval 1, probability 0, space 0, times 0 [ 3134.511897] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3134.513728] CPU: 0 PID: 135224 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3134.513767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3134.513774] Call Trace: [ 3134.513798] dump_stack+0x107/0x167 [ 3134.513820] should_fail.cold+0x5/0xa [ 3134.513844] ? __es_insert_extent+0xed1/0x1370 [ 3134.521229] should_failslab+0x5/0x20 [ 3134.522042] kmem_cache_alloc+0x5b/0x310 [ 3134.522912] __es_insert_extent+0xed1/0x1370 [ 3134.523856] ? do_raw_read_unlock+0x70/0x70 [ 3134.524792] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3134.525919] ext4_es_insert_extent+0x45d/0xf10 [ 3134.526905] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 3134.527335] FAULT_INJECTION: forcing a failure. [ 3134.527335] name failslab, interval 1, probability 0, space 0, times 0 [ 3134.527821] ? ext4_es_find_extent_range+0x1cb/0x460 [ 3134.527843] ? lock_downgrade+0x6d0/0x6d0 [ 3134.531148] ? __ext4_handle_dirty_super+0x100/0x100 [ 3134.532233] ? __es_find_extent_range+0x197/0x4b0 [ 3134.533264] ? do_raw_read_unlock+0x3b/0x70 [ 3134.534189] ext4_ext_map_blocks+0x1863/0x5830 [ 3134.535174] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3134.536299] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3134.537423] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 3134.538542] ? ext4_ext_release+0x10/0x10 [ 3134.539431] ? lock_release+0x680/0x680 [ 3134.540290] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 3134.541302] ? lock_downgrade+0x6d0/0x6d0 [ 3134.542198] ? down_read+0x10f/0x430 [ 3134.542984] ? down_write+0x160/0x160 [ 3134.543798] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 3134.544810] ext4_map_blocks+0x8e1/0x1910 [ 3134.545702] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3134.546655] ? __brelse+0x84/0xa0 [ 3134.547401] ? __ext4_new_inode+0x148/0x5370 [ 3134.548360] ext4_append+0x1b8/0x4e0 [ 3134.549157] ? ext4_move_extents+0x3050/0x3050 [ 3134.550136] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3134.551181] ext4_init_new_dir+0x25e/0x4d0 [ 3134.552090] ? ext4_init_dot_dotdot+0x610/0x610 [ 3134.553107] ext4_mkdir+0x3c1/0xb10 [ 3134.553889] ? ext4_rmdir+0xf70/0xf70 [ 3134.554716] vfs_mkdir+0x493/0x750 [ 3134.555484] do_mkdirat+0x150/0x2b0 [ 3134.556272] ? user_path_create+0xf0/0xf0 [ 3134.557157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3134.558272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3134.559372] do_syscall_64+0x33/0x40 [ 3134.560163] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3134.561259] RIP: 0033:0x7f909c7eac27 [ 3134.562062] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3134.565999] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3134.567620] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3134.569150] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3134.570662] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3134.572189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3134.573707] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3134.575246] CPU: 1 PID: 135233 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3134.576107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3134.577131] Call Trace: [ 3134.577461] dump_stack+0x107/0x167 [ 3134.577908] should_fail.cold+0x5/0xa [ 3134.578378] ? p9_client_create+0xaf/0x1230 [ 3134.578907] should_failslab+0x5/0x20 [ 3134.579372] kmem_cache_alloc_trace+0x55/0x320 [ 3134.579927] ? find_held_lock+0x2c/0x110 [ 3134.580428] p9_client_create+0xaf/0x1230 [ 3134.580934] ? lock_downgrade+0x6d0/0x6d0 [ 3134.581450] ? p9_client_flush+0x430/0x430 [ 3134.581971] ? trace_hardirqs_on+0x5b/0x180 [ 3134.582493] ? lockdep_init_map_type+0x2c7/0x780 [ 3134.583063] ? __raw_spin_lock_init+0x36/0x110 [ 3134.583620] v9fs_session_init+0x1dd/0x1680 [ 3134.584143] ? lock_release+0x680/0x680 [ 3134.584634] ? kmem_cache_alloc_trace+0x151/0x320 [ 3134.585215] ? v9fs_show_options+0x690/0x690 [ 3134.585747] ? trace_hardirqs_on+0x5b/0x180 [ 3134.586265] ? kasan_unpoison_shadow+0x33/0x50 [ 3134.586816] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3134.587428] v9fs_mount+0x79/0x8f0 [ 3134.587858] ? v9fs_write_inode+0x60/0x60 [ 3134.588367] legacy_get_tree+0x105/0x220 [ 3134.588861] vfs_get_tree+0x8e/0x300 [ 3134.589311] path_mount+0x1429/0x2120 [ 3134.589781] ? strncpy_from_user+0x9e/0x470 [ 3134.590301] ? finish_automount+0xa90/0xa90 [ 3134.590824] ? getname_flags.part.0+0x1dd/0x4f0 [ 3134.591391] ? _copy_from_user+0xfb/0x1b0 [ 3134.591893] __x64_sys_mount+0x282/0x300 [ 3134.592393] ? copy_mnt_ns+0xa00/0xa00 [ 3134.592868] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3134.593504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3134.594130] do_syscall_64+0x33/0x40 [ 3134.594583] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3134.595202] RIP: 0033:0x7f070967ab19 [ 3134.595652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3134.597891] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3134.598806] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3134.599665] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3134.600547] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3134.601399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3134.602252] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 00:29:00 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3fd, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3134.607342] FAULT_INJECTION: forcing a failure. [ 3134.607342] name failslab, interval 1, probability 0, space 0, times 0 [ 3134.608800] CPU: 1 PID: 135231 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3134.609647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3134.610641] Call Trace: [ 3134.610962] dump_stack+0x107/0x167 [ 3134.611400] should_fail.cold+0x5/0xa [ 3134.611870] ? __alloc_skb+0x6d/0x5b0 [ 3134.612350] should_failslab+0x5/0x20 [ 3134.612811] kmem_cache_alloc_node+0x55/0x330 [ 3134.613358] __alloc_skb+0x6d/0x5b0 [ 3134.613815] cfg80211_del_sta_sinfo+0x15e/0x480 [ 3134.614382] ? cfg80211_new_sta+0x370/0x370 [ 3134.614940] __sta_info_destroy_part2+0x310/0x4f0 [ 3134.615523] __sta_info_flush+0x3a0/0x520 [ 3134.616042] ? __sta_info_destroy+0x50/0x50 [ 3134.616576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3134.617204] ? trace_hardirqs_on+0x5b/0x180 [ 3134.617727] ? cfg80211_put_bss+0x1b0/0x270 [ 3134.618244] ? __local_bh_enable_ip+0x9d/0x100 [ 3134.618804] ieee80211_ibss_disconnect+0x115/0x750 [ 3134.619398] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3134.620032] ieee80211_ibss_leave+0x12/0x160 [ 3134.620567] __cfg80211_leave_ibss+0x183/0x4f0 [ 3134.621122] __cfg80211_leave+0x14b/0x370 [ 3134.621623] cfg80211_netdev_notifier_call+0x385/0x10c0 [ 3134.622264] ? ipmr_device_event+0x192/0x1f0 [ 3134.622798] raw_notifier_call_chain+0xb3/0x110 [ 3134.623349] call_netdevice_notifiers_info+0xba/0x130 [ 3134.623968] __dev_close_many+0xf3/0x2f0 [ 3134.624454] ? skb_crc32c_csum_help.part.0+0x4d0/0x4d0 [ 3134.625083] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3134.625711] ? __local_bh_enable_ip+0x9d/0x100 [ 3134.626263] ? trace_hardirqs_on+0x5b/0x180 [ 3134.626784] __dev_change_flags+0x299/0x6e0 [ 3134.627304] ? dev_set_allmulti+0x30/0x30 [ 3134.627802] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3134.628454] dev_change_flags+0x8a/0x160 [ 3134.628946] do_setlink+0x911/0x3ac0 [ 3134.629400] ? rtnl_getlink+0xaa0/0xaa0 [ 3134.629876] ? printk+0xba/0xf1 [ 3134.630272] ? record_print_text.cold+0x16/0x16 [ 3134.630830] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3134.631435] ? trace_hardirqs_on+0x5b/0x180 [ 3134.631957] ? mark_held_locks+0x9e/0xe0 [ 3134.632460] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3134.633088] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3134.633734] ? trace_hardirqs_on+0x5b/0x180 [ 3134.634256] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3134.634910] ? netdev_master_upper_dev_get+0x29/0x150 [ 3134.635527] __rtnl_newlink+0xc3e/0x1700 [ 3134.636036] ? rtnl_setlink+0x3c0/0x3c0 [ 3134.636520] ? __is_insn_slot_addr+0x123/0x290 [ 3134.637071] ? unwind_next_frame+0x13ef/0x1a90 [ 3134.637614] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3134.638247] ? 0xffffffffa0000000 [ 3134.638658] ? __is_insn_slot_addr+0x14c/0x290 [ 3134.639208] ? kernel_text_address+0xf2/0x120 [ 3134.639743] ? __kernel_text_address+0x9/0x40 [ 3134.640290] ? unwind_get_return_address+0x55/0xa0 [ 3134.640868] ? create_prof_cpu_mask+0x20/0x20 [ 3134.641404] ? arch_stack_walk+0x99/0xf0 [ 3134.641890] ? stack_trace_save+0x8c/0xc0 [ 3134.642419] ? mark_held_locks+0x9e/0xe0 [ 3134.642903] ? trace_hardirqs_on+0x5b/0x180 [ 3134.643420] ? kasan_unpoison_shadow+0x33/0x50 [ 3134.643964] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3134.644578] rtnl_newlink+0x64/0xa0 [ 3134.645009] ? __rtnl_newlink+0x1700/0x1700 [ 3134.645513] rtnetlink_rcv_msg+0x423/0xbb0 [ 3134.646010] nfs: Bad value for 'rootcontext' [ 3134.646530] ? rtnl_fdb_dump+0xa30/0xa30 [ 3134.647021] ? lock_acquire+0x197/0x470 [ 3134.647495] ? netlink_deliver_tap+0xf4/0xcc0 [ 3134.648054] netlink_rcv_skb+0x14b/0x430 [ 3134.648555] ? rtnl_fdb_dump+0xa30/0xa30 [ 3134.649043] ? netlink_ack+0xab0/0xab0 [ 3134.649502] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3134.650051] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3134.650597] ? is_vmalloc_addr+0x7b/0xb0 [ 3134.651085] netlink_unicast+0x54e/0x800 [ 3134.651568] ? netlink_attachskb+0x870/0x870 [ 3134.652095] netlink_sendmsg+0x90f/0xe00 [ 3134.652582] ? netlink_unicast+0x800/0x800 [ 3134.653092] ? netlink_unicast+0x800/0x800 [ 3134.653593] __sock_sendmsg+0x154/0x190 [ 3134.654064] ____sys_sendmsg+0x70d/0x870 [ 3134.654548] ? sock_write_iter+0x3d0/0x3d0 [ 3134.655048] ? do_recvmmsg+0x6d0/0x6d0 [ 3134.655513] ? lock_downgrade+0x6d0/0x6d0 [ 3134.656007] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3134.656640] ___sys_sendmsg+0xf3/0x170 [ 3134.657096] ? sendmsg_copy_msghdr+0x160/0x160 [ 3134.657647] ? __fget_files+0x2cf/0x520 [ 3134.658113] ? lock_downgrade+0x6d0/0x6d0 [ 3134.658604] ? find_held_lock+0x2c/0x110 [ 3134.659092] ? __fget_files+0x2f8/0x520 [ 3134.659568] ? __fget_light+0xea/0x290 [ 3134.660030] __sys_sendmsg+0xe5/0x1b0 [ 3134.660495] ? __sys_sendmsg_sock+0x40/0x40 [ 3134.661008] ? rcu_read_lock_any_held+0x75/0xa0 [ 3134.661559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3134.662183] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3134.662796] ? trace_hardirqs_on+0x5b/0x180 [ 3134.663311] do_syscall_64+0x33/0x40 [ 3134.663751] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3134.664362] RIP: 0033:0x7f8f5b2cdb19 [ 3134.664803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3134.666981] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3134.667891] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3134.668732] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3134.669574] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3134.670408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3134.671247] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 [ 3134.703805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:29:01 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 17) [ 3134.713188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3134.726233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3134.727213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3134.728117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3134.735203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3134.736076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3134.737078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3134.757566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3134.758541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3134.759438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:29:01 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 15) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:01 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x499, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:29:01 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3134.815364] FAULT_INJECTION: forcing a failure. [ 3134.815364] name failslab, interval 1, probability 0, space 0, times 0 [ 3134.816708] CPU: 1 PID: 135443 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3134.817511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3134.818456] Call Trace: [ 3134.818772] dump_stack+0x107/0x167 [ 3134.819200] should_fail.cold+0x5/0xa [ 3134.819653] ? create_object.isra.0+0x3a/0xa20 [ 3134.820191] should_failslab+0x5/0x20 [ 3134.820638] kmem_cache_alloc+0x5b/0x310 [ 3134.821107] create_object.isra.0+0x3a/0xa20 [ 3134.821614] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3134.822199] kmem_cache_alloc+0x159/0x310 [ 3134.822691] __es_insert_extent+0xed1/0x1370 [ 3134.823202] ? do_raw_read_unlock+0x70/0x70 [ 3134.823703] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3134.824312] ext4_es_insert_extent+0x45d/0xf10 [ 3134.824845] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 3134.825338] ? ext4_es_find_extent_range+0x1cb/0x460 [ 3134.825927] ? lock_downgrade+0x6d0/0x6d0 [ 