c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(0x0, &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:56:54 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x17, 0x0, [@broadcast, @empty, @local, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:56:55 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:56:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/57, 0x39}], 0x1, 0x1, 0x2) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 17:56:55 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) [ 1370.946508] 9pnet: p9_fd_create_unix (10613): problem connecting socket: ./file0: -111 17:56:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:56:55 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:57:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:57:10 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) syz_io_uring_setup(0x4a90, &(0x7f00000002c0)={0x0, 0xfffffffd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x100, 0xd, 0x0, {0x0, r3}}, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/124, 0x7c, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x800, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10062, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) 17:57:10 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:57:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:57:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r3, 0x406, r4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 17:57:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = accept(r0, &(0x7f0000000180)=@caif=@dgm, &(0x7f0000000100)=0x80) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000200)=0xffffffff, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000022) pread64(r2, &(0x7f0000000300)=""/247, 0xf7, 0x10001) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x8, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffffffc1}, @ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20000044) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl0\x00', r4, 0x29, 0x1f, 0x5, 0x8001, 0x42, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7800, 0xe45, 0xffffffff}}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000140)=0x30) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="630020007d0200000000e1cf552f0000a652bb755ed7cdce4dbbfb1fc2e63ab864ebcfcb6b5fd3aa2971b725a06ea8efc8eac60c6600eeb90fddf86261deda3e40dc41ab217fe0d0ad8a1541d698bf77a8420b31f797b2d46a48002e93e3f8fdab301e05c22623dcf2d416"], 0x10) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x7fff, @mcast1, 0xa8}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0xa2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) 17:57:10 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:57:10 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x17, 0x0, [@broadcast, @empty, @local, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1386.591189] 9pnet: p9_fd_create_unix (10653): problem connecting socket: ./file0: -111 17:57:10 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x17, 0x0, [@broadcast, @empty, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:57:10 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:57:10 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:57:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:57:25 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:57:25 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x1, 0x5, 0x20, 0x0, 0x5576, 0x2, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x1, 0x1}, 0x4, 0x80000001, 0x1, 0x6, 0x8001, 0xbc9a, 0x57d8, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x430100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r4, 0x0, 0x4) sendfile(r4, r0, &(0x7f00000000c0)=0x81, 0xf7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r5, 0x0, 0x0, 0x1000002) pread64(r5, &(0x7f0000000300)=""/247, 0xf7, 0x10001) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="e1ff0000000000002e2f5a532022093000"]) lseek(r3, 0x0, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r2, 0x2, 0x170}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 17:57:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x40000, 0x41) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001200)=""/4081, 0x742) getdents64(r0, &(0x7f0000000140)=""/49, 0x31) statfs(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000001c0)=""/229) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x80100, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) getdents(r1, &(0x7f0000000340)=""/111, 0x6f) 17:57:25 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x17, 0x0, [@broadcast, @empty, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:57:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:57:25 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x400000) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x29) r5 = signalfd(r4, &(0x7f0000000140)={[0x401]}, 0x8) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000300)) r6 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40242, 0x30) readahead(r6, 0xffffffff80000001, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 17:57:25 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) [ 1401.162929] 9pnet: p9_fd_create_unix (10669): problem connecting socket: ./file0: -111 17:57:25 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x17, 0x0, [@broadcast, @empty, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:57:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) pread64(r2, &(0x7f0000000300)=""/247, 0xf7, 0x10001) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f00000016c0)={@desc={0x1, 0x0, @desc2}}) sendfile(r0, r1, 0x0, 0x100000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) poll(&(0x7f0000001700)=[{0xffffffffffffffff, 0x2020}], 0x1, 0xff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="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"]) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/252, 0xfc}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, 0x1, 0x200) r5 = openat2(r3, &(0x7f00000015c0)='./file1\x00', &(0x7f0000001600)={0x20100, 0x1aa, 0x10}, 0x18) clone3(&(0x7f0000001640)={0x48000, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000280), {0x9}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/31, &(0x7f0000001580)=[0xffffffffffffffff], 0x1, {r5}}, 0x58) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 17:57:25 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:57:25 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x17, 0x0, [@broadcast, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:57:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:57:25 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1401.409422] 9pnet: p9_fd_create_unix (10702): problem connecting socket: ./file0: -111 17:57:40 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='.}\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) pread64(r1, &(0x7f0000000300)=""/247, 0xf7, 0x10001) sendfile(r1, r0, 0x0, 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) pread64(r3, &(0x7f0000000300)=""/247, 0xf7, 0x10001) fstat(r3, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)=ANY=[@ANYBLOB="015d9a65b2d8bf5f05000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000000000000002e2f66696c653100"]) renameat2(r2, &(0x7f0000000080)='./file1\x00', r4, &(0x7f0000000140)='./file1\x00', 0x6) 17:57:40 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:57:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) [ 1416.866428] 9pnet: p9_fd_create_unix (10724): problem connecting socket: ./file0: -111 17:57:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x7fffffff, 0x5, 0x2}) lseek(r2, 0x0, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000014c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "d329f0b62267b6"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000004c0)={r4, 0x0, "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", "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"}) 17:57:40 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x17, 0x0, [@broadcast, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:57:40 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:57:40 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x17, 0x0, [@broadcast, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:57:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:57:40 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x17, 0x0, [@broadcast, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:57:40 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:57:40 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1, 0x7f, 0x8, 0x67, 0x0, 0x90, 0x40, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x100000001, 0x200}, 0x418, 0x8, 0x70, 0x5, 0x1ef2, 0x0, 0x69, 0x0, 0x7, 0x0, 0x100000001}, 0x0, 