3134.826404] ? __ext4_handle_dirty_super+0x100/0x100 [ 3134.826993] ? __es_find_extent_range+0x197/0x4b0 [ 3134.827553] ? do_raw_read_unlock+0x3b/0x70 [ 3134.828050] ext4_ext_map_blocks+0x1863/0x5830 [ 3134.828595] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3134.829220] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3134.829834] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 3134.830443] ? ext4_ext_release+0x10/0x10 [ 3134.830927] ? lock_release+0x680/0x680 [ 3134.831391] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 3134.831942] ? lock_downgrade+0x6d0/0x6d0 [ 3134.832446] ? down_read+0x10f/0x430 [ 3134.832882] ? down_write+0x160/0x160 [ 3134.833317] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 3134.833864] ext4_map_blocks+0x8e1/0x1910 [ 3134.834355] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3134.834875] ? __brelse+0x84/0xa0 [ 3134.835270] ? __ext4_new_inode+0x148/0x5370 [ 3134.835789] ext4_append+0x1b8/0x4e0 [ 3134.836233] ? ext4_move_extents+0x3050/0x3050 [ 3134.836766] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3134.837333] ext4_init_new_dir+0x25e/0x4d0 [ 3134.837829] ? ext4_init_dot_dotdot+0x610/0x610 [ 3134.838374] ext4_mkdir+0x3c1/0xb10 [ 3134.838802] ? ext4_rmdir+0xf70/0xf70 [ 3134.839254] vfs_mkdir+0x493/0x750 [ 3134.839670] do_mkdirat+0x150/0x2b0 [ 3134.840097] ? user_path_create+0xf0/0xf0 [ 3134.840596] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3134.841198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3134.841800] do_syscall_64+0x33/0x40 [ 3134.842229] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3134.842823] RIP: 0033:0x7f909c7eac27 [ 3134.843252] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3134.845397] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3134.846280] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3134.847108] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3134.847943] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3134.848774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3134.849597] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 00:29:01 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 21) [ 3134.881930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3134.887076] FAULT_INJECTION: forcing a failure. [ 3134.887076] name failslab, interval 1, probability 0, space 0, times 0 [ 3134.888420] CPU: 1 PID: 135545 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3134.889228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3134.890184] Call Trace: [ 3134.890491] dump_stack+0x107/0x167 [ 3134.890913] should_fail.cold+0x5/0xa [ 3134.891356] ? create_object.isra.0+0x3a/0xa20 [ 3134.891892] should_failslab+0x5/0x20 [ 3134.892339] kmem_cache_alloc+0x5b/0x310 [ 3134.892812] ? kernel_text_address+0xf2/0x120 [ 3134.893322] create_object.isra.0+0x3a/0xa20 [ 3134.893838] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3134.894423] kmem_cache_alloc_trace+0x151/0x320 [ 3134.894967] ? find_held_lock+0x2c/0x110 [ 3134.895435] p9_client_create+0xaf/0x1230 [ 3134.895920] ? lock_downgrade+0x6d0/0x6d0 [ 3134.896404] ? p9_client_flush+0x430/0x430 [ 3134.896886] ? trace_hardirqs_on+0x5b/0x180 [ 3134.897374] ? lockdep_init_map_type+0x2c7/0x780 [ 3134.897917] ? __raw_spin_lock_init+0x36/0x110 [ 3134.898439] v9fs_session_init+0x1dd/0x1680 [ 3134.898935] ? lock_release+0x680/0x680 [ 3134.899395] ? kmem_cache_alloc_trace+0x151/0x320 [ 3134.899945] ? v9fs_show_options+0x690/0x690 [ 3134.900471] ? trace_hardirqs_on+0x5b/0x180 [ 3134.900964] ? kasan_unpoison_shadow+0x33/0x50 [ 3134.901494] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3134.902074] v9fs_mount+0x79/0x8f0 [ 3134.902491] ? v9fs_write_inode+0x60/0x60 [ 3134.902972] legacy_get_tree+0x105/0x220 [ 3134.903439] vfs_get_tree+0x8e/0x300 [ 3134.903873] path_mount+0x1429/0x2120 [ 3134.904325] ? strncpy_from_user+0x9e/0x470 [ 3134.904814] ? finish_automount+0xa90/0xa90 [ 3134.905306] ? getname_flags.part.0+0x1dd/0x4f0 [ 3134.905836] ? _copy_from_user+0xfb/0x1b0 [ 3134.906313] __x64_sys_mount+0x282/0x300 [ 3134.906774] ? copy_mnt_ns+0xa00/0xa00 [ 3134.907222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3134.907808] do_syscall_64+0x33/0x40 [ 3134.908245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3134.908835] RIP: 0033:0x7f070967ab19 [ 3134.909260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3134.911391] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3134.912266] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3134.913068] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3134.913875] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3134.914679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3134.915485] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 00:29:01 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:01 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x500, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3134.927481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3134.932354] FAULT_INJECTION: forcing a failure. [ 3134.932354] name failslab, interval 1, probability 0, space 0, times 0 [ 3134.934989] CPU: 0 PID: 135535 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3134.936508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3134.938282] Call Trace: [ 3134.938852] dump_stack+0x107/0x167 [ 3134.939637] should_fail.cold+0x5/0xa [ 3134.940464] ? create_object.isra.0+0x3a/0xa20 [ 3134.941447] should_failslab+0x5/0x20 [ 3134.941452] 9pnet: Insufficient options for proto=fd [ 3134.943333] kmem_cache_alloc+0x5b/0x310 [ 3134.944227] create_object.isra.0+0x3a/0xa20 [ 3134.945134] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3134.946222] kmem_cache_alloc_node+0x169/0x330 [ 3134.947170] __alloc_skb+0x6d/0x5b0 [ 3134.947960] cfg80211_del_sta_sinfo+0x15e/0x480 [ 3134.948931] ? cfg80211_new_sta+0x370/0x370 [ 3134.949897] __sta_info_destroy_part2+0x310/0x4f0 [ 3134.950896] __sta_info_flush+0x3a0/0x520 [ 3134.951792] ? __sta_info_destroy+0x50/0x50 [ 3134.952695] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3134.953769] ? trace_hardirqs_on+0x5b/0x180 [ 3134.954647] ? cfg80211_put_bss+0x1b0/0x270 [ 3134.955521] ? __local_bh_enable_ip+0x9d/0x100 [ 3134.956468] ieee80211_ibss_disconnect+0x115/0x750 [ 3134.957482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3134.958563] ieee80211_ibss_leave+0x12/0x160 [ 3134.959466] __cfg80211_leave_ibss+0x183/0x4f0 [ 3134.960429] __cfg80211_leave+0x14b/0x370 [ 3134.961322] cfg80211_netdev_notifier_call+0x385/0x10c0 [ 3134.962427] ? ipmr_device_event+0x192/0x1f0 [ 3134.963240] nfs: Bad value for 'rootcontext' [ 3134.963375] raw_notifier_call_chain+0xb3/0x110 [ 3134.964848] call_netdevice_notifiers_info+0xba/0x130 [ 3134.965911] __dev_close_many+0xf3/0x2f0 [ 3134.966742] ? skb_crc32c_csum_help.part.0+0x4d0/0x4d0 [ 3134.967829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3134.968907] ? __local_bh_enable_ip+0x9d/0x100 [ 3134.969853] ? trace_hardirqs_on+0x5b/0x180 [ 3134.970743] __dev_change_flags+0x299/0x6e0 [ 3134.971639] ? dev_set_allmulti+0x30/0x30 [ 3134.972508] dev_change_flags+0x8a/0x160 [ 3134.973350] do_setlink+0x911/0x3ac0 [ 3134.974127] ? lock_chain_count+0x20/0x20 [ 3134.974975] ? vprintk_func+0x93/0x140 [ 3134.975779] ? rtnl_getlink+0xaa0/0xaa0 [ 3134.976598] ? printk+0xba/0xf1 [ 3134.977286] ? record_print_text.cold+0x16/0x16 [ 3134.978250] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3134.979329] ? trace_hardirqs_on+0x5b/0x180 [ 3134.980241] ? mark_held_locks+0x9e/0xe0 [ 3134.981118] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3134.982210] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3134.983360] ? trace_hardirqs_on+0x5b/0x180 [ 3134.984257] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3134.985398] ? rtnl_ensure_unique_netns+0xa8/0x250 [ 3134.986412] __rtnl_newlink+0xc3e/0x1700 [ 3134.987256] ? rtnl_setlink+0x3c0/0x3c0 [ 3134.988086] ? __is_insn_slot_addr+0x123/0x290 [ 3134.989041] ? unwind_next_frame+0x13ef/0x1a90 [ 3134.989989] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3134.991117] ? 0xffffffffa0000000 [ 3134.991848] ? __is_insn_slot_addr+0x14c/0x290 [ 3134.992840] ? kernel_text_address+0xf2/0x120 [ 3134.993763] ? __kernel_text_address+0x9/0x40 [ 3134.994715] ? unwind_get_return_address+0x55/0xa0 [ 3134.995721] ? create_prof_cpu_mask+0x20/0x20 [ 3134.996684] ? arch_stack_walk+0x99/0xf0 [ 3134.997530] ? stack_trace_save+0x8c/0xc0 [ 3134.998472] ? mark_held_locks+0x9e/0xe0 [ 3134.999342] ? trace_hardirqs_on+0x5b/0x180 [ 3135.000271] ? kasan_unpoison_shadow+0x33/0x50 [ 3135.001243] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3135.002324] rtnl_newlink+0x64/0xa0 [ 3135.003099] ? __rtnl_newlink+0x1700/0x1700 [ 3135.004017] rtnetlink_rcv_msg+0x423/0xbb0 [ 3135.004929] ? rtnl_fdb_dump+0xa30/0xa30 [ 3135.005804] ? lock_acquire+0x197/0x470 [ 3135.006652] ? netlink_deliver_tap+0xf4/0xcc0 [ 3135.007608] netlink_rcv_skb+0x14b/0x430 [ 3135.008476] ? rtnl_fdb_dump+0xa30/0xa30 [ 3135.009317] ? netlink_ack+0xab0/0xab0 [ 3135.010142] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3135.011084] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3135.012057] ? is_vmalloc_addr+0x7b/0xb0 [ 3135.012905] netlink_unicast+0x54e/0x800 [ 3135.013770] ? netlink_attachskb+0x870/0x870 [ 3135.014690] netlink_sendmsg+0x90f/0xe00 [ 3135.015540] ? netlink_unicast+0x800/0x800 [ 3135.016444] ? netlink_unicast+0x800/0x800 [ 3135.017315] __sock_sendmsg+0x154/0x190 [ 3135.018140] ____sys_sendmsg+0x70d/0x870 [ 3135.018973] ? sock_write_iter+0x3d0/0x3d0 [ 3135.019846] ? do_recvmmsg+0x6d0/0x6d0 [ 3135.020654] ? lock_downgrade+0x6d0/0x6d0 [ 3135.021519] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3135.022638] ___sys_sendmsg+0xf3/0x170 [ 3135.023447] ? sendmsg_copy_msghdr+0x160/0x160 [ 3135.024402] ? __fget_files+0x2cf/0x520 [ 3135.025213] ? lock_downgrade+0x6d0/0x6d0 [ 3135.026057] ? find_held_lock+0x2c/0x110 [ 3135.026899] ? __fget_files+0x2f8/0x520 [ 3135.027735] ? __fget_light+0xea/0x290 [ 3135.028552] __sys_sendmsg+0xe5/0x1b0 [ 3135.029331] ? __sys_sendmsg_sock+0x40/0x40 [ 3135.030219] ? rcu_read_lock_any_held+0x75/0xa0 [ 3135.031197] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3135.032284] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3135.033345] ? trace_hardirqs_on+0x5b/0x180 [ 3135.034223] do_syscall_64+0x33/0x40 [ 3135.035022] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3135.036074] RIP: 0033:0x7f8f5b2cdb19 [ 3135.036875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3135.040679] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3135.042300] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3135.043818] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3135.045347] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3135.046859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3135.048394] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 [ 3135.116263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3135.119557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3135.120418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3135.121514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3135.122369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3135.123155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3135.130078] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3135.148486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3135.149331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3135.150416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:29:15 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 22) 00:29:15 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:15 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 16) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3148.682529] FAULT_INJECTION: forcing a failure. [ 3148.682529] name failslab, interval 1, probability 0, space 0, times 0 [ 3148.684962] CPU: 0 PID: 135674 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3148.686458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3148.688228] Call Trace: [ 3148.688808] dump_stack+0x107/0x167 [ 3148.689595] should_fail.cold+0x5/0xa [ 3148.690418] ? p9_client_create+0xaf/0x1230 [ 3148.691339] should_failslab+0x5/0x20 [ 3148.692151] kmem_cache_alloc_trace+0x55/0x320 [ 3148.693130] ? find_held_lock+0x2c/0x110 [ 3148.694000] p9_client_create+0xaf/0x1230 [ 3148.694883] ? lock_downgrade+0x6d0/0x6d0 [ 3148.695772] ? p9_client_flush+0x430/0x430 [ 3148.696687] ? trace_hardirqs_on+0x5b/0x180 [ 3148.697465] FAULT_INJECTION: forcing a failure. [ 3148.697465] name failslab, interval 1, probability 0, space 0, times 0 [ 3148.697611] ? lockdep_init_map_type+0x2c7/0x780 [ 3148.697634] ? __raw_spin_lock_init+0x36/0x110 [ 3148.701019] v9fs_session_init+0x1dd/0x1680 [ 3148.701940] ? lock_release+0x680/0x680 [ 3148.702793] ? kmem_cache_alloc_trace+0x151/0x320 [ 3148.703818] ? v9fs_show_options+0x690/0x690 [ 3148.704770] ? trace_hardirqs_on+0x5b/0x180 [ 3148.705688] ? kasan_unpoison_shadow+0x33/0x50 [ 3148.706658] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3148.707737] v9fs_mount+0x79/0x8f0 [ 3148.708500] ? v9fs_write_inode+0x60/0x60 [ 3148.709388] legacy_get_tree+0x105/0x220 [ 3148.710254] vfs_get_tree+0x8e/0x300 [ 