0x7, r0, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x408300, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x170, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x39}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}, @crypto_settings=[@NL80211_ATTR_PMK={0x102, 0xfe, "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"}], @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="c2bbfd9c916d"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe3d6}]]}, 0x170}, 0x1, 0x0, 0x0, 0x24000084}, 0x24000815) 17:57:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x26}}}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x80000) 17:57:55 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:57:55 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:57:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 17:57:55 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x17, 0x0, [@empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:57:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x4, @empty, 0x2}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x33, 0x0, "4fb2386f65a856b6930930052d7d4e52fc4032fe98f268baabdf34269819ec36e44c87f906b59567acb1dd5aa5ba7be8ecc7069f172fddc076e97b1bb7ad34493270d4dbba4a2ca52cc13ca18e08c805"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 17:57:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:57:55 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000340)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r3}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r1, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1431.424221] 9pnet: p9_fd_create_unix (10750): problem connecting socket: ./file0: -111 17:57:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:57:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x26}}}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x80000) 17:57:55 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000340)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r3}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r1, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:57:55 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x17, 0x0, [@empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:57:55 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:57:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:57:55 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:57:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x26}}}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x80000) [ 1431.612144] 9pnet: p9_fd_create_unix (10775): problem connecting socket: ./file0: -111 17:57:55 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000340)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r3}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r1, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1431.658944] 9pnet: p9_fd_create_unix (10776): problem connecting socket: ./file0: -111 17:57:55 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x17, 0x0, [@empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:57:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:57:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x200001, 0x94) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 17:57:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x26}}}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x80000) 17:57:55 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:57:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a40000002600010100000000000000000100000090006300a0eab51f24f4074cfb16bc07324cc62f701d9f2905855dd18b1f0d5ce7f3493090af5beef11c281fbcc10f4675223ffc29811a6d82c0c17acd7a40480a51d57b2b3cc217bf3558b4d61924aa0922349a895d495ac12b16cb2b0cb00a0c3d1fb5b695cfebd4ad94d1a5642d3ec010c0792e9f8a9bff9bc38d6a5f4c42eb9238b7bc3a2be2cefbfd2d17065093"], 0xa4}, 0x1, 0x0, 0x0, 0xb0}, 0x8044) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="041a3a4985d424bdce9675f286982a09f7fe7569cb2c6e71f89e8019678c585aa70cc9e2435235dcb0b3434020d0f4d5613bb8bde96608eaf4af1834720900b040007af6d3edc14cd7ab81c733b614b0835ac6af8173be3b00015a826f2562ae98feb0d40000f80000", 0xff69, 0x3ff03) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000340)=0x1ff, 0x4) r3 = syz_io_uring_setup(0x22, &(0x7f0000000240)={0x0, 0x813d, 0x0, 0x0, 0x12d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000002a40)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x802073, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRESDEC]) copy_file_range(0xffffffffffffffff, 0x0, r5, &(0x7f0000000180)=0x3, 0x9, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f0000000140)) r7 = gettid() fallocate(0xffffffffffffffff, 0x3, 0x52, 0x6) dup2(0xffffffffffffffff, r3) syz_io_uring_submit(r4, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r1, &(0x7f0000000200), 0x0, 0x0, 0x1000}, 0x9) ptrace$peek(0x2, r7, &(0x7f0000000280)) timer_create(0x7, 0x0, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) getpriority(0x2, r7) 17:57:55 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r3}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1431.785218] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1431.821473] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. 17:58:09 executing program 5: syz_emit_ethernet(0x5a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:58:09 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:58:09 executing program 2: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x4400, 0x18) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 17:58:09 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:58:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:58:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 17:58:09 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x80000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x5453, 0x0) 17:58:09 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r3}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:58:09 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001e0001000000000000000000fe8800000000000000000000000000010000000000000000ac1414bb000000000000000008000c0000000000"], 0x48}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, &(0x7f0000000080)=0x80, &(0x7f00000000c0)=@sco={0x1f, @fixed}}, 0x8) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x101000, 0x0) memfd_create(&(0x7f0000000280)='\x00', 0x3) r2 = epoll_create1(0x0) r3 = epoll_create(0x3ff) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300), 0x8}, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0x20000001}) dup2(r4, r2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r5, &(0x7f0000000040), 0x12) [ 1445.101143] 9pnet: p9_fd_create_unix (10820): problem connecting socket: ./file0: -111 [ 1445.129117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 17:58:09 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x161000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @rand_addr=0x64010100}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001480)={@broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @empty}, 0xc) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, 0x0, 0x0) close(r2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000140)={'nat\x00', 0x0, [0x5, 0x0, 0x0, 0x5, 0x94]}, 0x0) syncfs(r2) openat(0xffffffffffffff9c, 0x0, 0x22b80, 0x1b7) pipe(&(0x7f0000000040)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x2, 0x9, 0x2, 0x8, 0xfffffffa]}, &(0x7f00000001c0)=0x54) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x24000000000000, 0xfff, 0x200, 0x4, 0x0, 0x3a0000000]}, &(0x7f00000002c0)=0x78) ioprio_get$pid(0x3, 0x0) 17:58:09 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r3}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:58:09 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:58:09 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:58:09 executing program 5: syz_emit_ethernet(0x5a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1445.204307] 9pnet: p9_fd_create_unix (10831): problem connecting socket: ./file0: -111 17:58:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 17:58:24 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:58:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x0, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:58:24 executing program 5: syz_emit_ethernet(0x5a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:58:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:58:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 17:58:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) splice(r0, &(0x7f0000000040)=0x40, r3, &(0x7f00000003c0)=0x101, 0x2, 0x2) r4 = syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x3, 0x5, &(0x7f0000000200)=[{&(0x7f0000000400)="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", 0x1000, 0x5}, {&(0x7f0000001400)="4f81b2c2bfd7416412f68a475a32d339f6f218e55e52794bd6da5562515aa70851fb43b8e2f45a19d44ccba5c0a38c386a36468c52f28f694c2a1c3136033410c4fbc0c16e6de83bf6e37efaff89f8c21cd678d14ee1f7efa8263d6ee59fa9dc51ed3d4fa66d7f87b7baa2c4a5cc2a4d0cb92a45b6585c5503704ed862f6c898a4343b03744f6bd7d58a46ebf58267a1e35cc188dffe71ef00220821224580847ca9486830acd17aaa7842de9b6cbb11b7715ec80fb21141585d1cddbf54610edef8926d9c30712b28127f68fe402c873babeea36fe5e674f21a0f847425027795b418a66cb0218f935b855a971c420ac85d9f48d8b3205ab2deadc668f32251c355c0f78a908031bb2dcde4037d3b93fc90877719ff78f2671a56576b49f0b34372dad2eecd8336b6d0f7bcf958714ed827b7fef5512a193e137214b77dc85a77a6506f79209bd299b05821904e606f0ed16e23549f5a53e3977b21fb85a636fa005919376e60241d6a022dead2ba4eeb367ef2992a311a7d02673156192b4079689a624debf70f18849fa4a6432e189ff9a241956408292ff6a50b494803458cca9453a562095f3d6382f038f9f244534ea5d3455de70ab6990e7f8d3496381fd9e80ccba922b9ed4213036155501676c491a25a84d24dda81405dc9d64844f7ecbaee1005b9ea3dab71c6452c9a9dfd1852587fc1821e36259cd8f2608dec5d643ecf5a6efe709c35427346800155c1bbd13543fd72aa37dc41a7dc3049fdae0c642a8373ff47d3618d41c6a454aa918e1542d5a52c19ea98cdd94b5579dc1ce13c6fa9617adff82e5b0fb6491e34e2b08a6f7d3a4d80dd438e0b9c2565b0f0c0932dfa95046c496ddfd553cebf9c2813e5b86cb0ba37ff72cc538891db0b4a2eee60e7f443066649a727d5e3529677bff5ed54dd54443935b5d6a7db54f2145fba10ae7ea0ff0caef0a594410b1f1b049be2349d52b2857ad26890e2d54432909d4b40c4e49fc5595db34bb781a2f14a1f9e6527fe262a3c1a75f92aedf44ab2c805f1c65ba8d7206d35e031772ca1b8749aed81f4ba0c45cd940cc6b0164745808305513c2c9678043845ad71455ebb2c4e816cb056ceb91302c7a78edf4d53286d65b4289abcb74440e709b884a99cafd41069e7f262e2e60267c91ce95ea93482f3f734bf7570f364f68d5f413abc2a1522cabc2dbda5f5c403d89be28aa2a814fffd6c08aeab289288d8b862407738ac2d72886c86a0c54a1e4481030e03e6d485f0e77007f72fc6acfadfb333012de3b2110e8219d85d5fa59e3dca3cc72f6f0ef0afedf492564624084a62c482820fb009d1839787cfec2b3a770520751ed35094c2701c88a8bc3a4a30c07ab083377571de62a12c8bb4cd77f8fa0b8cac6c8a5c3717aacae0c1b928428cedecf35d6afaef8b9e7d2bb67ee37603f6350c1afcf6e0311d8e35058dfe0b0464ec18c6e0ed5bf3c6a4f7916cdbe6911e46c8f7f7a4269d98e1bc745717bd05a4dff682f23802021cfc150e16304eaf71648bbfd9ca54259ed3a92c2f01661902b002b44475156be51248e5c4837abca5788b8484203b586300183c45042d5c9d5bd8eb1172a7a3e4ef5204c3d2d5666ea5a2bc202cb95bce14e28bef72ee13912346bb7ab109d209d5d07a1b25d6fc956f71d6452cf107b075e813a9c4d31f7bc637adaa5b718d31839df36c8ab83b2357af7da5b4751bf0765d23bbead7a019052d8b840bccc1e3e9dc304e15567aef69116a2cb97745ab49546097200d6fba0179014adfa0714c60a0889c0d1a57eca8fca2db0bfafc398f22c0f88a039208921740b84fa865acf0f6c6e863433d950137598ac48c214c23584348ee7ed8dc3de52d1ff6ca50dab257b69e440c08b76ce5e8494ee0da238a32f63f8d5cef68e6fe7841ce85606a6b68b5f3e018ae5f8233070680a2ace4e94b8e9236c8d978d2c70df0347709127602e0e3d3e47bb0c5c93da03a0d645b29303a0e7b577f031e79b326081e1c3eb41749540b5c4cbdc5a639b2af707f42fd3ac7077b6711b8bf8594a1025aaeaca639ecec44a65dc223db37aa16641f38591526cc24ecf9b35b04ddf02e20fcbbb5c07b673dede5a3ffdab27b6c7cd4b912af882b2dc9897c1c4dc37c3a3b911e09a9f9ffd4eb4a37ea7187f1f9cd9504a3a6c590e770ded96fb8adabad8e9184087b4efb6f8f2307276568d57abfc5ed54ac31101924beed1839adcb69262e4dd7d726bb41e88a6488aa708a570e751abb7310dee1d1faf4aaca50e238d97e574f41b1d9b59153247401fb6f2100a2efa070f6b4fee47c9a784814f562746850dc7bb86979c8e71f40cabfb117d20febceeb59f7a1d8885aa648bb75a23d29617037466a5c2ac8e38edd527e7a2dbcf0e8e1464bbb255efdbf7aeaaec81a56928be2fe4a82370d8a434309b5dc5bbdaec5e27ef11aa143b99a0eeca952ba480f8a5ed8f9a28b5b9e55172409a98aee109e41afee55507e09e9ba5464853e85a98a8ccbae02295ef9eef393f06d41eb07071d52bed2f466106f971be36287fe18a297134f4922933689ec5e6121c87f07e12c3738d210a82934b2ea74a13ca2afca85fa4666941327ff82656643aed278a1386f47c9b0a38bde8af54f2bc85ad5bb43101ef839bda3f14ca55bdd34130e7a0f393bdd4899e53cb5b94a1887ac93e6665959f73b797ed2d1d3d88183c08ca91fc4a6e751a424056eeab57b67acc142848a9e03a98ff5408f910a567d61b4946676d4c74b93aee2071e2103da9727589ed426636984e131c7806b5174fe3fdd197535125bb0df5150343e2ce66d33b1a6c552d596510982d8ae27b6b715713fc56c5350218f7a17093e2c28c6c8a327e796bb4aa20d44af236d03d5058182e35194461513e21d7e8294954a1cee9141f309976430b689eba641314782bf572ec863383c42d6ef3a66dc8d821d8435c85c937426b7b4a803e72e56f075f5b55f52b0280ff0103075c2fe9fa1d4ccdb219b37433213e88dfc667cef1dc0cdfe7c80d4f78ed7122d5b9ef853ea6eb91c8ac80ba9ca014fc14ba58a340add7501401776727db52991b77f9c3cffb0d09864d0db058e71b62dcf76f841c3f182683553626b6ffd9e3abf9072cae3d5d5b0f645402c651a7007afdd764021a6ca37984e52d30ae004fc2a45bce2dfbac5dabb9583eefef97bf1aa10024b103bd13b1f0a9d672b5ef1f8523e4e5164e01886a9852fc87e18051d576a87b859e5b6b0856d3352e0a99fcdbf9ad2351e2b970d65e29b167e239d2561883771f108cbb474c0e42438a8e95198d84f94ec90914ab507c105c398e02c075e708617712d2277774be8c5a4c19e62584cb495761f80412a01b2526de9fe2308b36be18cdcd3f873590937992457241849df761bd96f958fd01e1a220d9c19ba00191c69759a48c101ddb9732a847336192c70ad8d3f873b5edd0691dd28141de5dfebd12872d0d317a4b631fd94b7c5c5230a1ec63dac45715ba42da08f8765eb4ffff6e34fc02f801e74ff00adbd69288ec8ce39b09df1a74a0e845ed7cefd1e3e66a0476efa7f3b6a40a31e815f94c67db3bdfd14c0a9a8a110bb533187e448a4cfc595aded1f5af61411c7e724768b8a93f10d0e4e599396bc658ad1953f0623a91d6b7527da18ae722f02ef7696c664575e3c7c5a3912baba8ab26c2947ff064b0202d110215b12275312f835458b994cdf15540a0e33968bd3e971c1d05b21b917f802d1d57116c6348b6881b89efe88cf1e1dc7020bbe3aee220ffe664a916136720737f9c70c60f0124802f6478236a09f3df7db3527956d1b2e6ca28c09a26662ec9238636ece17c152eb12bc86b4b8ad490d081749b89fbffafa34b4e2e3d71c43be813d0033b75afc2e7fb8d5bdb8126d18cbd94b1fc4c04b52479d326c3dd079c8146325ff381616566b3a1eee3639ab3ed584cadbf6d0eef757d58a6f362532672215189faff512c1f9ae2c7aa4768bf22e4cc011851977c49bb7ad305d28a65da12c9e77c162b4165222e6de6ef7260baac916a8ed20ac0078e2d79f299a5b87f8a13e18ab8304ab789964e66489ab563fead92b2c706a63bdfde57e03909ac23d60143f2aa0a80b93057a4d51245ee56cecf03a6359ecf1b9298f06538393ddab2643662440bbe74dfa3621f381280ef9ff8ba5411c19a7737d5ef464c316b542c4fbcc560b7e86b856227fc1e6a31693ebb5dcb815e55b9e7e9d13908ca5bd67124fe3dcf6e31244132afebd46b2d38e9f5723405374b72e99d43f33525a2f1aa992bf4a4834826c740ee0f97d57b427f26ab7dd602a333c4a26f016a90a7f567a3bfcd98a88b3bd7adfa93674d278d97eb945403e7d78ad48ae235df436ba724cc1bf1132d6e1ec297f7b6a0ec69705eb3b22d59831b23590888625ddf2a5461409bac66f7f40c6f695949d3d5a042f9ab2f96bdd0ae9f31d682a7b1176cbb136ffebf21395e1ee4790d68c12dff356d41d79c9fb36e812b6af97b9c74c39fd1b5e1f3c52d082b71d81ed42cfddccf065e1ce19906a02e754463824c49149690b26deb73a515f320cca3e09b8cd25e8d84fceb6c8cc4ee2da103978c4b77988aab1e96720979dfa9c066d32ad53a7c8254c3e05ecf54a5cd6756170c47eac9b9b00473689566affb1cf75de71493665423e00da78b4d70e75167542e50f901895c08179304b3df0c3ffde9d60b71297a033dabbd385bd679f5eb6c6793253b5dab1719f3d6cfd3082066635cb0d0293be6c85805d851e7e1f95bd4ce4d6dbfb2aeb7338ecef9ced537fbfc0d01cc82a11f0ff8bb566d7165165ccbad0a57d19483961ef7e9e049720970ca00704a418714784056ad830999c78eeff326f8020f44bdedc7e12880af8941e8fdfd2f60213c34c40e95248648fbdab889e56d56e2e7e8c521d3ce29b4c3babc1cf1bd1344336534f229d0e5d178bcdcea37b0b85fc177a6f5ed460545c28625dd6a9246578e41543531150c789a359f1c58bffce0c8b707ec1d4424492f868e299d377ab264041635030cae85da53438f5268cfa600e950c59ff6d2e30f5d85be6fca37ccd7178975e8beabc8ed7906a421d1e24e7830fd09fe5cad0929e1bfd784dc1f20cfdf2c513f59b9605c139b990fa27ab267db6ceb5dff1928dff8f3ba498fdcd65e2c9d463202be613439669ca507243650dca8a13692352f6fa9b408c487ffbd38d7a9f6cf64b4d4543f500d7c177f0d93159b7dc4bc55a1918e3fcc5c9746c5c1721760d314719937fbafb8185180b0cce8abbc02a193ffa245ae9e2a2866f2027e9695d0630ff0477b7bd389bcc07332f2967e4038c56eeee17dfad97d1e0a376e176a546e61603f4e129a910a63fc498216813d6c96d4877e629ce927b65afdaa401e9c3bc978bcb1c2c74e23d83d205f87cb5af62d6b29cafec061a0f644a2ec45dd8a8e1473e6a6e9c1360844d2eb7d9992efc8587c3fb093ebeeae543702589fcc5e942a045f40fe07b25e85cf254337b1b7ef44d667ba0ab03c76069e926582f828cee67a90242744b34b0938ee65bf91fa011efe6f2e1f620dce812763fc99d10d1d1c3b0acc11573dffd59ad452cb80c6a27ce53ac79c00dd955355c5eb1b63cfacae4f0d764c7d3a1c59f58d0500e66a91e9b98533f8b184aaf2afc0c593f2197416ba5c6de2a8e5fbccea981166708619e50971018bec1dcb33d4fb834943f159d28cfdced4a4f2eb8c62c815260882e51deab2283c1fba012ba0210d80bba", 0x1000, 0x1ff}, {&(0x7f0000000140)="00a9e33b2dc23dcb5f08d2368dec47451781ba26551a19c40c7a62806a536712a00c7cc49d233138fc3e6fa1c7454538c6fd3243fb2dab7ec30f2a1dedcfc9beb8f1cfe1a44ad0082ed498aed7a8b4f2d10f9d34b883abe66652f29ab495d18fc1c0787f32b12ff0ba1e5d815e2971eeb07e04077db985095c9fc6765d24133e01cf9686106883dba16461ccaa396235d20a579f0a40ada8002d908d6509bb35857cb213", 0xa4, 0x7}, {&(0x7f0000002400)="7f12085fd16e2b8121a4b42f929031df2ebc0adb8a8d1538c6976da945e9376540076b720d5b8f5b2421835d54afe4938c11ef8038cd8c6ea86f10e0056fb640b2d8b313c39a14dd4ef86091d047e55e651d054614ac1f888dcc9835d49c357c85dde227061421d1cda58ac96dcb647f89f3c587144d4bb0e48d3a1ea61bfa697a6018ea39f243825e3a436a184f003251ca7155ec778a9653ab0f0375ec0c871146bb62442367cc74e28d0e8ca0b9a0b5da4b8bf176a31495b06e330ebd19eea287baafe1f40bef3ddd0b591037f989cb1e7289f63bdf36dea0acb60b91209bd0b41b0e", 0xe4, 0x24}, {&(0x7f0000002500)="7be75870ac255f4a91c45e8b1a26bfa2f567a8303868d01b9f6fa30a43aff38495375a27f45d3d1064fc11dc1ac35440817723c025dce6c39d03540164a73e7a0999e426567b4b706608d488dd2eed852202900c4d1ec9d66e2aeb205fac0baae95f8da579ac55d963f2e42e5c5e0ab06cdf389ef0364ff63fa82be1ccee30763f41fc5baf6b42e3d4bda2e734aeec68bd62749747b5a23b529c03e578cd4fbbceead757c4af46a3ff1ec5d5bfc371bcf7fb22b612c61268a67a9b6f5e666b3ece17008695", 0xc5, 0x8}], 0x2080, &(0x7f0000000280)={[{'*+/!