3148.711043] path_mount+0x1429/0x2120 [ 3148.711857] ? strncpy_from_user+0x9e/0x470 [ 3148.712782] ? finish_automount+0xa90/0xa90 [ 3148.713702] ? getname_flags.part.0+0x1dd/0x4f0 [ 3148.714688] ? _copy_from_user+0xfb/0x1b0 [ 3148.715577] __x64_sys_mount+0x282/0x300 [ 3148.716450] ? copy_mnt_ns+0xa00/0xa00 [ 3148.717282] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3148.718397] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3148.719499] do_syscall_64+0x33/0x40 [ 3148.720293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3148.721391] RIP: 0033:0x7f070967ab19 [ 3148.722182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3148.726063] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3148.727669] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3148.729175] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3148.730680] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3148.732184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3148.733692] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3148.735212] CPU: 1 PID: 135683 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3148.736115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3148.737163] Call Trace: [ 3148.737501] dump_stack+0x107/0x167 [ 3148.737959] should_fail.cold+0x5/0xa [ 3148.738437] ? create_object.isra.0+0x3a/0xa20 [ 3148.739008] should_failslab+0x5/0x20 [ 3148.739484] kmem_cache_alloc+0x5b/0x310 [ 3148.740000] create_object.isra.0+0x3a/0xa20 [ 3148.740558] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3148.741191] kmem_cache_alloc+0x159/0x310 [ 3148.741732] __es_insert_extent+0xed1/0x1370 [ 3148.742283] ? do_raw_read_unlock+0x70/0x70 [ 3148.742829] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3148.743486] ext4_es_insert_extent+0x45d/0xf10 [ 3148.744059] ? ext4_es_scan_clu+0x2e0/0x2e0 00:29:15 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:15 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:15 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 18) [ 3148.744782] ? ext4_es_find_extent_range+0x1cb/0x460 [ 3148.745544] ? lock_downgrade+0x6d0/0x6d0 [ 3148.746065] ? __ext4_handle_dirty_super+0x100/0x100 [ 3148.746699] ? __es_find_extent_range+0x197/0x4b0 [ 3148.747309] ? do_raw_read_unlock+0x3b/0x70 [ 3148.747854] ext4_ext_map_blocks+0x1863/0x5830 [ 3148.748440] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3148.749101] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3148.749763] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 3148.750428] ? ext4_ext_release+0x10/0x10 [ 3148.750957] ? lock_release+0x680/0x680 [ 3148.751457] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 3148.752051] ? lock_downgrade+0x6d0/0x6d0 [ 3148.752593] ? down_read+0x10f/0x430 [ 3148.753061] ? down_write+0x160/0x160 [ 3148.753548] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 3148.754151] ext4_map_blocks+0x8e1/0x1910 [ 3148.754691] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3148.755251] ? __brelse+0x84/0xa0 [ 3148.755683] ? __ext4_new_inode+0x148/0x5370 [ 3148.756238] ext4_append+0x1b8/0x4e0 [ 3148.756705] ? ext4_move_extents+0x3050/0x3050 [ 3148.757270] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3148.757873] ext4_init_new_dir+0x25e/0x4d0 [ 3148.758408] ? ext4_init_dot_dotdot+0x610/0x610 [ 3148.758993] ext4_mkdir+0x3c1/0xb10 [ 3148.759449] ? ext4_rmdir+0xf70/0xf70 [ 3148.759936] vfs_mkdir+0x493/0x750 [ 3148.760383] do_mkdirat+0x150/0x2b0 [ 3148.760841] ? user_path_create+0xf0/0xf0 [ 3148.761358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3148.762012] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3148.762669] do_syscall_64+0x33/0x40 [ 3148.763131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3148.763766] RIP: 0033:0x7f909c7eac27 [ 3148.764223] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3148.766510] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3148.767457] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3148.768336] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3148.769227] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3148.770105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3148.770991] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3148.782886] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:29:15 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x599, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:29:15 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x499, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3148.793050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3148.800316] FAULT_INJECTION: forcing a failure. [ 3148.800316] name failslab, interval 1, probability 0, space 0, times 0 [ 3148.802211] nfs: Bad value for 'rootcontext' [ 3148.804509] CPU: 0 PID: 135677 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3148.806019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3148.807782] Call Trace: [ 3148.808344] dump_stack+0x107/0x167 [ 3148.809129] should_fail.cold+0x5/0xa [ 3148.809949] should_failslab+0x5/0x20 [ 3148.810759] __kmalloc_node_track_caller+0x74/0x3b0 [ 3148.811820] ? cfg80211_del_sta_sinfo+0x15e/0x480 [ 3148.812859] __alloc_skb+0xb1/0x5b0 [ 3148.813638] cfg80211_del_sta_sinfo+0x15e/0x480 [ 3148.814626] ? cfg80211_new_sta+0x370/0x370 [ 3148.815586] __sta_info_destroy_part2+0x310/0x4f0 [ 3148.816621] __sta_info_flush+0x3a0/0x520 [ 3148.817510] ? __sta_info_destroy+0x50/0x50 [ 3148.818426] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3148.819537] ? trace_hardirqs_on+0x5b/0x180 [ 3148.820465] ? cfg80211_put_bss+0x1b0/0x270 [ 3148.821383] ? __local_bh_enable_ip+0x9d/0x100 [ 3148.822357] ieee80211_ibss_disconnect+0x115/0x750 [ 3148.823401] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3148.824523] ieee80211_ibss_leave+0x12/0x160 [ 3148.825458] __cfg80211_leave_ibss+0x183/0x4f0 [ 3148.826436] __cfg80211_leave+0x14b/0x370 [ 3148.827322] cfg80211_netdev_notifier_call+0x385/0x10c0 [ 3148.828462] ? ipmr_device_event+0x192/0x1f0 [ 3148.829405] raw_notifier_call_chain+0xb3/0x110 [ 3148.830400] call_netdevice_notifiers_info+0xba/0x130 [ 3148.831500] __dev_close_many+0xf3/0x2f0 [ 3148.832365] ? skb_crc32c_csum_help.part.0+0x4d0/0x4d0 [ 3148.833493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3148.834604] ? __local_bh_enable_ip+0x9d/0x100 [ 3148.835575] ? trace_hardirqs_on+0x5b/0x180 [ 3148.836505] __dev_change_flags+0x299/0x6e0 [ 3148.837426] ? dev_set_allmulti+0x30/0x30 [ 3148.838322] dev_change_flags+0x8a/0x160 [ 3148.839192] do_setlink+0x911/0x3ac0 [ 3148.839992] ? vprintk_func+0x93/0x140 [ 3148.840826] ? rtnl_getlink+0xaa0/0xaa0 [ 3148.841671] ? printk+0xba/0xf1 [ 3148.842368] ? record_print_text.cold+0x16/0x16 [ 3148.843362] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3148.844454] ? trace_hardirqs_on+0x5b/0x180 [ 3148.845386] ? __nla_validate_parse+0x2d8/0x2b10 [ 3148.846400] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3148.847517] ? nla_get_range_signed+0x520/0x520 [ 3148.848514] ? __lock_acquire+0xbb1/0x5b00 [ 3148.849439] __rtnl_newlink+0xc3e/0x1700 [ 3148.850318] ? rtnl_setlink+0x3c0/0x3c0 [ 3148.851166] ? __is_insn_slot_addr+0x123/0x290 [ 3148.852148] ? unwind_next_frame+0x13ef/0x1a90 [ 3148.853130] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3148.854263] ? 0xffffffffa0000000 [ 3148.855004] ? __is_insn_slot_addr+0x14c/0x290 [ 3148.855986] ? kernel_text_address+0xf2/0x120 [ 3148.856946] ? __kernel_text_address+0x9/0x40 [ 3148.857901] ? unwind_get_return_address+0x55/0xa0 [ 3148.858945] ? create_prof_cpu_mask+0x20/0x20 [ 3148.859400] FAULT_INJECTION: forcing a failure. [ 3148.859400] name failslab, interval 1, probability 0, space 0, times 0 [ 3148.859895] ? arch_stack_walk+0x99/0xf0 [ 3148.859932] ? stack_trace_save+0x8c/0xc0 [ 3148.860014] ? mark_held_locks+0x9e/0xe0 [ 3148.863927] ? trace_hardirqs_on+0x5b/0x180 [ 3148.864853] ? kasan_unpoison_shadow+0x33/0x50 [ 3148.865821] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3148.866899] rtnl_newlink+0x64/0xa0 [ 3148.867671] ? __rtnl_newlink+0x1700/0x1700 [ 3148.868593] rtnetlink_rcv_msg+0x423/0xbb0 [ 3148.869493] ? rtnl_fdb_dump+0xa30/0xa30 [ 3148.870364] ? lock_acquire+0x197/0x470 [ 3148.871217] ? netlink_deliver_tap+0xf4/0xcc0 [ 3148.872174] netlink_rcv_skb+0x14b/0x430 [ 3148.873043] ? rtnl_fdb_dump+0xa30/0xa30 [ 3148.873908] ? netlink_ack+0xab0/0xab0 [ 3148.874732] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3148.875710] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3148.876688] ? is_vmalloc_addr+0x7b/0xb0 [ 3148.877563] netlink_unicast+0x54e/0x800 [ 3148.878431] ? netlink_attachskb+0x870/0x870 [ 3148.879378] netlink_sendmsg+0x90f/0xe00 [ 3148.880247] ? netlink_unicast+0x800/0x800 [ 3148.881176] ? netlink_unicast+0x800/0x800 [ 3148.882080] __sock_sendmsg+0x154/0x190 [ 3148.882929] ____sys_sendmsg+0x70d/0x870 [ 3148.883799] ? sock_write_iter+0x3d0/0x3d0 [ 3148.884703] ? do_recvmmsg+0x6d0/0x6d0 [ 3148.885534] ? lock_downgrade+0x6d0/0x6d0 [ 3148.886431] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3148.887557] ___sys_sendmsg+0xf3/0x170 [ 3148.888387] ? sendmsg_copy_msghdr+0x160/0x160 [ 3148.889370] ? __fget_files+0x2cf/0x520 [ 3148.890218] ? lock_downgrade+0x6d0/0x6d0 [ 3148.891100] ? find_held_lock+0x2c/0x110 [ 3148.891974] ? __fget_files+0x2f8/0x520 [ 3148.892836] ? __fget_light+0xea/0x290 [ 3148.893669] __sys_sendmsg+0xe5/0x1b0 [ 3148.894480] ? __sys_sendmsg_sock+0x40/0x40 [ 3148.895392] ? rcu_read_lock_any_held+0x75/0xa0 [ 3148.896399] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3148.897517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3148.898608] ? trace_hardirqs_on+0x5b/0x180 [ 3148.899525] do_syscall_64+0x33/0x40 [ 3148.900315] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3148.901405] RIP: 0033:0x7f8f5b2cdb19 [ 3148.902192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3148.906102] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3148.907715] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3148.909228] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3148.910737] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3148.912249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3148.913762] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 [ 3148.915297] CPU: 1 PID: 135753 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3148.916124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3148.917085] Call Trace: [ 3148.917398] dump_stack+0x107/0x167 [ 3148.917819] should_fail.cold+0x5/0xa [ 3148.918267] ? create_object.isra.0+0x3a/0xa20 [ 3148.918810] should_failslab+0x5/0x20 [ 3148.919270] kmem_cache_alloc+0x5b/0x310 [ 3148.919749] create_object.isra.0+0x3a/0xa20 [ 3148.920252] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3148.920851] __kmalloc+0x16e/0x390 [ 3148.921270] ext4_find_extent+0xa77/0xd70 [ 3148.921761] ext4_ext_map_blocks+0x1c8/0x5830 00:29:15 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 19) [ 3148.922292] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3148.923067] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3148.923675] ? ext4_ext_release+0x10/0x10 [ 3148.924158] ? ext4_map_blocks+0x5cd/0x1910 [ 3148.924667] ? lock_release+0x680/0x680 [ 3148.925128] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 3148.925673] ? lock_downgrade+0x6d0/0x6d0 [ 3148.926148] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 3148.926752] ? down_write+0xe0/0x160 [ 3148.927177] ? down_write_killable+0x180/0x180 [ 3148.927704] ext4_map_blocks+0x63f/0x1910 [ 3148.928181] ? _down_write_nest_lock+0x160/0x160 [ 3148.928726] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3148.929241] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 3148.929791] ext4_getblk+0x144/0x680 [ 3148.930224] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 3148.930788] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3148.931303] ? __brelse+0x84/0xa0 [ 3148.931700] ? __ext4_new_inode+0x148/0x5370 00:29:15 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x399, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:29:15 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x600, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3148.932203] ext4_bread+0x29/0x1f0 [ 3148.932781] ext4_append+0x228/0x4e0 [ 3148.933222] ? ext4_move_extents+0x3050/0x3050 [ 3148.933741] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3148.934306] ext4_init_new_dir+0x25e/0x4d0 [ 3148.934789] ? ext4_init_dot_dotdot+0x610/0x610 [ 3148.935326] ext4_mkdir+0x3c1/0xb10 [ 3148.935746] ? ext4_rmdir+0xf70/0xf70 [ 3148.936191] vfs_mkdir+0x493/0x750 [ 3148.936609] do_mkdirat+0x150/0x2b0 [ 3148.937024] ? user_path_create+0xf0/0xf0 [ 3148.937496] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3148.938094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3148.938687] do_syscall_64+0x33/0x40 [ 3148.939112] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3148.939699] RIP: 0033:0x7f909c7eac27 [ 3148.940125] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3148.942239] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3148.943104] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3148.943917] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3148.944740] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3148.945561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3148.946382] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 00:29:15 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 23) [ 3148.969777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3148.972079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3148.997135] nfs: Bad value for 'rootcontext' 00:29:15 executing program 5: syz_read_part_table(0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000000)='S', 0x1}, {&(0x7f00000000c0)='u', 0x1}]) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x9, 0xa, &(0x7f00000006c0)=[{&(0x7f0000000140)="b5a9fb06a2ebc6b02ee1090155234b704a10e3958def5d", 0x17, 0x7fffffff}, {&(0x7f0000000180)="fb89899bf79969f311c64ac63891622fdbd152", 0x13, 0x20}, {&(0x7f00000001c0)="77b4bd", 0x3, 0x80000001}, {&(0x7f0000000200)="0264c62598f841f1fe15c20f14f0661e2de2654776af63de80fdbf25e4bfbcb56850cb40f1cb0b397258ccfaa5d9440e659fedde05534135806c3ae7e1f38ce88d5c1970bcf283b455f3ff01b0eafef41858c046c2fbd91d82c6c41c256eabeda508a33f53c13b5e8b480ae1bfb3b0c5a726e38cc23e53ad8c0b7de78218c46d07c7f8598b7e4656bed2cd53663e0f4a05856c81be983fe7c730cb831a86804b64ceea13208447d5460726d1c488ae819534b1e2ad1aab534ceb9991c2c34a87c401531e2fe81cbace5b146eaba32126b2b92021a455883db723cdc5d55db2b16aad1dbbbc", 0xe5, 0x2}, {&(0x7f0000000300)="c88493fa63407f4121199ac12205bd72a80d9476b73d29a490a3679aec94d72d839f6cfac1a4e15332e93433c803f7304f209f3d10894f2b07b6b372cf56d7", 0x3f, 0x3}, {&(0x7f0000000340)="2674a90f63180ea7c8bbf1564e10f7f82b4932ba5da083fdc2c88115b7e4bf6c377243e0d8d9cca9089ddae24165d6723967414cb71bc89217241dba53e2d76b70bebe5c36789c27c5628f20557d1c1f78c289c1d8169e7a4441c0a83c77a90fdf7dd7b1ce3c4c6a95ce52ca18a646955c0f8d412673964b05ec404751b7af7e42b0cde289c3f5462c93790f092aa06f35a23ee489d717e5f2aed91d0e36a1ade76d513c6d695f96a2e488292e3344b941fd73fbd03c99b5050d913f711e87e1", 0xc0, 0x40}, {&(0x7f0000000400)="dd32e0f483f644736bc7d26eb162a31e01691d8917a3a571a9552cba1c43e79b7a19494f9bdbcaa636777d5a7f44ac988520ac66deb81c844db51cc9aefb58f1cfd10e936784db865e050c3e3fea6198b421ff3b2a1d2ffba3fdeff40183d74968d4f3faba488592cf6b84d2d6ef8eb81d8d41006f473cb9af16a42b381888b7fbe3da70bc33a3ac6289c996a9d069226b3cd32fbb", 0x95, 0x800}, {&(0x7f00000004c0)="d96126344d91c9d4c3809b6f5b65242f4c6c45b850be31fe07dc1e0b665ea8395b672a5aeb35f7c053be95720940140bff28eb4729d5b15084fbf8e1929115e394cd74c79d8b15fd9a0772eb97922c3b2cea0822987433b8b03a0096b2e2986c65382094118ad6ed71f52049eb620a40069d5a65e1618ab7a72720867325bb9cfb34e0", 0x83, 0x3}, {&(0x7f0000000580)="a19271e789775755461d3b700155fbec4b8cffba11a311716ee2d25ed08cd6d740369f5bd9769f98b9536409f7a8041ca777a0ce6144a7d441c2b675f36846d38c476489e0955a05cc0841edbb5f29d9c4b9a0b89ad9e6be073e2d7e10f89767c165c916fa8eefc05c9b3a98007c59175672ede2a551992413c18ae327b448532f38726b7a5545a1e33bec3150360b36c37c473431cd38e94728fab594a3376e1d6bc281263b518085e5aece0d6231117df2a881dc3cd062b80c9ca6f1d1c94685b9b9a9", 0xc4, 0x42}, {&(0x7f0000000680), 0x0, 0x1}], 0x100045c, &(0x7f00000007c0)={[{@huge_within_size}, {@huge_never}, {@size={'size', 0x3d, [0x35, 0x32, 0x30, 0x34]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x53]}}], [{@seclabel}, {@context={'context', 0x3d, 'root'}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) [ 3149.007285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3149.008841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3149.011856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3149.018138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3149.020023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3149.023819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3149.039549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:29:15 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x699, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:29:15 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:15 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 20) [ 3149.065279] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3149.075638] FAULT_INJECTION: forcing a failure. [ 3149.075638] name failslab, interval 1, probability 0, space 0, times 0 [ 3149.076988] CPU: 1 PID: 135908 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3149.077792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3149.078760] Call Trace: [ 3149.079068] dump_stack+0x107/0x167 [ 3149.079499] should_fail.cold+0x5/0xa [ 3149.079944] ? ext4_mb_new_blocks+0x698/0x45c0 [ 3149.080527] should_failslab+0x5/0x20 [ 3149.080973] kmem_cache_alloc+0x5b/0x310 [ 3149.081452] ext4_mb_new_blocks+0x698/0x45c0 [ 3149.081980] ? trace_hardirqs_on+0x5b/0x180 [ 3149.082484] ? kasan_unpoison_shadow+0x33/0x50 [ 3149.083012] ? ext4_cache_extents+0x68/0x2d0 [ 3149.083517] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3149.084101] ? ext4_discard_preallocations+0xd80/0xd80 [ 3149.084725] ? ext4_ext_search_right+0x2e3/0xbd0 [ 3149.085279] ? ext4_inode_to_goal_block+0x320/0x430 [ 3149.085863] ext4_ext_map_blocks+0x1d49/0x5830 [ 3149.086405] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3149.087010] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3149.087628] ? ext4_ext_release+0x10/0x10 [ 3149.088113] ? ext4_map_blocks+0x5cd/0x1910 [ 3149.088620] ? lock_release+0x680/0x680 [ 3149.089077] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 3149.089622] ? lock_downgrade+0x6d0/0x6d0 [ 3149.090099] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 3149.090717] ? down_write_killable+0x180/0x180 [ 3149.091249] ext4_map_blocks+0x63f/0x1910 [ 3149.091735] ? _down_write_nest_lock+0x160/0x160 [ 3149.092282] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3149.092807] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 3149.093357] ext4_getblk+0x144/0x680 [ 3149.093790] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 3149.094367] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3149.094888] ? __brelse+0x84/0xa0 [ 3149.095291] ? __ext4_new_inode+0x148/0x5370 [ 3149.095426] FAULT_INJECTION: forcing a failure. [ 3149.095426] name failslab, interval 1, probability 0, space 0, times 0 [ 3149.095798] ext4_bread+0x29/0x1f0 [ 3149.095810] ext4_append+0x228/0x4e0 [ 3149.095823] ? ext4_move_extents+0x3050/0x3050 [ 3149.095841] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3149.100065] ext4_init_new_dir+0x25e/0x4d0 [ 3149.100564] ? ext4_init_dot_dotdot+0x610/0x610 [ 3149.101108] ext4_mkdir+0x3c1/0xb10 [ 3149.101532] ? ext4_rmdir+0xf70/0xf70 [ 3149.101977] vfs_mkdir+0x493/0x750 [ 3149.102390] do_mkdirat+0x150/0x2b0 [ 3149.102811] ? user_path_create+0xf0/0xf0 [ 3149.103290] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3149.103901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3149.104509] do_syscall_64+0x33/0x40 [ 3149.104940] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3149.105529] RIP: 0033:0x7f909c7eac27 [ 3149.105959] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3149.108082] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3149.108973] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3149.109794] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3149.110617] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3149.111444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3149.112272] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3149.113128] CPU: 0 PID: 135910 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3149.114633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3149.116406] Call Trace: [ 3149.116990] dump_stack+0x107/0x167 [ 3149.117775] should_fail.cold+0x5/0xa [ 3149.118592] ? create_object.isra.0+0x3a/0xa20 [ 3149.119570] should_failslab+0x5/0x20 [ 3149.120382] kmem_cache_alloc+0x5b/0x310 [ 3149.121259] ? lock_downgrade+0x6d0/0x6d0 [ 3149.122150] create_object.isra.0+0x3a/0xa20 [ 3149.123086] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3149.124174] __kmalloc_track_caller+0x177/0x370 [ 3149.125176] ? p9_client_create+0x41d/0x1230 [ 3149.126120] kstrdup+0x36/0x70 [ 3149.126812] p9_client_create+0x41d/0x1230 [ 3149.127710] ? lock_downgrade+0x6d0/0x6d0 [ 3149.128609] ? p9_client_flush+0x430/0x430 [ 3149.129511] ? trace_hardirqs_on+0x5b/0x180 [ 3149.130426] ? lockdep_init_map_type+0x2c7/0x780 [ 3149.131433] ? __raw_spin_lock_init+0x36/0x110 [ 3149.132410] v9fs_session_init+0x1dd/0x1680 [ 3149.133338] ? lock_release+0x680/0x680 [ 3149.134191] ? kmem_cache_alloc_trace+0x151/0x320 [ 3149.135216] ? v9fs_show_options+0x690/0x690 [ 3149.136160] ? trace_hardirqs_on+0x5b/0x180 [ 3149.137085] ? kasan_unpoison_shadow+0x33/0x50 [ 3149.138052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3149.139135] v9fs_mount+0x79/0x8f0 [ 3149.139891] ? v9fs_write_inode+0x60/0x60 [ 3149.140791] legacy_get_tree+0x105/0x220 [ 3149.141656] vfs_get_tree+0x8e/0x300 [ 3149.142444] path_mount+0x1429/0x2120 [ 3149.143262] ? strncpy_from_user+0x9e/0x470 [ 3149.144171] ? finish_automount+0xa90/0xa90 [ 3149.145103] ? getname_flags.part.0+0x1dd/0x4f0 [ 3149.146090] ? _copy_from_user+0xfb/0x1b0 [ 3149.146975] __x64_sys_mount+0x282/0x300 [ 3149.147835] ? copy_mnt_ns+0xa00/0xa00 [ 3149.148675] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3149.149795] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3149.150887] do_syscall_64+0x33/0x40 [ 3149.151679] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3149.152773] RIP: 0033:0x7f070967ab19 [ 3149.153565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3149.157480] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3149.159104] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3149.160625] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3149.162145] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3149.163663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3149.165188] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3149.181799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3149.183369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3149.185018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:29:15 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:15 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 17) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:15 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 21) 00:29:15 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:15 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3149.260575] FAULT_INJECTION: forcing a failure. [ 3149.260575] name failslab, interval 1, probability 0, space 0, times 0 [ 3149.263039] CPU: 0 PID: 135992 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3149.264552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3149.266330] Call Trace: [ 3149.266763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3149.266899] dump_stack+0x107/0x167 [ 3149.268520] 9pnet: Insufficient options for proto=fd [ 3149.268674] should_fail.cold+0x5/0xa [ 3149.268702] ? create_object.isra.0+0x3a/0xa20 [ 3149.271050] should_failslab+0x5/0x20 [ 3149.271861] kmem_cache_alloc+0x5b/0x310 [ 3149.272744] create_object.isra.0+0x3a/0xa20 [ 3149.273682] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3149.274771] kmem_cache_alloc+0x159/0x310 [ 3149.275663] ext4_mb_new_blocks+0x698/0x45c0 [ 3149.276605] ? trace_hardirqs_on+0x5b/0x180 [ 3149.277527] ? kasan_unpoison_shadow+0x33/0x50 [ 3149.278495] ? ext4_cache_extents+0x68/0x2d0 [ 3149.279432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3149.280519] ? ext4_discard_preallocations+0xd80/0xd80 [ 3149.281637] ? ext4_ext_search_right+0x2e3/0xbd0 [ 3149.282644] ? ext4_inode_to_goal_block+0x320/0x430 [ 3149.283714] ext4_ext_map_blocks+0x1d49/0x5830 00:29:15 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 24) [ 3149.284716] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3149.285922] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3149.287035] ? ext4_ext_release+0x10/0x10 [ 3149.287923] ? ext4_map_blocks+0x5cd/0x1910 [ 3149.288842] ? lock_release+0x680/0x680 [ 3149.289683] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 3149.290682] ? lock_downgrade+0x6d0/0x6d0 [ 3149.291559] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 3149.292695] ? down_write_killable+0x180/0x180 [ 3149.293675] ext4_map_blocks+0x63f/0x1910 [ 3149.294562] ? _down_write_nest_lock+0x160/0x160 [ 3149.295568] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3149.296522] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 3149.297532] ext4_getblk+0x144/0x680 [ 3149.298324] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 3149.299378] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3149.300325] ? __brelse+0x84/0xa0 [ 3149.301065] ? __ext4_new_inode+0x148/0x5370 [ 3149.302002] ext4_bread+0x29/0x1f0 [ 3149.302755] ext4_append+0x228/0x4e0 [ 3149.303553] ? ext4_move_extents+0x3050/0x3050 [ 3149.304528] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3149.305560] ext4_init_new_dir+0x25e/0x4d0 [ 3149.306459] ? ext4_init_dot_dotdot+0x610/0x610 [ 3149.307459] ext4_mkdir+0x3c1/0xb10 [ 3149.308238] ? ext4_rmdir+0xf70/0xf70 [ 3149.309070] vfs_mkdir+0x493/0x750 [ 3149.309827] do_mkdirat+0x150/0x2b0 [ 3149.310605] ? user_path_create+0xf0/0xf0 [ 3149.311488] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3149.312612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3149.313711] do_syscall_64+0x33/0x40 [ 