&-#!/(}'}, {'{+*\'-\\.$'}], [{@subj_user={'subj_user', 0x3d, '!\\\x0f[)\\@'}}]}) openat(r4, &(0x7f0000000300)='./file1\x00', 0x184, 0x80) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 17:58:24 executing program 0: r0 = syz_open_dev$vcsa(0x0, 0x7, 0xa2c2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200000, 0xc6) fallocate(r1, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0xa3) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') syz_genetlink_get_family_id$ethtool(0x0, r0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r3, 0x800, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) dup2(r2, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x102) execveat(r5, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f00000003c0)='wlan0\x00', &(0x7f0000000440)='\xd7,+[-&@\x00'], &(0x7f0000000440), 0x1000) ftruncate(r5, 0x1000003) preadv(r5, 0x0, 0x0, 0x1, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="0110000001000000", @ANYRES32, @ANYBLOB="0000000000000400000066696c6a3100"]) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 17:58:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) [ 1460.261004] 9pnet: p9_fd_create_unix (10855): problem connecting socket: ./file0: -111 17:58:24 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 17:58:24 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1460.321215] loop2: detected capacity change from 0 to 4096 17:58:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x0, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:58:24 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:58:24 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:58:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:58:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:58:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='#!\t'], 0xb8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 17:58:24 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 17:58:24 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1460.647098] 9pnet: p9_fd_create_unix (10887): problem connecting socket: ./file0: -111 17:58:40 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:58:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/e1000e', 0x40, 0x10) r2 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x100000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) pread64(r4, &(0x7f0000000300)=""/247, 0xf7, 0x10001) ioctl$FITHAW(r4, 0xc0045878) 17:58:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:58:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020060000000000d1f4655fd1f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="e94460a9164db9901fa29b535895b06b3db82a16cb259da2d061555c67"]) mount$9p_unix(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x440, &(0x7f0000000140)={'trans=unix,', {[{@afid}, {@nodevmap}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '\'%)])!}'}}]}}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4141, 0x2) 17:58:40 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x0, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:58:40 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 17:58:40 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:58:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) [ 1476.833063] 9pnet: p9_fd_create_unix (10911): problem connecting socket: ./file0: -111 17:58:40 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 17:58:40 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:58:58 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:58:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0xa0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 17:58:58 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:58:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x0, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:58:58 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r3}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r1, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:58:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:58:58 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) [ 1494.707386] 9pnet: p9_fd_create_unix (10927): problem connecting socket: ./file0: -111 17:58:58 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast1}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:58:58 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r3}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r1, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:58:58 executing program 0: fallocate(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x4, 0xc1, 0xb4700000, 0x3ff, 0x73cf}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x3a74, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000, 0x284}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "7374bf600a2dbb0a10a4446998c60bc654676f080ecee8672b9b990319e9f34b4c45be9b1cbb8fbe1f4541599e2a8deeedad6067575d671432b4ba4028542704ab850b2cd326bd5a16431e3e06cbefba068d34f999e863befaed31fe2f898bdfe4043148f4d1cc27af274cc202dd9cd92b1891ba85c4048baa5cf0aa7a3d5dbef19adb89a7123a5c5cf1f42650df4c63aa25c0c5f606a072b8c1910206999409a39439cacd824f129adb4177e14f533050e77cfd6b9e760c12899b047feb4c8e5b746e5570db48fc8fafeccf98bad6d99a585091b403666ded97ce43cdf6dd1791052bc149861ea2585dfb28b538cc9fe6ffc5e07182615951fd668085ed124af574a07e3495491f19b1aa2a3b69028ccacd78524d988b224ab17ed905da0b840b4a9939e2af6efdf4221126075a8964d904883db014031e0924681a4ef3795071b256b75002a7df298c87c565b1d8a331e7d0c1000e1d707100917dfe107f87ebea9dca1b708b01cacf1c9f348c0d0fd64aa64193637c7169264d06f613c41be60f39b0cc9d813ae5fca2222832f86f2ae87e883efd48df36d16e6c1ca5c378f6ff0fbace91eb3099d744b16171fcc1ab7d5456392f0878ecf27e8caad7386663de490c3044eed7e7cb83e675716eda0cc09f219aadddd814c88048a7c6cefe69a79f2f7a234cfffbf19ac7a9f6ef59faf2776ac3d636904ec1bda09b1c9d8caeafa918983215d866f5cb6f1088e7e99a43425913d258a3dc8550fcbca3e0bec47503e24d709dd1fd1bb3cd92837d10387a0eebb98aab27950a2a66dc0b9bad3e4ef6393036d64949931ffe6479073790b3b885ac8563d4018e9227d644864c17f048daefbb192d15b56a2a440ad6d4ef5af2ac9904d8b69c64d2368928d7595594e6c3fd23229cb6aa80ec308301b1c94777900d34b1b3eea03dca765036a3f5351551affb585f22541074380b60ca062bf8a8a2324fe61ecad5733aec51e0c5ddc648280556b8a038b5816947b1637ef598cfd134cf9833d875fd23d22f5f74e74a4634d50a3ac908eed128f4297924296d95361b9504c08df4a0603eff93ee34bd45ed12e8d06b8f399fefef4ced732aad15b70f3e276101fa4b5a5c17435d0999b3345ccfe853c955e8b7927c7a171506b8e5b4de8a68cb5e80c3709a0e15643b5772d82d04859133e09fa8ab81ac042e67bc918f2847af14a4eb77c3fcac3132ec1af5a57d85acb9ce91d9d15019904396737ade63df938e6f054f8ee21e8994d45b0801ccd8ae8bda90128cb05eddd297d800412bc01fc5cfdfa9d473641fffc793b513da3f7565a27c4ff3678ac6f71560cc6cc95fb4d20f85b7934cb4a4f614182d331ab53b6a09ff47fc272b6c1f5aaca477bfdfed3fac942d639773b7a5656c526eb595d6fa9d301c425947f37088447cb4400c37750b76eb6c1f7933e43b27224c2fdc053e55125d00ab11428af674f58bd5c3ea1ce4762856afccbd37dd59a5e726f2e5e770bcc8372304fc2a33611234e3b0d411fcae8691e621b64581dc32b3d97c02920877b2c995018dcfff2da8687bc64332cffc3d355931561dc799d169f61d121f242dd3605e3fef8a46bf73998202d6a87671719896c61d729006104bdb7e926020f28260c75c2c754e5f073097d7031567e62cbfcbff541702cdaf498bbfe01e2948e6e164271ca4ab4df68a1569d29d3ce7029c0b58d2a1e6d179fa817ec9df17195c8b83a7a7508f18f0e3d07e8871f331d7a151bc11301c7dce402e6a5fda6f3096df2ddfeb48b3991e055c55d2a071ed66bf378e5c451f849cdbd7951cacad16d6b5734b71db866e77086bfab1797942633ec688d78bb2fccaae2b0e796b852b278bd4a4648d0811293e1bfe68e30b42eb27ac0a4e435e086b4cfeeb9fa539f0d800b6108e4c7b9d7237746770a3f3477646b7c9bfd2bc111679d40bffe221be492ba984df6cd4d7d8f9cbf7185e79804416be68d8a2bfa28e5bec4b57bf5f08eeecafabccd55744e49bb4a7dd1324908d91762b9884e7268d0bb6290be3b51091ae6ccf2ebbd4945dd7913bd38509a00ce38d955909bfa1f3740fc123a12e15b853b59b9b691460afdcda150d39e566a83eaa0c3b7bac9819bdbc7e0a620206be87ff2f8ea8091dbffa014d2f2eb919040a434cdeb3db68adf845d2ba751dc0e1ce4afd8672a5ecf0653b8c672c3265aa236a174185f4b4a291bda664bb79c13f8b6932a831385773898d194d2500b38fbfff8c4acafa5a80dfd3f1f906132885446f9f7ad787dbbdab593661ab1c255df879eaf4ca739deaa11379a5c6b650472257fa54b646b29ceb3dbe27e3584914f9f766bbbcc67abeffebb0df881a42b8671bba930b04d1d7710cc15d546ee69ad40e66f04eb28af8bd17b739e68ad75a239303fb97b18f8f08d2f95bdae0f245ebdfc3ecf555a6fd53f5a35af8b2dd016b227d209fc8323a7576e66a9913a0ad4f19d30d2b6f25ac8b5b6c762e2c68c76f9bd7818adbb3c9b194c09471482ec6898754469076b8674ab9e26b5977a0fa693160f18a01d2f2c362186ff75c205cec261d9e6c431ee672e4056b7e458ef02dca1167d09de5977210461758ed506290477a63c5af0698a1f4edf3bc569692bc9febd5fd641860dd34a6926af47ae7bdd3cce59a5b24b6944075e30ec2f2dbd043ebc57a39eaa5559bc4f21f08198e0daa2e8506b21160c8f9b629ad0e80d5e99e5cf4c4ceefb8d9fe5493ebcb066a647269fef2146f1ed55dac66974446e650e49db26ceb24c16c24885a2d2d011d11ec52d5b7a9c8096314d1dc7c992a1dee70be2fc0cc2d9fc94b0d02d479f6f4bfd3fa20df42568e27c0cea6caa1028d5dfbe6a9657053c06132387f9abfbaf93d9b335b69b168bf7fdaa0a44981dadc3358b50f1b24d390f8858d6775fa838388ff8a69b02bf446028485ba9e0c15731288c186b3cdf2fbc088f13f50e5eecc9b3a058d1369b7a254f11aa81a5fabd862bfd5226ce26e0199ef241badd55ba0d6087e9eb1661111a6afef1caf2bd54832bb5a3e8b864c8af220a8a115746c1646e78471ba2edb7c63fcff7f6be047a5f740525fbe5e259beee146dc2a609d3fd576e826ee1e4fce8ccbf75aa713514bda04ed4086cdd11a770cbe5782bca23f5f3ad8682609d5c5d4e5ca4e117d7423740b41081c6945b446223bb435c6ae2314552b7bf53a8b2c8a7a2a961d17315e0f7a660624b119c89ae81d2214b03cd79bc3eb355bf06811d7186b1f0a7219dd8d4096cb0df940719279357b853bc7c5bcf645aa65c12227859ce0851953fcefa6051f2a31e3666abde9ef1ece3eba658de696edf5d87a7d562dfe1f6bb9ac5e6773bc9069c732683715868cf14825345fb60665982549b9bb7c5b7d934ed0c4d136fa089f8459d473bf1ee678cf88c26f4f5ac681aa6dbe6ef78c26e7a3649ae0574f550f9fc64e8caa14586cbc43d8ec72a3170fc4f6c78fdbd40332c1f35adfc04be68a067f2c03325d624e21fa0e1fa6ea879caa84665bedefcd19759872824a0053a110af2b6099d8ea572b0c81cea39147bb2dca0eaefd4be8c3b59b98c27049f04ae5f3652ade0e1561238296d17979581b93d0ee26464fb5675b968cbc397558207fb1d5365f73994c0c8f2bcae0164e74d602a4856355b214af58b6357b2505779260ec73929eb4fe1047bbc2a125ff6c88718d2b8b8fb9c0d1cb1760748ffc5e4998dbaf8fad99df26b2eaf99bce2541d287b243d7b9cf0ecb25588d14c6228a6cb5413f48e3d07817d258c45ca0ab3494ca5b59f87abdf38e439b4a31d60d9474a52e465f36dd0cd56f00d4e5e563bfc6421b40a7522eb71894a698c19510fa7dc690b6b3f782d88e61ca635d5efd4c9c1725dbf24e0c8e246a2dc979e4750de8347687038f0441858bdf5a06bcba827d8d1327601943ca9fd004c121034fa6e1c8b9eff5da764961f5700eab97380e99b37f302239b528b36f5c9bbebaff25edae48fbe59dd272099af5c695a19b62f64485ba01ae8416c02f04360be933b8ba8a49c6c1188a78c3d36d0c61f61b4002bfeb669e29bbcb306f573528a749b085500c7649aea469fca867da4ca9eaecc75a70f41baeb80bf803402a9066dc1e8243192b78533e0ad590e14fd2bf2ce3ac943ade1fcefd247406785ee387d18e9afe8845481748fbadf4d081e01ecce50ef1fc5b457fa296b833d77390764e2af12f7930c6334476dc4cf45d9f272e364336810c11318bd0a95233005d66fe81a5708ae5fad8c7db17e6d97d2340651f7aa7a36e132a77a7a6206b36a95ccb5a48cb19bd3bb886ff0e77bc76653912149ca85895c4f80c373cbbd4305a91213e8ec5b7b18d8587d723c18f02854556aaaa540935eab2b7470a7c1c40c7e843ac1221a51e92eb05af2342fea7c853a46182c8384612aadb40145b95de565140003468eaca74b38bdf4dc640d0af80c3dd81747652c5fe15ffff8965a150a4ca6a9d9c91d067b4fac49b23cd2041dfdab22126c97d812b67ed638cc65d75d836bf439807cd7cd3cd0e6b30c81983e3f45a00282a14d401d81ac7c5544510dc7d157eeaa18b09df5ec949a22d7342b5b720b2a47251e995410f9b35d90824c1b19beb8575c9efe2aaa2a2011790a1099a924c01ca835fb7cc561eb2310a5331d4d9c4a9ee03a5f1364c17a7f4511c0c1b929c630cc110696f9e94b4107d0b75338fda2c5e0b8d46d19b98071e328f57debd56b4a0a9009913ac41518a08e6fa533edf20db0dc5eff43cd3ead623fc826ac03925490537d6b6a47f27031faa17f9852a3cb72d2088f33d35846a40758e60dab4b3980d032adc3e4faa61ff8aaea6b08bc9705cf097701e9af550fa43ec06c0ae2257927eebcbbbf4a05ad8097597943d6aed8a950ba32bc0d19827539019397e2fffa5f7379ffd7ec266f0c1cd947aab0c9e73c2796bd4c32fa0a0effbc84570efdebd3ac1eb57cc89cdbed91ed43a64cccfeba427a017a07d84acc850a45e2f26639598ed061ea81b60fb1873983591d446129ba8b27a4aef3311292017e3cbc00533824888ef80ef1a85c86a370dc11694d2f455e04ceb8811afa53aac77c65b38703d18167aedcc077c988dd9832ee1999a82c8752b921bceae484c19cee6828eef373c979b5c3f208080c8dcb38c53e384bebed6c41c3b9d6958bd2b952d82d17b262dbf30f90ab5c5d197ccee9f6b6525928b0100ffdeace644e159500495ff5a0ea7df7b9ab63617e3879818e25341e97d839beefdf248222cadd61a5d76b1ff34704bb78656afef7994904da269f973598217edc3be93157185aa15ef225f6471d7786a5e28d0f145b96566e101bf46723486867b9aa90f9eb4d1f5612d4950160c1504a367daf984"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r6}, {}, {}, {0x0, r2}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {r8}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r4}, {}, {}, {}, {r8}, {}, {}, {}, {0x0, r7}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r8}, {r5}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r3}], 0x4, "9755154351ac9a"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 17:58:58 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 17:58:58 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:58:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:58:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x0, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:58:58 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast1}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:58:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 1494.998642] 9pnet: p9_fd_create_unix (10957): problem connecting socket: ./file0: -111 17:58:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:58:59 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x0, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:58:59 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000340)=0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r3}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r1, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:58:59 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast1}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:58:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 17:58:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) creat(&(0x7f0000000080)='./file1\x00', 0x102) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/pata_sch', 0x600000, 0x100) move_mount(r2, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000180)='./file1\x00', 0x40) syz_open_dev$vcsu(&(0x7f0000000040), 0x7ffbffff, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0xc5) lseek(r3, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 17:58:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 17:58:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:58:59 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1495.505397] 9pnet: p9_fd_create_unix (10985): problem connecting socket: ./file0: -111 17:59:12 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x0, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:59:12 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffffffd, 0xb419}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x10a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000006c0)="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") r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000000640)={{r3}, "3537784fc6fdd5e06fe4c708792bab5d0bc9d74370caa063f660f42847a4656e64fb8f766150af25edad05ffa3335a9f0a85e63c6fd8dd293916514ed859a2c02299120f9dca079945f71b2027086a996fe50731cbd1b789f5f52c113412eb60f3edb4da73ad9f928fa6bc05a0012a514f0873d32b025c02b20a98a13609c2440ab775a82c81a70765886cb35a2195e9a8ed283978a9dd50e63458010ffc539d48a8bd7d10e4dbb00d44749308a753bff0565972d4ec01263fe23dc9d20b6f27abd2a9a1b3dbd8b208666dba00704dc084b0ca61889cad5ea06c959ab7126f3526522de688221d3a1a74d445265210476a0d4c647f24058949b9d5d9802c923ad164ed989acc6dd8fac054d00ed4d2f76670b9a465e203b96eca05dce1ccaf3d2d4dfe8766ee4f718dfa92443613e2907b953dae3b22f49f08bc2f3916efba5eb61d717047c5a20c7d353c2459517a809a21edb845f90843b90abd24abf5aea9dbaad9ec1161a6671fc7af0ebabd900e4b5e1d75d0b2ea318b9c4bc905e9ca253c457404fd51193721ce9908eaee779a3d26716f7ba2b9dc341418d5f3359ba76d1fdf2eaf0d73a4552a3602bd07e52d1d0720de2c8075847b3e78e9534f69c922a3be1334bf953fccbff9c495b1fef334d2a9aa29ff50fef156dfc5aee8b38ff976cba37a5878333fe2304f5c84b9b7215c72792c408c17e545423c0f581afc795634104b928001944e070f50b72e16541bd4a03a4f25853ccb18022f515b4a606535f74967004e35a45755f3734416d7eb8644fa9af1bc613e59b84ea91e48382e2fe9aefd5c5885fca72c72ac045801b999b316e69439f11f9cf4033779afb71271b3b61bda7728801236505753ba72b3ee4ab6b2c49cc814f0f7b31f2bf40adbd47ec680d7d7df909beefc5f88d5ab2282e4dcda7b534e721c71628dae9a344f360e39823cffd34f3440dd5ecf0a8c7451aaff66966999823c6b14a867d81ad2e2938ccc13042b384418ea7ea0b8d29577ea1591c2474a65602fcd58f609aba97bd62cd006b5865d0a39e744d25b7d22b0434d57a85f6798e43f4baf210260dfd9825e07f1995c5ad94be363170a52d2c908fc4db8c0e4d217d91bbfdedae8febd877c13022deca98519727c11dffb2bc6be93f6c6a1bbcb3f0f6763a86b6905d20e6618d40c3036847f0a5ff189558492af0eb386a5115bd5275804e7d6bdee52348083bf8ff945f0aac9d62fe01f71b6d696b9d448422e5cf402ff948107713b5539052452975a58260a95b0a68a47890fa0ba20df940ec9b2deb7be3ff21c93c9a97ee6f8888a9775c3dc0d48bc21077b0841c6f5099073e0358c07aab56560620ca6ceb5304990f628a4b7b3363847b24576fd9ea176014a02b5a3ddfe4799743b2fc9e316e36e4a1d45f2332f1c18f678e5ac3bca9e32fe6f82eb