3149.314500] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3149.315584] RIP: 0033:0x7f909c7eac27 [ 3149.316371] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3149.320290] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3149.321909] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3149.323420] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3149.324939] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3149.326454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3149.327963] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3149.334355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3149.335910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3149.337539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3149.342351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3149.351149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3149.358666] nfs: Bad value for 'rootcontext' [ 3149.374516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3149.376098] FAULT_INJECTION: forcing a failure. [ 3149.376098] name failslab, interval 1, probability 0, space 0, times 0 [ 3149.377505] CPU: 1 PID: 136036 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3149.378311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3149.379281] Call Trace: [ 3149.379593] dump_stack+0x107/0x167 [ 3149.380018] should_fail.cold+0x5/0xa [ 3149.380472] ? create_object.isra.0+0x3a/0xa20 [ 3149.381022] should_failslab+0x5/0x20 [ 3149.381469] kmem_cache_alloc+0x5b/0x310 [ 3149.381947] create_object.isra.0+0x3a/0xa20 [ 3149.382456] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3149.383052] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3149.383639] ? cfg80211_del_sta_sinfo+0x15e/0x480 [ 3149.384204] __alloc_skb+0xb1/0x5b0 [ 3149.384634] cfg80211_del_sta_sinfo+0x15e/0x480 [ 3149.385176] ? cfg80211_new_sta+0x370/0x370 [ 3149.385706] __sta_info_destroy_part2+0x310/0x4f0 [ 3149.386265] __sta_info_flush+0x3a0/0x520 [ 3149.386757] ? __sta_info_destroy+0x50/0x50 [ 3149.387261] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3149.387872] ? trace_hardirqs_on+0x5b/0x180 [ 3149.388374] ? cfg80211_put_bss+0x1b0/0x270 [ 3149.388879] ? __local_bh_enable_ip+0x9d/0x100 [ 3149.389416] ieee80211_ibss_disconnect+0x115/0x750 [ 3149.389985] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3149.390596] ieee80211_ibss_leave+0x12/0x160 [ 3149.391101] __cfg80211_leave_ibss+0x183/0x4f0 [ 3149.391636] __cfg80211_leave+0x14b/0x370 [ 3149.392113] cfg80211_netdev_notifier_call+0x385/0x10c0 [ 3149.392775] ? ipmr_device_event+0x192/0x1f0 [ 3149.393291] raw_notifier_call_chain+0xb3/0x110 [ 3149.393835] call_netdevice_notifiers_info+0xba/0x130 [ 3149.394432] __dev_close_many+0xf3/0x2f0 [ 3149.394904] ? skb_crc32c_csum_help.part.0+0x4d0/0x4d0 [ 3149.395516] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3149.396116] ? __local_bh_enable_ip+0x9d/0x100 [ 3149.396647] ? trace_hardirqs_on+0x5b/0x180 [ 3149.397152] __dev_change_flags+0x299/0x6e0 [ 3149.397653] ? dev_set_allmulti+0x30/0x30 [ 3149.398130] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3149.398766] dev_change_flags+0x8a/0x160 [ 3149.399243] do_setlink+0x911/0x3ac0 [ 3149.399677] ? lock_chain_count+0x20/0x20 [ 3149.400151] ? vprintk_func+0x93/0x140 [ 3149.400607] ? rtnl_getlink+0xaa0/0xaa0 [ 3149.401068] ? printk+0xba/0xf1 [ 3149.401456] ? record_print_text.cold+0x16/0x16 [ 3149.401996] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3149.402583] ? trace_hardirqs_on+0x5b/0x180 [ 3149.403092] ? mark_held_locks+0x9e/0xe0 [ 3149.403568] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3149.404170] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3149.404803] ? trace_hardirqs_on+0x5b/0x180 [ 3149.405298] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3149.405920] ? __dev_get_by_index+0x10/0x150 [ 3149.406428] __rtnl_newlink+0xc3e/0x1700 [ 3149.406898] ? rtnl_setlink+0x3c0/0x3c0 [ 3149.407362] ? __is_insn_slot_addr+0x123/0x290 [ 3149.407891] ? unwind_next_frame+0x13ef/0x1a90 [ 3149.408415] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3149.409033] ? 0xffffffffa0000000 [ 3149.409438] ? __is_insn_slot_addr+0x14c/0x290 [ 3149.409967] ? kernel_text_address+0xf2/0x120 [ 3149.410482] ? __kernel_text_address+0x9/0x40 [ 3149.411001] ? unwind_get_return_address+0x55/0xa0 [ 3149.411569] ? create_prof_cpu_mask+0x20/0x20 [ 3149.412086] ? arch_stack_walk+0x99/0xf0 [ 3149.412572] ? stack_trace_save+0x8c/0xc0 [ 3149.413080] ? mark_held_locks+0x9e/0xe0 [ 3149.413553] ? trace_hardirqs_on+0x5b/0x180 [ 3149.414045] ? kasan_unpoison_shadow+0x33/0x50 [ 3149.414568] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3149.415148] rtnl_newlink+0x64/0xa0 [ 3149.415560] ? __rtnl_newlink+0x1700/0x1700 [ 3149.416051] rtnetlink_rcv_msg+0x423/0xbb0 [ 3149.416543] ? rtnl_fdb_dump+0xa30/0xa30 [ 3149.417015] ? lock_acquire+0x197/0x470 [ 3149.417476] ? netlink_deliver_tap+0xf4/0xcc0 [ 3149.417990] netlink_rcv_skb+0x14b/0x430 [ 3149.418457] ? rtnl_fdb_dump+0xa30/0xa30 [ 3149.418925] ? netlink_ack+0xab0/0xab0 [ 3149.419368] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3149.419892] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3149.420417] ? is_vmalloc_addr+0x7b/0xb0 [ 3149.420893] netlink_unicast+0x54e/0x800 [ 3149.421361] ? netlink_attachskb+0x870/0x870 [ 3149.421869] netlink_sendmsg+0x90f/0xe00 [ 3149.422338] ? netlink_unicast+0x800/0x800 [ 3149.422829] ? netlink_unicast+0x800/0x800 [ 3149.423319] __sock_sendmsg+0x154/0x190 [ 3149.423775] ____sys_sendmsg+0x70d/0x870 [ 3149.424241] ? sock_write_iter+0x3d0/0x3d0 [ 3149.424730] ? do_recvmmsg+0x6d0/0x6d0 [ 3149.425177] ? lock_downgrade+0x6d0/0x6d0 [ 3149.425655] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3149.426264] ___sys_sendmsg+0xf3/0x170 [ 3149.426711] ? sendmsg_copy_msghdr+0x160/0x160 [ 3149.427239] ? __fget_files+0x2cf/0x520 [ 3149.427697] ? lock_downgrade+0x6d0/0x6d0 [ 3149.428174] ? find_held_lock+0x2c/0x110 [ 3149.428657] ? __fget_files+0x2f8/0x520 [ 3149.429119] ? __fget_light+0xea/0x290 [ 3149.429567] __sys_sendmsg+0xe5/0x1b0 [ 3149.430005] ? __sys_sendmsg_sock+0x40/0x40 [ 3149.430501] ? rcu_read_lock_any_held+0x75/0xa0 [ 3149.431042] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3149.431653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3149.432252] ? trace_hardirqs_on+0x5b/0x180 [ 3149.432760] do_syscall_64+0x33/0x40 [ 3149.433185] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3149.433776] RIP: 0033:0x7f8f5b2cdb19 [ 3149.434203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3149.436328] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3149.437218] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3149.438033] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3149.438854] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3149.439676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3149.440506] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 [ 3149.443892] FAULT_INJECTION: forcing a failure. [ 3149.443892] name failslab, interval 1, probability 0, space 0, times 0 [ 3149.445197] CPU: 1 PID: 136058 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3149.445993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3149.446944] Call Trace: [ 3149.447246] dump_stack+0x107/0x167 [ 3149.447664] should_fail.cold+0x5/0xa [ 3149.448109] should_failslab+0x5/0x20 [ 3149.448552] __kmalloc_track_caller+0x79/0x370 [ 3149.449084] ? p9_client_create+0x41d/0x1230 [ 3149.449594] kstrdup+0x36/0x70 [ 3149.449969] p9_client_create+0x41d/0x1230 [ 3149.450463] ? lock_downgrade+0x6d0/0x6d0 [ 3149.450944] ? p9_client_flush+0x430/0x430 [ 3149.451434] ? trace_hardirqs_on+0x5b/0x180 [ 3149.451931] ? lockdep_init_map_type+0x2c7/0x780 [ 3149.452488] ? __raw_spin_lock_init+0x36/0x110 [ 3149.453019] v9fs_session_init+0x1dd/0x1680 [ 3149.453521] ? lock_release+0x680/0x680 [ 3149.453980] ? kmem_cache_alloc_trace+0x151/0x320 [ 3149.454538] ? v9fs_show_options+0x690/0x690 [ 3149.455046] ? trace_hardirqs_on+0x5b/0x180 [ 3149.455540] ? kasan_unpoison_shadow+0x33/0x50 [ 3149.456062] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3149.456652] v9fs_mount+0x79/0x8f0 [ 3149.457062] ? v9fs_write_inode+0x60/0x60 [ 3149.457544] legacy_get_tree+0x105/0x220 [ 3149.458016] vfs_get_tree+0x8e/0x300 [ 3149.458446] path_mount+0x1429/0x2120 [ 3149.458890] ? strncpy_from_user+0x9e/0x470 [ 3149.459389] ? finish_automount+0xa90/0xa90 [ 3149.459892] ? getname_flags.part.0+0x1dd/0x4f0 [ 3149.460428] ? _copy_from_user+0xfb/0x1b0 [ 3149.460925] __x64_sys_mount+0x282/0x300 [ 3149.461392] ? copy_mnt_ns+0xa00/0xa00 [ 3149.461845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3149.462447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3149.463043] do_syscall_64+0x33/0x40 [ 3149.463471] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3149.464058] RIP: 0033:0x7f070967ab19 [ 3149.464493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3149.466610] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3149.467493] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3149.468315] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3149.469144] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3149.469968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3149.470794] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3149.539919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3149.541541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3149.543434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3149.545383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3149.549802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3149.553084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:29:29 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 18) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:29 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3163.502766] FAULT_INJECTION: forcing a failure. [ 3163.502766] name failslab, interval 1, probability 0, space 0, times 0 [ 3163.504527] CPU: 1 PID: 136140 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3163.505438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3163.506504] Call Trace: [ 3163.506858] dump_stack+0x107/0x167 [ 3163.507327] should_fail.cold+0x5/0xa [ 3163.507824] ? create_object.isra.0+0x3a/0xa20 [ 3163.508415] should_failslab+0x5/0x20 [ 3163.508915] kmem_cache_alloc+0x5b/0x310 [ 3163.509441] create_object.isra.0+0x3a/0xa20 [ 3163.510010] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3163.510673] __kmalloc_track_caller+0x177/0x370 [ 3163.511278] ? p9_client_create+0x51e/0x1230 [ 3163.511850] kmemdup_nul+0x2d/0xa0 [ 3163.512312] p9_client_create+0x51e/0x1230 [ 3163.512877] ? p9_client_flush+0x430/0x430 [ 3163.513425] ? trace_hardirqs_on+0x5b/0x180 [ 3163.513985] ? lockdep_init_map_type+0x2c7/0x780 [ 3163.514602] ? __raw_spin_lock_init+0x36/0x110 [ 3163.515194] v9fs_session_init+0x1dd/0x1680 [ 3163.515767] ? lock_release+0x680/0x680 [ 3163.516282] ? kmem_cache_alloc_trace+0x151/0x320 [ 3163.516911] ? v9fs_show_options+0x690/0x690 [ 3163.517481] ? trace_hardirqs_on+0x5b/0x180 [ 3163.518038] ? kasan_unpoison_shadow+0x33/0x50 [ 3163.518619] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3163.519272] v9fs_mount+0x79/0x8f0 [ 3163.519730] ? v9fs_write_inode+0x60/0x60 [ 3163.520268] legacy_get_tree+0x105/0x220 [ 3163.521004] vfs_get_tree+0x8e/0x300 00:29:29 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 25) 00:29:29 executing program 5: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r3, r2, 0x0, 0x9bbb) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x26048, 0x0, 0x8001, 0x0, 0x2, 0xc858, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, r2, 0xa) readlinkat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/237, 0xed) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) 00:29:29 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x68, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:29 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 22) 00:29:29 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:29 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3163.521661] path_mount+0x1429/0x2120 [ 3163.522256] ? strncpy_from_user+0x9e/0x470 [ 3163.522857] ? finish_automount+0xa90/0xa90 [ 3163.523409] ? getname_flags.part.0+0x1dd/0x4f0 [ 3163.524014] ? _copy_from_user+0xfb/0x1b0 [ 3163.524554] __x64_sys_mount+0x282/0x300 [ 3163.525088] ? copy_mnt_ns+0xa00/0xa00 [ 3163.525592] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3163.526267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3163.526932] do_syscall_64+0x33/0x40 [ 3163.527566] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3163.528441] RIP: 0033:0x7f070967ab19 [ 3163.528981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3163.531342] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3163.532321] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3163.533250] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3163.533814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3163.534179] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3163.534195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3163.537790] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3163.548504] FAULT_INJECTION: forcing a failure. [ 