3f7b5c505f50c1fcfe899e9aa14731dc3e0980be0502d38c6dd8d5432d9a4d2d39ae11e6fdc8918d857fdd96ac8a1ab313ad92a9e687cc11f384cb6e3402260c0b56c6ce40160c2a0684eb1b9b93211bcac7db7efe4ff330ba51737294d8255b6adf8a95dd418eb41bf3196a26df871b3cf2928f8d83a608fb5b12481ffc24218f455568ff3d97080aed9984506747166c6d8eb536ef2ac18590f012a7cf29dde8d4b931370dfd12a6dc3c3a3b5fe210c0f88cd0aab03eb8d718257f9aad3c8cc55b2dd5be97e2b9ef761cc7c33889467a5da3b01715d14396ca204044165499c28e0bb60d331d4edc2e3d65feaa8b8a4e00812b764eb78217553255d0d7cce02782662b5179b5e4808bffdf105c3e8c78b4cc0750c6e72a9680c509af4aae0af710eb144ad216d8b7a51ded2eab3a05ffcf26fbfc8f8ad9d7eadf0d640480235ebc2868d5b78e8297508e055678d4828a2d060a1b98bf6b929e682b674bb4237baaa15edd05418d8c142abe56f7ef30ae3da893912afa4e98ed0af286e5bd62043aaf1a0ba086d3f5a5e02bbb9c0d041cba0b13fcf60438c3d62ca8ecb310b27f713f9d1c4ec436f2bb15701d06c1b3336d67693feb93a22401b264934046b9ceaf4ac0512e70ceb11d08cf4871dd1dac3611036c776b2bfc1dd310c9c3cc0a4eec99f8e91c3923daf022464ad9c7fb2309181b57c853fce3ebf7f043b669ca7c6b934bd5f535b00ba2eca818ade5159c498ae133933faaee10fedf149c64e941de142f14f7959c5adf11bc32530262412f589e5ac1cfb4792da768f0e34f180446699a372b586ef0ba58292baaf7b4537ad41fe1bb63ca4c36838c74d86414fde77d665add94bef530390a729827f32dfc68a661b091ae6561585858a32528debf23a65b23b77fcd7683b77da098d00f96e396a1d7b17957c014152de1a8185ae3894c2a08200abdaff1c83c0dcfda7a5bf03ded0f7e7e88652ea94842622b92bd0344aace9faf963d6bd8431b5b82ab613ed843f7376b29c46527cc6d936c62029e1141037f761895a2247710d93977dda2cfe713debfb3cb03ca1674b7afd0dc3b502854dbf9d91f26334f26c729c2093c3efc14ad0cc830218756553aaa70c91e4879164d2e210ad7c2179de3de47e48e2b45e53a2b677b1f55d386edc4f14ce665d1770face3b792a5127b6d9d188672dfe9efae6fc4220f2901f88a1e36b9a6269896a0e4554c1593e8b365dcc8caefce2d41072b3fbb3ae85521a21f031810b27877884953834f860393a924f805bb1f35e6fd8e6aad83e8bbfdc3f78d38ffb84d305a49cae5c66a8d0264334661eda5e4e974b2a925da5813f1304a841bb9cd432e9c0a93b32384a1377310693b50946fa51d389ca130f2be017d5fbd5b7b4978c9ca2c110aef20c4da71b0276e159b08453c434c453e8ed887c358abb67abe1dab4ad07ac93b20d0d727ea1d37467b3bbbf7fffa8c83b97496df95d80dc98d6c6ce25f2ad00069f93372e6e082cd8bc0e541494cf51aa185e4a831cbe0dd77487e08141c89c26a2f9a8110ce09673d2e2574f297dba7d65c7b45ea09acd148d51e9fba12b0cb27d7e60d2767c19bdabad7418ef5532b2a2f4d9da6bbddfa03c5c2de620a50786c3c5884e34e5bb76b74482b0276faeb3f6a52abad6b619ff34b8d55ed48c3d7ae92b2b217726257e174b1faa77f4e713a42f216621ac3c8488279a76ae3e2304df03be45d46edc21a7ed4dc026cec0b7c28c66052d08ce2acb82624ebae2058ad9256d28df6a0f21d212a4322ec251f1d026df3cc93b0ba3fa4284ff9f23e0d7a9ba7623eb49cf467ce9b2ad336a97284633303baa8207bf049da6b8e3d6664c6d4cf198bf616e50c85a3d80b238ff8ccd68ca0d4e97f940e8e405b5adfee1991b25e1e200f6dafc48b273dbcdf2053d8dee64a51ed09598f92091e4d12bd0ef7fd23a508f345eace5c832b67eb3338217c11917ef1860a14f008066398cd1643c8132ce48b49093fe8ffee45dd2aa64bf3291c753035c189e284f40fba09a0febbd7f0c334de4089e2fafd191058edd8a61cd1e9d01889ef7814964ff395e15aeea8cfde2c0991f58a89a4e6251dca856f935ae77657a03b91061d3086bb720e0fd1eb59578cac1793b6b58f98320814ab564d5fc5f559404d7c730e08b290ac2066a0392d81569f2918dbf81fcd97206bccf2e75a6d6937956ba6bd86592d13bcd6446cf5f8b5ea95661307306e5823c7522fd6e672605ed650cfe91513b0bca6483cc742fe1b9c53cb83a89f1d7cf21976b7c9d7892ccd70d6f8b8851b4124b005d168883385954b8a0919da9576828ddcb97d16bcd3563a3fe25538ec9d3255eff87201be11caf932525359b26e9b287145f7c469c151bef1140bcf9f94d6e67539eb7f9872efae56768bea61e0fc7a00c2fa6f062616a881b50fc9db7fc4bfb44439aa6bf244c7b9a28ba31fc011a88b4e8abc260d57b769ecaf379d8a06ddf477a9432dc21483bd08942b72fbdd61ba7f56baf77ff8a5e8a4fe526fe09ac65d6dc0c21cd7cdf14823f35c79edd39f37c8bafcf5c9d818d183bedb501b885c4f2938d41c88e70c726e12a991d555da1c2815f9d8a56e11ba51c127881beb7a99df2576d98f82881a72bc0f3431b2299a14cf78fd3ebfc5a3c576e6ac9818997bb46b65cbf1fb689aa92e61f89fa458b4bf7a880424ce70b61846803f5c4b52a668b094fcc958fa124b05e530b874bef5c4e1f295cda00b558c3141724421fa46915465742d4d79fcaef42b237872bd30c627f5d92705f8cda48949f859dd201f08b63f5ad48399d3e9a04302fdfcd6513235bfb580e34cce1d3a58b9638824d46fdad4c566f656a5afc9d9dee87e30fa69a7de04b7a59878ccc39dcb70b6b5517eb335fb8061f3a301b4563f4887b797463dd84b0c4fe1879817883ed4dc7b6f15f5c48eeb5462bdb8a8dca6d58b1bb737a090745719ee2aa2f4ce1ca0e527c5767fa1a6ef3824c749eaf3309cc741c8f9a41bd019ddfefb287a6f9fe15119c9d34251ce9c68d8a09ce4447dcd04e48b620fd9cf0386660f5830888f0c5b7b9d21b5723eefba3583be48b4d862249d817d4f22f55aa0a9cafc611996ec5fbcfabc07e00d31216b8efe2c4fbe645d97b10f68dd92419e2372b434106c4828788e994f5a7a6e738f02e77e1fc07be6bad99d1f7313b10ec37b29218ce03452ebcec433f4d17f7a169f2176ecc7558bf969cc3443951724e76bb07f696db4cff369e6e93f51f365fc0f04b6247ec8ebb7774ceeb95c1128e2a8b2cb90d604083cfbd0f1a9cb8fd40983133b36484f7d67caf9d11cd1e6a2bd4e6cef4567adb37f92617ace5388dbd7f7becd67caf902a0a61c3077209f9520c8c59c59d4ca6324ae88bbc1f29d0a2522ef85f45d738188e284d0381aa6b5395b5e77345f062a540ec4372b61b60ff8d52201c25ee5e678a4b21b8d18ad00758645e6d1d0c3dcbe7ca6f428b278e3bb1b860b964a4915f9d1ca35041fcdf7c43005e4d9e8d6fed94c1c7534cf8daa38cda0162caf11a0dc380821537f48de2aa84867bd7c0bce8d228a321b3c6cab200e810f514555f247b0b0b6c9c1728acfa2d063e931e84fd18abd31a871e390209660dca2e1e07100b990dbc26756ec32a1984daf7d5be90ac02e8c488de0aafccb49f5cd8dd3da5a6f3190a62aaedca226be6bf59ad17451d7a4ce9782c73d486c1746cd2ee5ddaee93a407e85f92154a4ba5c99d880ae541e59512bf7829338217d1cdca25c82fb6bec6006cd417f92be3977c3c939eef09ed7485f236f0872f1033a1e0aea21e18bae55ab837ba5399bc9f11e63430cabee2453c17d50d1c8bf7039166e9705a4b721c2c4419076dfe396f6ab789c62dfcd131c03a088a59761154962a7ecbb893b5bf5443756f4b990fe29a6380a8d3efded7b6042397d61e9f0fd4020a0a84f0b72ad2775dd15751d6f9aa53da512ed04b791c4fbe3dd19cecf20224e8e7f01e1f39bc4ea0f0702d5ca7048eb0a59009909eb5530dbe5ee191fb80e2b6415c3a8dfa19ffa9ca32625edd5d602e0bfa91ea3266226a4c47bc49daa324a25cadd1d0be863aea6afa8f8ec81b381fed84794d27a9172ebf530585bdfda62c33826a00d13ae3d20653bebec0df3e0ab997ecc5d962b96a24b02a6f970c01346a0b8ea70f41a45c62c57dfe149a1cbbe6ab443057ca8345f529cf86831bb1865e3b3c71f9b746112709a8e5bca0ee1d1bcb42c72e2b4624cb598ce698a531ef92544639d4b36aa56c101f5d94aa968d140c94e728757fa474fc9db92c088"}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x65899913, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1c) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7f, 0x3, 0x1, 0x3, 0x0, 0x9, 0x10000, 0x12, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0xd}, 0x40, 0x4ad9, 0x2, 0x4, 0xf2, 0xcb, 0xd05f, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x1, r3, 0xb) mknodat$loop(0xffffffffffffffff, &(0x7f0000000bc0)='./file0\x00', 0x20, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="6f3008f46a15116cbeeaf24608000000000000001ef3a657a4be5db21b02c08ac9a79c1b9ee13a88d9ba1982951c7ff28bfcdfcdd977317ec465bf8b9e6a629c231cd566305e6bce04e6d81645e4aad51f2e294c530471b4d54f0d586fff95b1689c1f6a1fd7ac3ec60c133d04de9204ecdfe2379b3f505534859a2b2e61800ab45f3e418c7d0511ded1597ad32ab1973a53498d32f4c1e8608ad3f42d08a2fd29c862a5c56065ce108b692e773fec40fe9298acda6d"], 0x1c}}, 0x0) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000180)=""/43, 0x2b}], 0x1) 17:59:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 17:59:12 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:59:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:59:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3b, 0x1, 0x70bd2a, 0x25dfdbfd, {0x14}, [@typed={0x8, 0x37, 0x0, 0x0, @uid=0xee01}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x40050) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 17:59:12 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:59:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) [ 1508.474755] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1508.488276] 9pnet: p9_fd_create_unix (11001): problem connecting socket: ./file0: -111 17:59:12 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:59:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 17:59:12 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:59:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:59:12 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1508.729396] 9pnet: p9_fd_create_unix (11019): problem connecting socket: ./file0: -111 [ 1509.309022] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 17:59:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:59:28 executing program 0: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/4\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x806c2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) sendfile(r3, r1, &(0x7f0000000380)=0xffffffff00000000, 0x400) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x8050) r4 = syz_io_uring_setup(0x29, &(0x7f0000000080)={0x0, 0x5236, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) eventfd(0x0) syz_io_uring_setup(0x2408, &(0x7f0000000200)={0x0, 0xd992, 0x20, 0x1, 0x29d, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000300)) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0xff7f, 0x0, 0x0) r8 = getpid() syz_open_procfs(r8, &(0x7f0000000100)='net/vlan/vlan1\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, @out_args}, './file1\x00'}) fcntl$setstatus(r2, 0x4, 0x6400) write(r2, &(0x7f0000001200), 0xffffff45) 17:59:28 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x0, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:59:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:59:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 17:59:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) ftruncate(r3, 0xb643924) 17:59:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:59:28 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) (fail_nth: 1) 17:59:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1524.709629] 9pnet: p9_fd_create_unix (11041): problem connecting socket: ./file0: -111 17:59:28 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x0, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:59:28 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:59:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 17:59:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 17:59:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:59:42 executing program 5: syz_emit_ethernet(0xd, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:59:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:59:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:59:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x0, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 17:59:42 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x0, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:59:42 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r3}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:59:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='(^{\x00', &(0x7f0000000080)='./file1/file0\x00', r1) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 17:59:42 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}, {0x0, 0xfffffffffffffd74}, {0x0}], 0xffffffffffffdfb}, 0x0, 0x800}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x4a90, &(0x7f00000002c0)={0x0, 0xfffffffd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r8, 0x0, 0x4) syz_io_uring_submit(r4, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r8, &(0x7f00000000c0)=0x80, &(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, 0x101000, 0x3}, 0x7ff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1538.226140] 9pnet: p9_fd_create_unix (11066): problem connecting socket: ./file0: -111 17:59:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x3d1800, 0x0) openat(r2, &(0x7f0000000080)='./file1\x00', 0x801, 0x1c8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="7e84bc3ee48153634d15ee7d2fb2e6136bf2e977b3535880833579bfdd173cdb8e2fd3da5fed28c1fa8659b4dce45681f759d31bf324bde799538e452177631633cbde139fea919c5c47323ea713b4a442f68aaabdbf32a00b44040f00bd699a81088bdaaad44f7aa5adcd8270c6c56ef2715b80f8747bf7273927589f30e261a043e7b106595a53a7efdfd165542b9a6ff12e4f05c774608f9a90e172dbea4e2379b3b8c9cce81f60a19d9c32260da7c9562caf3fd62e10f603", 0xba}, {&(0x7f0000000300)="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", 0x1000}], 0x2, 0x8, 0x8) sendfile(r0, r1, 0x0, 0x100000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r4, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 17:59:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r3}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:59:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:59:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:59:57 executing program 5: syz_emit_ethernet(0xbe, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:59:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x0, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 17:59:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x0, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:59:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) [ 1553.060602] 9pnet: p9_fd_create_unix (11095): problem connecting socket: ./file0: -111 17:59:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x0, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 17:59:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r3}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 17:59:57 executing program 5: syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 17:59:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x0, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 17:59:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 17:59:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 17:59:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 17:59:57 executing program 5: syz_emit_ethernet(0x200000be, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1553.290989] 9pnet: p9_fd_create_unix (11118): problem connecting socket: ./file0: -111 17:59:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="0400000000002e2f66696c253100"]) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$incfs(r2, &(0x7f0000000200)='.log\x00', 0x4000, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) setresuid(0xffffffffffffffff, r3, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x104014, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e21,timeout=0x0000000000000008,sq=0x0000000080000001,rq=0x00000000ffffffff,timeout=0x0000000000000002,posixacl,sq=0x0000000000000002,rq=0x0000000000000001,sq=0x0000000000000004,timeout=0x0000000000000009,noextend,version=9p2000.u,sq=0x0000000000000006,version=9p2000.u,euid<', @ANYRESDEC=r3, @ANYBLOB="2c7375626a5f7479c9483d1a0af6ee51b46d4b868f17cfadf904b40b9f92fb032090fc7ea0dab5712eb8bd1bad293d20a0659ded47f7122ba9dffc12b80fa9c05199ea09623d22535e31110437bc2c61756469742c0000000000"]) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x131040, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000300)) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 17:59:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x0, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:00:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:00:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, r1, 0x0) syz_io_uring_setup(0x4a90, &(0x7f00000002c0)={0x0, 0xfffffffd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x6, 0x79137c8ac643fb97, 0x1, {0x0, 0x0, r2}}, 0x2) 18:00:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0x0, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) [ 1567.300760] 9pnet: p9_fd_create_unix (11148): problem connecting socket: ./file0: -111 18:00:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x0, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:00:11 executing program 5: syz_emit_ethernet(0xfffffdef, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:00:11 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x0, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:00:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:00:11 executing program 0: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {0x0, r1}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r3}, {}, {}, {}, {r7}, {}, {}, {}, {0x0, r6}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {r4}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004d800)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0xfd, "a37f14dc4edb77"}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r9, 0x5000940f, &(0x7f0000000640)={{r8}, "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"}) connect$inet6(r9, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) setsockopt$inet_mreqsrc(r10, 0x0, 0x25, &(0x7f0000001480)={@broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @empty}, 0xc) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e24, 0x65899913, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1c) close(r10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x22b80, 0x1b7) 18:00:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x0, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:00:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:00:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:00:11 executing program 5: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1567.484201] 9pnet: p9_fd_create_unix (11160): problem connecting socket: ./file0: -111 18:00:11 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x0, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:00:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:00:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}}, 0x28}}, 0x0) [ 1567.638914] 9pnet: p9_fd_create_unix (11170): problem connecting socket: ./file0: -111 18:00:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r0, 0x2) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) write(r1, &(0x7f0000000240)='e', 0x1) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400, 