3163.548504] name failslab, interval 1, probability 0, space 0, times 0 [ 3163.550011] CPU: 1 PID: 136163 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3163.550905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3163.551967] Call Trace: [ 3163.552306] dump_stack+0x107/0x167 [ 3163.552781] should_fail.cold+0x5/0xa [ 3163.553274] ? ext4_mb_new_blocks+0x1fd8/0x45c0 [ 3163.553870] should_failslab+0x5/0x20 [ 3163.554358] kmem_cache_alloc+0x5b/0x310 [ 3163.554882] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 3163.555466] ? trace_hardirqs_on+0x5b/0x180 [ 3163.556025] ? kasan_unpoison_shadow+0x33/0x50 [ 3163.556612] ? ext4_cache_extents+0x68/0x2d0 [ 3163.557181] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3163.557828] ? ext4_discard_preallocations+0xd80/0xd80 [ 3163.558499] ? ext4_ext_search_right+0x2e3/0xbd0 [ 3163.559114] ? ext4_inode_to_goal_block+0x320/0x430 [ 3163.559758] ext4_ext_map_blocks+0x1d49/0x5830 [ 3163.560347] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3163.561013] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3163.561688] ? ext4_ext_release+0x10/0x10 [ 3163.562220] ? ext4_map_blocks+0x5cd/0x1910 [ 3163.562776] ? lock_release+0x680/0x680 [ 3163.563286] ? ext4_es_lookup_extent+0x48d/0xaa0 [ 3163.563901] ? lock_downgrade+0x6d0/0x6d0 [ 3163.564431] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 3163.565106] ? down_write_killable+0x180/0x180 [ 3163.565688] ext4_map_blocks+0x63f/0x1910 [ 3163.566214] ? _down_write_nest_lock+0x160/0x160 [ 3163.566817] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3163.567384] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 3163.567976] ext4_getblk+0x144/0x680 [ 3163.568466] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 3163.569098] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3163.569677] ? __brelse+0x84/0xa0 [ 3163.570115] ? __ext4_new_inode+0x148/0x5370 [ 3163.570671] ext4_bread+0x29/0x1f0 [ 3163.571116] ext4_append+0x228/0x4e0 [ 3163.571595] ? ext4_move_extents+0x3050/0x3050 [ 3163.571695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3163.572171] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3163.572200] ext4_init_new_dir+0x25e/0x4d0 [ 3163.573726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3163.574328] ? ext4_init_dot_dotdot+0x610/0x610 [ 3163.575470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3163.576014] ext4_mkdir+0x3c1/0xb10 [ 3163.576039] ? ext4_rmdir+0xf70/0xf70 [ 3163.578766] vfs_mkdir+0x493/0x750 [ 3163.579215] do_mkdirat+0x150/0x2b0 [ 3163.579672] ? user_path_create+0xf0/0xf0 [ 3163.580206] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3163.580877] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3163.581530] do_syscall_64+0x33/0x40 [ 3163.582008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3163.582669] RIP: 0033:0x7f909c7eac27 [ 3163.583133] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3163.583523] 9pnet: Insufficient options for proto=fd [ 3163.585435] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3163.585448] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3163.585455] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3163.585462] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3163.585468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3163.585476] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3163.590989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3163.599856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3163.619890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3163.621857] FAULT_INJECTION: forcing a failure. [ 3163.621857] name failslab, interval 1, probability 0, space 0, times 0 [ 3163.623504] CPU: 1 PID: 136225 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3163.624374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3163.625408] Call Trace: [ 3163.625734] dump_stack+0x107/0x167 [ 3163.626188] should_fail.cold+0x5/0xa [ 3163.626663] should_failslab+0x5/0x20 [ 3163.627136] __kmalloc_node_track_caller+0x74/0x3b0 [ 3163.627755] ? netlink_trim+0x1ee/0x250 [ 3163.628256] pskb_expand_head+0x15a/0x1040 [ 3163.628789] ? nl80211_send_station+0xee3/0x30c0 [ 3163.629380] netlink_trim+0x1ee/0x250 [ 3163.629846] netlink_broadcast_filtered+0x62/0xe00 [ 3163.630454] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 3163.631105] netlink_broadcast+0x35/0x50 [ 3163.631614] cfg80211_del_sta_sinfo+0x26a/0x480 [ 3163.632192] ? cfg80211_new_sta+0x370/0x370 [ 3163.632766] __sta_info_destroy_part2+0x310/0x4f0 [ 3163.633370] __sta_info_flush+0x3a0/0x520 [ 3163.633889] ? __sta_info_destroy+0x50/0x50 [ 3163.634419] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3163.635056] ? trace_hardirqs_on+0x5b/0x180 [ 3163.635586] ? cfg80211_put_bss+0x1b0/0x270 [ 3163.636114] ? __local_bh_enable_ip+0x9d/0x100 [ 3163.636686] ieee80211_ibss_disconnect+0x115/0x750 [ 3163.637300] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3163.637957] ieee80211_ibss_leave+0x12/0x160 [ 3163.638496] __cfg80211_leave_ibss+0x183/0x4f0 [ 3163.639054] __cfg80211_leave+0x14b/0x370 [ 3163.639572] cfg80211_netdev_notifier_call+0x385/0x10c0 [ 3163.640220] ? ipmr_device_event+0x192/0x1f0 [ 3163.640774] raw_notifier_call_chain+0xb3/0x110 [ 3163.641342] call_netdevice_notifiers_info+0xba/0x130 [ 3163.641978] __dev_close_many+0xf3/0x2f0 [ 3163.642477] ? skb_crc32c_csum_help.part.0+0x4d0/0x4d0 [ 3163.643116] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3163.643750] ? __local_bh_enable_ip+0x9d/0x100 [ 3163.644299] ? trace_hardirqs_on+0x5b/0x180 [ 3163.644830] __dev_change_flags+0x299/0x6e0 [ 3163.645352] ? dev_set_allmulti+0x30/0x30 [ 3163.645861] dev_change_flags+0x8a/0x160 [ 3163.646358] do_setlink+0x911/0x3ac0 [ 3163.646812] ? vprintk_func+0x93/0x140 [ 3163.647282] ? rtnl_getlink+0xaa0/0xaa0 [ 3163.647765] ? printk+0xba/0xf1 [ 3163.648172] ? record_print_text.cold+0x16/0x16 [ 3163.648751] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3163.649384] ? trace_hardirqs_on+0x5b/0x180 [ 3163.649930] ? __nla_validate_parse+0x2d8/0x2b10 [ 3163.650512] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3163.651146] ? nla_get_range_signed+0x520/0x520 [ 3163.651710] ? __lock_acquire+0xbb1/0x5b00 [ 3163.652238] __rtnl_newlink+0xc3e/0x1700 [ 3163.652751] ? rtnl_setlink+0x3c0/0x3c0 [ 3163.653242] ? __is_insn_slot_addr+0x123/0x290 [ 3163.653803] ? unwind_next_frame+0x13ef/0x1a90 [ 3163.654364] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3163.655014] ? 0xffffffffa0000000 [ 3163.655441] ? __is_insn_slot_addr+0x14c/0x290 [ 3163.656006] ? kernel_text_address+0xf2/0x120 [ 3163.656547] ? __kernel_text_address+0x9/0x40 [ 3163.657106] ? unwind_get_return_address+0x55/0xa0 [ 3163.657704] ? create_prof_cpu_mask+0x20/0x20 [ 3163.658257] ? arch_stack_walk+0x99/0xf0 [ 3163.658759] ? stack_trace_save+0x8c/0xc0 [ 3163.659295] ? mark_held_locks+0x9e/0xe0 [ 3163.659790] ? trace_hardirqs_on+0x5b/0x180 [ 3163.660312] ? kasan_unpoison_shadow+0x33/0x50 [ 3163.660872] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3163.661487] rtnl_newlink+0x64/0xa0 [ 3163.661921] ? __rtnl_newlink+0x1700/0x1700 [ 3163.662443] rtnetlink_rcv_msg+0x423/0xbb0 [ 3163.662958] ? rtnl_fdb_dump+0xa30/0xa30 [ 3163.663450] ? lock_acquire+0x197/0x470 [ 3163.663930] ? netlink_deliver_tap+0xf4/0xcc0 [ 3163.664476] netlink_rcv_skb+0x14b/0x430 [ 3163.664985] ? rtnl_fdb_dump+0xa30/0xa30 [ 3163.665478] ? netlink_ack+0xab0/0xab0 [ 3163.665952] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3163.666512] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3163.667076] ? is_vmalloc_addr+0x7b/0xb0 [ 3163.667575] netlink_unicast+0x54e/0x800 [ 3163.668074] ? netlink_attachskb+0x870/0x870 [ 3163.668616] netlink_sendmsg+0x90f/0xe00 [ 3163.669126] ? netlink_unicast+0x800/0x800 [ 3163.669647] ? netlink_unicast+0x800/0x800 [ 3163.670170] __sock_sendmsg+0x154/0x190 [ 3163.670650] ____sys_sendmsg+0x70d/0x870 [ 3163.671156] ? sock_write_iter+0x3d0/0x3d0 [ 3163.671667] ? do_recvmmsg+0x6d0/0x6d0 [ 3163.672145] ? lock_downgrade+0x6d0/0x6d0 [ 3163.672656] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 00:29:30 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x799, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3163.673461] ___sys_sendmsg+0xf3/0x170 [ 3163.673988] ? sendmsg_copy_msghdr+0x160/0x160 [ 3163.674538] ? __fget_files+0x2cf/0x520 [ 3163.675021] ? lock_downgrade+0x6d0/0x6d0 [ 3163.675523] ? find_held_lock+0x2c/0x110 [ 3163.676015] ? __fget_files+0x2f8/0x520 [ 3163.676499] ? __fget_light+0xea/0x290 [ 3163.676977] __sys_sendmsg+0xe5/0x1b0 [ 3163.677437] ? __sys_sendmsg_sock+0x40/0x40 [ 3163.677953] ? rcu_read_lock_any_held+0x75/0xa0 [ 3163.678523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3163.679152] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3163.679764] ? trace_hardirqs_on+0x5b/0x180 [ 3163.680281] do_syscall_64+0x33/0x40 [ 3163.680732] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3163.681343] RIP: 0033:0x7f8f5b2cdb19 [ 3163.681784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3163.683985] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3163.684903] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3163.685764] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3163.686615] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3163.687476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3163.688326] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 00:29:30 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:30 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 26) 00:29:30 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 23) [ 3163.779265] FAULT_INJECTION: forcing a failure. [ 3163.779265] name failslab, interval 1, probability 0, space 0, times 0 [ 3163.781744] CPU: 0 PID: 136363 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3163.783235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3163.785012] Call Trace: [ 3163.785582] dump_stack+0x107/0x167 [ 3163.786358] should_fail.cold+0x5/0xa [ 3163.787172] should_failslab+0x5/0x20 [ 3163.787981] __kmalloc_track_caller+0x79/0x370 [ 3163.788957] ? p9_client_create+0x51e/0x1230 [ 3163.789901] kmemdup_nul+0x2d/0xa0 [ 3163.790657] p9_client_create+0x51e/0x1230 [ 3163.791564] ? p9_client_flush+0x430/0x430 [ 3163.792462] ? trace_hardirqs_on+0x5b/0x180 [ 3163.793386] ? lockdep_init_map_type+0x2c7/0x780 [ 3163.794392] ? __raw_spin_lock_init+0x36/0x110 [ 3163.795367] v9fs_session_init+0x1dd/0x1680 [ 3163.796287] ? lock_release+0x680/0x680 [ 3163.797146] ? kmem_cache_alloc_trace+0x151/0x320 [ 3163.798169] ? v9fs_show_options+0x690/0x690 [ 3163.799105] ? trace_hardirqs_on+0x5b/0x180 [ 3163.800019] ? kasan_unpoison_shadow+0x33/0x50 [ 3163.800990] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3163.802070] v9fs_mount+0x79/0x8f0 [ 3163.802822] ? v9fs_write_inode+0x60/0x60 [ 3163.803705] legacy_get_tree+0x105/0x220 [ 3163.804572] vfs_get_tree+0x8e/0x300 [ 3163.805367] path_mount+0x1429/0x2120 [ 3163.806177] ? strncpy_from_user+0x9e/0x470 [ 3163.807092] ? finish_automount+0xa90/0xa90 [ 3163.808003] ? getname_flags.part.0+0x1dd/0x4f0 [ 3163.808993] ? _copy_from_user+0xfb/0x1b0 [ 3163.809876] __x64_sys_mount+0x282/0x300 [ 3163.810730] ? copy_mnt_ns+0xa00/0xa00 [ 3163.811558] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3163.812675] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3163.813775] do_syscall_64+0x33/0x40 [ 3163.814568] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3163.815648] RIP: 0033:0x7f070967ab19 [ 3163.816453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3163.820344] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3163.821964] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3163.823470] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3163.824982] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3163.826488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3163.827997] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3163.843075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3163.843969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3163.844878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3163.846528] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3163.854029] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3163.862536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3163.863386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3163.864253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3163.866309] FAULT_INJECTION: forcing a failure. [ 3163.866309] name failslab, interval 1, probability 0, space 0, times 0 [ 3163.868889] CPU: 0 PID: 136419 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3163.870388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3163.872153] Call Trace: [ 3163.872722] dump_stack+0x107/0x167 [ 3163.873497] should_fail.cold+0x5/0xa [ 3163.874312] ? create_object.isra.0+0x3a/0xa20 [ 3163.875281] should_failslab+0x5/0x20 [ 3163.876086] kmem_cache_alloc+0x5b/0x310 [ 3163.876963] create_object.isra.0+0x3a/0xa20 [ 3163.877891] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3163.878971] kmem_cache_alloc+0x159/0x310 [ 3163.879859] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 3163.880827] ? trace_hardirqs_on+0x5b/0x180 [ 3163.881756] ? kasan_unpoison_shadow+0x33/0x50 [ 3163.882730] ? ext4_cache_extents+0x68/0x2d0 [ 3163.883674] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3163.884757] ? ext4_discard_preallocations+0xd80/0xd80 [ 3163.885875] ? ext4_ext_search_right+0x2e3/0xbd0 [ 3163.886886] ? ext4_inode_to_goal_block+0x320/0x430 [ 3163.887953] ext4_ext_map_blocks+0x1d49/0x5830 [ 3163.888941] ? mark_held_locks+0x9e/0xe0 [ 3163.889805] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3163.890916] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3163.892024] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3163.892981] ? trace_hardirqs_on+0x5b/0x180 [ 3163.893896] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3163.894845] ? finish_task_switch+0x126/0x5d0 [ 3163.895790] ? finish_task_switch+0xef/0x5d0 [ 3163.896735] ? ext4_ext_release+0x10/0x10 [ 3163.897627] ? ext4_map_blocks+0x5cd/0x1910 [ 3163.898550] ? lock_release+0x680/0x680 [ 3163.899399] ? io_schedule_timeout+0x140/0x140 [ 3163.900370] ? jbd2_journal_dirty_metadata+0x1bb/0xa10 [ 3163.901506] ? down_write_killable+0x180/0x180 [ 3163.902489] ext4_map_blocks+0x63f/0x1910 [ 3163.903374] ? _down_write_nest_lock+0x160/0x160 [ 3163.904378] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3163.905343] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 3163.906349] ext4_getblk+0x144/0x680 [ 3163.907143] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 3163.908202] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3163.909162] ? __brelse+0x84/0xa0 [ 3163.909898] ? __ext4_new_inode+0x148/0x5370 [ 3163.910840] ext4_bread+0x29/0x1f0 [ 3163.911593] ext4_append+0x228/0x4e0 [ 3163.912390] ? ext4_move_extents+0x3050/0x3050 [ 3163.913371] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3163.914404] ext4_init_new_dir+0x25e/0x4d0 [ 3163.915304] ? ext4_init_dot_dotdot+0x610/0x610 [ 3163.916303] ext4_mkdir+0x3c1/0xb10 [ 3163.917093] ? ext4_rmdir+0xf70/0xf70 [ 3163.917912] vfs_mkdir+0x493/0x750 [ 3163.918670] do_mkdirat+0x150/0x2b0 [ 3163.919441] ? user_path_create+0xf0/0xf0 [ 3163.920326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3163.921441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3163.922539] do_syscall_64+0x33/0x40 [ 3163.923328] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3163.924414] RIP: 0033:0x7f909c7eac27 [ 3163.925208] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3163.929110] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3163.930714] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3163.932222] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3163.933736] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3163.935236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3163.936754] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3163.941936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3163.942817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3163.943974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3163.945519] nfs: Bad value for 'rootcontext' 00:29:42 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:42 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:42 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x6c, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:42 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 24) [ 3176.012128] FAULT_INJECTION: forcing a failure. 00:29:42 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) (fail_nth: 19) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3176.012128] name failslab, interval 1, probability 0, space 0, times 0 00:29:42 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:42 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 27) 00:29:42 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x899, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) [ 3176.014946] CPU: 1 PID: 136578 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3176.016665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3176.018774] Call Trace: [ 3176.019451] dump_stack+0x107/0x167 [ 3176.020374] should_fail.cold+0x5/0xa [ 3176.021359] ? __es_insert_extent+0xed1/0x1370 [ 3176.022522] should_failslab+0x5/0x20 [ 3176.023305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3176.023492] kmem_cache_alloc+0x5b/0x310 [ 3176.025431] __es_insert_extent+0xed1/0x1370 [ 3176.026559] ext4_es_insert_extent+0x45d/0xf10 [ 3176.027717] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 3176.028830] ? down_write_killable+0x180/0x180 [ 3176.030014] ext4_map_blocks+0x80b/0x1910 [ 3176.031080] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3176.032209] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 3176.033442] ext4_getblk+0x144/0x680 [ 3176.034383] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 3176.035655] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3176.036795] ? __brelse+0x84/0xa0 [ 3176.037685] ? __ext4_new_inode+0x148/0x5370 [ 3176.038812] ext4_bread+0x29/0x1f0 [ 3176.039723] ext4_append+0x228/0x4e0 [ 3176.040674] ? ext4_move_extents+0x3050/0x3050 [ 3176.041859] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3176.043095] ext4_init_new_dir+0x25e/0x4d0 [ 3176.044182] ? ext4_init_dot_dotdot+0x610/0x610 [ 3176.045401] ext4_mkdir+0x3c1/0xb10 [ 3176.046344] ? ext4_rmdir+0xf70/0xf70 [ 3176.047324] vfs_mkdir+0x493/0x750 [ 3176.048250] do_mkdirat+0x150/0x2b0 [ 3176.049178] ? user_path_create+0xf0/0xf0 [ 3176.050245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.051566] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3176.052887] do_syscall_64+0x33/0x40 [ 3176.053857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3176.055168] RIP: 0033:0x7f909c7eac27 [ 3176.056113] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3176.060831] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3176.062774] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3176.064574] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3176.066383] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3176.068195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3176.069998] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 [ 3176.076769] FAULT_INJECTION: forcing a failure. [ 3176.076769] name failslab, interval 1, probability 0, space 0, times 0 [ 3176.078078] CPU: 0 PID: 136580 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 3176.078861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3176.079849] Call Trace: [ 3176.080149] dump_stack+0x107/0x167 [ 3176.080551] should_fail.cold+0x5/0xa [ 3176.081009] ? create_object.isra.0+0x3a/0xa20 [ 3176.081512] should_failslab+0x5/0x20 [ 3176.081931] kmem_cache_alloc+0x5b/0x310 [ 3176.082411] create_object.isra.0+0x3a/0xa20 [ 3176.082896] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3176.083492] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3176.084049] ? netlink_trim+0x1ee/0x250 [ 3176.084491] pskb_expand_head+0x15a/0x1040 [ 3176.085003] ? nl80211_send_station+0xee3/0x30c0 [ 3176.085525] netlink_trim+0x1ee/0x250 [ 3176.085975] netlink_broadcast_filtered+0x62/0xe00 [ 3176.086517] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 3176.087095] netlink_broadcast+0x35/0x50 [ 3176.087546] cfg80211_del_sta_sinfo+0x26a/0x480 [ 3176.088087] ? cfg80211_new_sta+0x370/0x370 [ 3176.088587] __sta_info_destroy_part2+0x310/0x4f0 [ 3176.089164] ? __sta_info_flush+0x34a/0x520 [ 3176.089644] __sta_info_flush+0x3a0/0x520 [ 3176.089727] FAULT_INJECTION: forcing a failure. [ 3176.089727] name failslab, interval 1, probability 0, space 0, times 0 [ 3176.090105] ? __sta_info_destroy+0x50/0x50 [ 3176.092927] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.093505] ? trace_hardirqs_on+0x5b/0x180 [ 3176.094010] ? cfg80211_put_bss+0x1b0/0x270 [ 3176.094487] ? __local_bh_enable_ip+0x9d/0x100 [ 3176.094992] ieee80211_ibss_disconnect+0x115/0x750 [ 3176.095530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.096147] ieee80211_ibss_leave+0x12/0x160 [ 3176.096635] __cfg80211_leave_ibss+0x183/0x4f0 [ 3176.097184] __cfg80211_leave+0x14b/0x370 [ 3176.097671] cfg80211_netdev_notifier_call+0x385/0x10c0 [ 3176.098288] ? ipmr_device_event+0x192/0x1f0 [ 3176.098784] raw_notifier_call_chain+0xb3/0x110 [ 3176.099337] call_netdevice_notifiers_info+0xba/0x130 [ 3176.099908] __dev_close_many+0xf3/0x2f0 [ 3176.100380] ? skb_crc32c_csum_help.part.0+0x4d0/0x4d0 [ 3176.100965] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.101531] ? __local_bh_enable_ip+0x9d/0x100 [ 3176.102024] ? trace_hardirqs_on+0x5b/0x180 [ 3176.102495] __dev_change_flags+0x299/0x6e0 [ 3176.102965] ? dev_set_allmulti+0x30/0x30 [ 3176.103423] dev_change_flags+0x8a/0x160 [ 3176.103869] do_setlink+0x911/0x3ac0 [ 3176.104278] ? lock_chain_count+0x20/0x20 [ 3176.104730] ? vprintk_func+0x93/0x140 [ 3176.105188] ? rtnl_getlink+0xaa0/0xaa0 [ 3176.105623] ? printk+0xba/0xf1 [ 3176.106010] ? record_print_text.cold+0x16/0x16 [ 3176.106525] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 3176.107108] ? trace_hardirqs_on+0x5b/0x180 [ 3176.107592] ? mark_held_locks+0x9e/0xe0 [ 3176.108068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.108645] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3176.109277] ? trace_hardirqs_on+0x5b/0x180 [ 3176.109779] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3176.110410] ? validate_linkmsg+0x18d/0x8b0 [ 3176.110910] ? validate_linkmsg+0x490/0x8b0 [ 3176.111413] __rtnl_newlink+0xc3e/0x1700 [ 3176.111894] ? rtnl_setlink+0x3c0/0x3c0 [ 3176.112361] ? __is_insn_slot_addr+0x123/0x290 [ 3176.112897] ? unwind_next_frame+0x13ef/0x1a90 [ 3176.113402] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3176.114017] ? 0xffffffffa0000000 [ 3176.114422] ? __is_insn_slot_addr+0x14c/0x290 [ 3176.114955] ? kernel_text_address+0xf2/0x120 [ 3176.115474] ? __kernel_text_address+0x9/0x40 [ 3176.115990] ? unwind_get_return_address+0x55/0xa0 [ 3176.116558] ? create_prof_cpu_mask+0x20/0x20 [ 3176.117083] ? arch_stack_walk+0x99/0xf0 [ 3176.117563] ? stack_trace_save+0x8c/0xc0 [ 3176.118075] ? mark_held_locks+0x9e/0xe0 [ 3176.118522] ? trace_hardirqs_on+0x5b/0x180 [ 3176.119019] ? kasan_unpoison_shadow+0x33/0x50 [ 3176.119549] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3176.120132] rtnl_newlink+0x64/0xa0 [ 3176.120553] ? __rtnl_newlink+0x1700/0x1700 [ 3176.121061] rtnetlink_rcv_msg+0x423/0xbb0 [ 3176.121551] ? rtnl_fdb_dump+0xa30/0xa30 [ 3176.122023] ? lock_acquire+0x197/0x470 [ 3176.122479] ? netlink_deliver_tap+0xf4/0xcc0 [ 3176.122998] netlink_rcv_skb+0x14b/0x430 [ 3176.123442] ? rtnl_fdb_dump+0xa30/0xa30 [ 3176.123911] ? netlink_ack+0xab0/0xab0 [ 3176.124356] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3176.124887] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3176.125417] ? is_vmalloc_addr+0x7b/0xb0 [ 3176.125888] netlink_unicast+0x54e/0x800 [ 3176.126355] ? netlink_attachskb+0x870/0x870 [ 3176.126868] netlink_sendmsg+0x90f/0xe00 [ 3176.127338] ? netlink_unicast+0x800/0x800 [ 3176.127804] ? netlink_unicast+0x800/0x800 [ 3176.128299] __sock_sendmsg+0x154/0x190 [ 3176.128761] ____sys_sendmsg+0x70d/0x870 [ 3176.129241] ? sock_write_iter+0x3d0/0x3d0 [ 3176.129729] ? do_recvmmsg+0x6d0/0x6d0 [ 3176.130180] ? lock_downgrade+0x6d0/0x6d0 [ 3176.130659] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3176.131264] ___sys_sendmsg+0xf3/0x170 [ 3176.131719] ? sendmsg_copy_msghdr+0x160/0x160 [ 3176.132251] ? __fget_files+0x2cf/0x520 [ 3176.132711] ? lock_downgrade+0x6d0/0x6d0 [ 3176.133199] ? find_held_lock+0x2c/0x110 [ 3176.133676] ? __fget_files+0x2f8/0x520 [ 3176.134138] ? __fget_light+0xea/0x290 [ 3176.134592] __sys_sendmsg+0xe5/0x1b0 [ 3176.135033] ? __sys_sendmsg_sock+0x40/0x40 [ 3176.135530] ? rcu_read_lock_any_held+0x75/0xa0 [ 3176.136079] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.136687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3176.137284] ? trace_hardirqs_on+0x5b/0x180 [ 3176.137782] do_syscall_64+0x33/0x40 [ 3176.138210] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3176.138798] RIP: 0033:0x7f8f5b2cdb19 [ 3176.139224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3176.141341] RSP: 002b:00007f8f58843188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3176.142216] RAX: ffffffffffffffda RBX: 00007f8f5b3e0f60 RCX: 00007f8f5b2cdb19 [ 3176.143031] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 3176.143849] RBP: 00007f8f588431d0 R08: 0000000000000000 R09: 0000000000000000 [ 3176.144664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3176.145489] R13: 00007ffe1d31fc1f R14: 00007f8f58843300 R15: 0000000000022000 [ 3176.146339] CPU: 1 PID: 136591 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 3176.147844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3176.149180] nfs: Bad value for 'rootcontext' [ 3176.149620] Call Trace: [ 3176.149643] dump_stack+0x107/0x167 [ 3176.149664] should_fail.cold+0x5/0xa [ 3176.152258] ? create_object.isra.0+0x3a/0xa20 [ 3176.153247] should_failslab+0x5/0x20 [ 3176.154056] kmem_cache_alloc+0x5b/0x310 [ 3176.154922] ? legacy_get_tree+0x105/0x220 [ 3176.155823] ? vfs_get_tree+0x8e/0x300 [ 3176.156662] create_object.isra.0+0x3a/0xa20 [ 3176.157612] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3176.158705] __kmalloc_track_caller+0x177/0x370 [ 3176.159698] ? parse_opts.part.0+0x8e/0x340 [ 3176.160624] kstrdup+0x36/0x70 [ 3176.161324] parse_opts.part.0+0x8e/0x340 [ 3176.162209] ? p9_fd_show_options+0x1c0/0x1c0 [ 3176.163173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.164286] ? quarantine_put+0x8b/0x1a0 [ 3176.165156] ? trace_hardirqs_on+0x5b/0x180 [ 3176.166078] ? kfree+0xd7/0x340 [ 3176.166788] p9_fd_create+0x98/0x4a0 [ 3176.167583] ? p9_conn_create+0x510/0x510 [ 3176.168471] ? p9_client_create+0x798/0x1230 [ 3176.169417] ? kfree+0xd7/0x340 [ 3176.170119] ? do_raw_spin_unlock+0x4f/0x220 [ 3176.171065] p9_client_create+0x7ff/0x1230 [ 3176.171981] ? p9_client_flush+0x430/0x430 [ 3176.172883] ? trace_hardirqs_on+0x5b/0x180 [ 3176.173812] ? lockdep_init_map_type+0x2c7/0x780 [ 3176.174831] ? __raw_spin_lock_init+0x36/0x110 [ 3176.175816] v9fs_session_init+0x1dd/0x1680 [ 3176.176736] ? lock_release+0x680/0x680 00:29:42 executing program 6: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{'rootcontext'}]}) (fail_nth: 25) [ 3176.177611] ? kmem_cache_alloc_trace+0x151/0x320 [ 3176.178762] ? v9fs_show_options+0x690/0x690 [ 3176.179721] ? trace_hardirqs_on+0x5b/0x180 [ 3176.180637] ? kasan_unpoison_shadow+0x33/0x50 [ 3176.181616] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3176.182696] v9fs_mount+0x79/0x8f0 [ 3176.183452] ? v9fs_write_inode+0x60/0x60 [ 3176.184338] legacy_get_tree+0x105/0x220 [ 3176.185214] vfs_get_tree+0x8e/0x300 [ 3176.186007] path_mount+0x1429/0x2120 [ 3176.186826] ? strncpy_from_user+0x9e/0x470 [ 3176.187744] ? finish_automount+0xa90/0xa90 [ 3176.188667] ? getname_flags.part.0+0x1dd/0x4f0 [ 3176.189672] ? _copy_from_user+0xfb/0x1b0 [ 3176.190570] __x64_sys_mount+0x282/0x300 [ 3176.191433] ? copy_mnt_ns+0xa00/0xa00 [ 3176.192280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.193413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3176.194517] do_syscall_64+0x33/0x40 [ 3176.195317] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3176.196407] RIP: 0033:0x7f070967ab19 [ 3176.197218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3176.201146] RSP: 002b:00007f0706bf0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3176.202770] RAX: ffffffffffffffda RBX: 00007f070978df60 RCX: 00007f070967ab19 [ 3176.204289] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000 [ 3176.205819] RBP: 00007f0706bf01d0 R08: 0000000020000100 R09: 0000000000000000 [ 3176.207343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3176.208864] R13: 00007ffd395604ff R14: 00007f0706bf0300 R15: 0000000000022000 [ 3176.226514] FAULT_INJECTION: forcing a failure. [ 3176.226514] name failslab, interval 1, probability 0, space 0, times 0 [ 3176.228962] CPU: 1 PID: 136886 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 3176.230457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3176.232227] Call Trace: [ 3176.232796] dump_stack+0x107/0x167 [ 3176.233582] should_fail.cold+0x5/0xa [ 3176.234396] ? create_object.isra.0+0x3a/0xa20 [ 3176.235385] should_failslab+0x5/0x20 [ 3176.236207] kmem_cache_alloc+0x5b/0x310 [ 3176.237092] create_object.isra.0+0x3a/0xa20 [ 3176.238036] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3176.239119] kmem_cache_alloc+0x159/0x310 [ 3176.240005] __es_insert_extent+0xed1/0x1370 [ 3176.240971] ext4_es_insert_extent+0x45d/0xf10 [ 3176.241951] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 3176.242874] ? lock_downgrade+0x6d0/0x6d0 [ 3176.243771] ? down_write_killable+0x180/0x180 [ 3176.244759] ext4_map_blocks+0x80b/0x1910 [ 3176.245669] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3176.246626] ? ext4_es_lookup_extent+0xc4/0xaa0 [ 3176.247631] ext4_getblk+0x144/0x680 [ 3176.248427] ? ext4_iomap_overwrite_begin+0xb0/0xb0 [ 3176.249494] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 3176.250456] ? __brelse+0x84/0xa0 [ 3176.251198] ? __ext4_new_inode+0x148/0x5370 [ 3176.252141] ext4_bread+0x29/0x1f0 [ 3176.252893] ext4_append+0x228/0x4e0 [ 3176.253704] ? ext4_move_extents+0x3050/0x3050 [ 3176.254684] ? ext4_mark_inode_used+0x14b0/0x14b0 [ 3176.255724] ext4_init_new_dir+0x25e/0x4d0 [ 3176.256630] ? ext4_init_dot_dotdot+0x610/0x610 [ 3176.257644] ext4_mkdir+0x3c1/0xb10 [ 3176.258426] ? ext4_rmdir+0xf70/0xf70 [ 3176.259249] vfs_mkdir+0x493/0x750 [ 3176.260010] do_mkdirat+0x150/0x2b0 [ 3176.260793] ? user_path_create+0xf0/0xf0 [ 3176.261684] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.262794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3176.263900] do_syscall_64+0x33/0x40 [ 3176.264696] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3176.265793] RIP: 0033:0x7f909c7eac27 [ 3176.266586] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3176.270497] RSP: 002b:00007f9099d60fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 3176.270702] 9pnet: Insufficient options for proto=fd [ 3176.272109] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f909c7eac27 [ 3176.272121] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 3176.272133] RBP: 00007f9099d61040 R08: 0000000000000000 R09: 0000000000000000 [ 3176.272145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 3176.272161] R13: 0000000020000080 R14: 00007f9099d61000 R15: 0000000020000440 00:29:42 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x2c, 'sysadm_u'}}]}}) (fail_nth: 28) [ 3176.292140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3176.300910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3176.302825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3176.304805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3176.316745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3176.317609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3176.320778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3176.320979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3176.321716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3176.326128] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:29:42 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:42 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x75, 0x0, 0x7f, 0x0, 0x26638dba, 0x20004, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0x2, 0x1000}, 0x4011, 0x45cc, 0x80000001, 0x6, 0x0, 0x7ff, 0x2, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xd, r0, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@nodevmap}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '@{}/,/)'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_measure}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x210640, 0x0) dup2(r3, r4) 00:29:42 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x74, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 00:29:42 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000d9998f6b0c2b9ce18bc6078df97f49a34874fed09a397c227f2f2a034323165511890cef7753108982c6a8fe0953a15d56060ce5a62b93242f36849315630a510a18d982c077ea998de8ad262aa22d177c93271cf57654f2b015f4bad6a7c219da56", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 3176.392195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3176.402451] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3176.420117] ------------[ cut here ]------------ [ 3176.421018] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 3176.422330] WARNING: CPU: 0 PID: 136909 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x554/0x5f0 [ 3176.423481] Modules linked in: [ 3176.424038] CPU: 0 PID: 136909 Comm: syz-executor.5 Not tainted 5.10.237 #1 [ 3176.424933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3176.425958] RIP: 0010:drv_bss_info_changed+0x554/0x5f0 [ 3176.426649] Code: 49 8b ac 24 a8 03 00 00 48 85 ed 74 3e e8 64 6d 8b fd e8 5f 6d 8b fd 8b 54 24 04 48 89 ee 48 c7 c7 20 e1 95 84 e8 55 0c 25 00 <0f> 0b e9 c7 fd ff ff 4c 89 ff e8 0d 73 b7 fd e9 97 fb ff ff 4c 89 [ 3176.428972] RSP: 0018:ffff8880203ef5d0 EFLAGS: 00010282 [ 3176.429668] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 3176.430555] RDX: 0000000000040000 RSI: ffffffff8129e6f3 RDI: ffffed100407deac [ 3176.431466] RBP: ffff8880453b0000 R08: 0000000000000001 R09: ffff88806ce37b0f [ 3176.433591] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880453b0bc0 [ 3176.435613] R13: 0000000000400000 R14: ffff8880453b1da0 R15: ffff8880453b1d98 [ 3176.438121] FS: 00007f082c58b700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 3176.440903] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3176.441816] CR2: 00007f082c589ff8 CR3: 0000000048ba8000 CR4: 0000000000350ef0 [ 3176.442732] Call Trace: [ 3176.443150] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 3176.443951] ieee80211_ocb_leave+0x1ed/0x340 [ 3176.444500] ? nl80211_parse_mon_options+0x477/0x6d0 [ 3176.445275] __cfg80211_leave_ocb+0x1d6/0x570 [ 3176.445963] cfg80211_leave_ocb+0x4e/0x70 [ 3176.446483] cfg80211_change_iface+0x843/0xf90 [ 3176.447189] nl80211_set_interface+0x67c/0x8f0 [ 3176.447911] ? nl80211_notify_iface+0x180/0x180 [ 3176.449549] ? nl80211_pre_doit+0xa2/0x640 [ 3176.450366] genl_family_rcv_msg_doit+0x22d/0x330 [ 3176.451102] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 3176.451964] ? cap_capable+0x1cd/0x230 [ 3176.452512] ? ns_capable+0xe2/0x110 [ 3176.453137] genl_rcv_msg+0x36a/0x5a0 [ 3176.453770] ? genl_get_cmd+0x480/0x480 [ 3176.454265] ? nl80211_notify_iface+0x180/0x180 [ 3176.454989] ? lock_release+0x680/0x680 [ 3176.455480] ? netlink_deliver_tap+0xf4/0xcc0 [ 3176.456167] netlink_rcv_skb+0x14b/0x430 [ 3176.456848] ? genl_get_cmd+0x480/0x480 [ 3176.457351] ? netlink_ack+0xab0/0xab0 [ 3176.457975] ? netlink_deliver_tap+0x1c4/0xcc0 [ 3176.458544] ? is_vmalloc_addr+0x7b/0xb0 [ 3176.459195] genl_rcv+0x24/0x40 [ 3176.459763] netlink_unicast+0x54e/0x800 [ 3176.460276] ? netlink_attachskb+0x870/0x870 [ 3176.460981] netlink_sendmsg+0x90f/0xe00 [ 3176.461496] ? netlink_unicast+0x800/0x800 [ 3176.462186] ? netlink_unicast+0x800/0x800 [ 3176.462753] __sock_sendmsg+0x154/0x190 [ 3176.463320] __sys_sendto+0x21c/0x320 [ 3176.463938] ? __ia32_sys_getpeername+0xb0/0xb0 [ 3176.464518] ? kmem_cache_free+0xa7/0x2d0 [ 3176.465198] ? _cond_resched+0x10/0x30 [ 3176.465848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3176.466493] ? call_rcu+0x435/0x9c0 [ 3176.466951] ? trace_hardirqs_on+0x5b/0x180 [ 3176.467759] __x64_sys_sendto+0xdd/0x1b0 [ 3176.468267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3176.468947] do_syscall_64+0x33/0x40 [ 3176.469466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3176.470130] RIP: 0033:0x7f082efc88ac [ 3176.470732] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 3176.472980] RSP: 002b:00007f082c589f80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3176.474078] RAX: ffffffffffffffda RBX: 00007f082c58a0f0 RCX: 00007f082efc88ac [ 3176.475088] RDX: 0000000000000024 RSI: 00007f082c58a140 RDI: 0000000000000008 [ 3176.476069] RBP: 0000000000000000 R08: 00007f082c589fd4 R09: 000000000000000c [ 3176.476979] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3176.477887] R13: 00007f082c58a140 R14: 0000000000000008 R15: 0000000000000000 [ 3176.478909] irq event stamp: 5691 [ 3176.479346] hardirqs last enabled at (5705): [] console_unlock+0x92d/0xb40 [ 3176.480435] hardirqs last disabled at (5728): [] sysvec_apic_timer_interrupt+0xb/0xa0 [ 3176.481605] softirqs last enabled at (4568): [] asm_call_irq_on_stack+0x12/0x20 [ 3176.482715] softirqs last disabled at (4441): [] asm_call_irq_on_stack+0x12/0x20 [ 3176.483847] ---[ end trace 2b542b6119b7209d ]--- [ 3176.493120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3176.493944] nfs: Bad value for 'rootcontext' [ 3176.501177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3176.502713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3176.504308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3176.519089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3176.520642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3176.522295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready VM DIAGNOSIS: 00:29:42 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822dffac RDI=ffffffff879f3140 RBP=ffffffff879f3100 RSP=ffff8880203eef90 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3e675 R14=fffffbfff0f3e62a R15=dffffc0000000000 RIP=ffffffff822e0000 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f082c58b700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f082c589ff8 CR3=0000000048ba8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=ffffffffffffffffffffff0000000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000000c RBX=ffff8880496b75b0 RCX=0000000000000012 RDX=ffffffff815fb06c RSI=000000000000000b RDI=ffff88800fddf6b0 RBP=0000000000092c40 RSP=ffff88800fddf6a8 R8 =0000000000000012 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000092c40 R13=0000000000000000 R14=ffff88800804d640 R15=0000000000000170 RIP=ffffffff81fde15f RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7d8fa90900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7d8ee7ab60 CR3=000000000e0ae000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=494e4f544f4e4f4d5f454352554f535f XMM01=454d49545f43494e4f544f4e4f4d5f45 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=89e0e6d072a4bda10000000000140770 XMM05=d3fdd5f48436fbd700000000000aeab0 XMM06=aa8106dcfdf6855b00000000000ae968 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=20000000000000000000000000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000