0x2) statx(r3, &(0x7f0000000100)='./file0\x00', 0x800, 0x2, &(0x7f0000000140)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 18:00:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:00:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x4a90, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x5}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) pread64(r4, &(0x7f0000000300)=""/247, 0xf7, 0x10001) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(r5, 0x0, 0x1) r6 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x12, 0x0, r7) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r5, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x1, 0x2000, @fd_index=0x3, 0x2b02, &(0x7f0000000240)="a77108a739040c79fdf3ca1ff77445e165ab91bd32e1385a88d5afedd9ad935720e54066ff4c27e960f3edd6e2b9ebc95bf414c8d543346867ccbab02a5cba0171bfbf5603d66b86936670d91f6a6d881b1b3eaf9d50eddda159cedd0a8f64a21b385fedb9e28220a92bdfa98c1f263315e23d152930d495", 0x78, 0xc, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r4, 0x80, &(0x7f0000000040)=@hci={0x1f, 0x4, 0x3}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x10000) lseek(r1, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:00:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0x0, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:00:28 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x0, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:00:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:00:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}}, 0x28}}, 0x0) 18:00:28 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x0}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1584.603308] 9pnet: p9_fd_create_unix (11194): problem connecting socket: ./file0: -111 18:00:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}}, 0x28}}, 0x0) 18:00:28 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x2}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:00:28 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x0, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:00:28 executing program 0: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x2ed1, &(0x7f0000000240)={0x0, 0xa60e, 0x4, 0x0, 0x163, 0x0, r0}, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000400), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x4d4d, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) timerfd_create(0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) timerfd_gettime(r5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:00:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0x0, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:00:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:00:28 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:00:28 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1584.827642] 9pnet: p9_fd_create_unix (11204): problem connecting socket: ./file0: -111 18:00:28 executing program 2: getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)=""/186, &(0x7f0000000080)=0xba) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10010, r1, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r1, 0x70b1, 0x0, 0x4, 0x0, 0x1}, 0x1) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:00:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) (fail_nth: 1) 18:00:29 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:00:29 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x4}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:00:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:00:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:00:29 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1585.149720] 9pnet: p9_fd_create_unix (11230): problem connecting socket: ./file0: -111 18:00:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(0x0, 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:00:46 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:00:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x1, 0x0, 0x4, 0x0, 0x4800, 0xa406c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16000, 0x0, 0x2, 0x0, 0x0, 0x4000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/247, 0xf7, 0x10001) lstat(&(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file2\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="000001000000000000000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=r1, @ANYBLOB="332f6600880ebf72255e8e32a45fbe93cf8c46d7b38358f8bc26bfc4646988000000000992fed7ec1a2fd056041cb3ee12bec4daee328ea56f2202e0c64012c2c76073839c8c216e11f47b221e47829662fa7b918bd5140731693ecd"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, r1}}, './file0/file0\x00'}) r2 = syz_io_uring_setup(0x3a7b, &(0x7f0000000600)={0x0, 0xe005, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, 0x0, &(0x7f00000007c0)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd=r2, 0x8, &(0x7f0000000780)="738bbc50d3b6f9fb37924390870c232e45a7ac1485ff9ab9943435b838d7b4460f5394401dcc12de229e", 0x2a, 0x6}, 0x4) syz_io_uring_setup(0x4641, &(0x7f0000000080)={0x0, 0xbed7, 0x8, 0x3, 0x262, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x23a8, &(0x7f0000000280)={0x0, 0x7caf, 0x20, 0x3, 0x25c, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)={0x54000, 0x4b, 0x8}, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x0, 0x23456}, 0x1ff) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xffff) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, {0x40}}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000ac0)='./file0/file0\x00', 0x100, 0x100}, 0x81) 18:00:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:00:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x100000004) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lseek(r1, 0x0, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:00:46 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x5}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:00:46 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:00:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) [ 1602.214875] 9pnet: p9_fd_create_unix (11244): problem connecting socket: ./file0: -111 18:00:46 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x6}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:00:46 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:00:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:00:46 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:00:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) [ 1602.421190] 9pnet: p9_fd_create_unix (11269): problem connecting socket: ./file0: -111 18:01:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:01:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:01:00 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x11}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:01:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xcc, 0x20}}, './file1\x00'}) inotify_add_watch(r3, &(0x7f0000000080)='./file1\x00', 0x1000006) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:01:00 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f93307", 0x8, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[@hopopts]}}}}}, 0x0) 18:01:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:01:00 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:01:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:01:00 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:01:00 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x21}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1616.853284] 9pnet: p9_fd_create_unix (11289): problem connecting socket: ./file0: -111 18:01:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x3a, 0x2000) syz_io_uring_setup(0x4a90, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0x0) syz_io_uring_setup(0x4a90, &(0x7f00000002c0)={0x0, 0xfffffffd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r7, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r0, 0x80, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e24, 0x2, @remote}}}}, 0x8) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2007, @fd_index, 0x687, 0x97d, 0x5, 0x10, 0x1, {0x3, r8}}, 0xffff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r9, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:01:16 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:01:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:01:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:01:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x4, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:01:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17, 0x800000000000000}, {0x0, 0x0, 0x1001000a00}], 0x20800, &(0x7f00000000c0)=ANY=[]) r0 = syz_io_uring_complete(0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x505942, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000900)='\x00\xdfn\x04\x02oA\x13\xe0\xac\xb6\xee\xa1\x0e\xb0&0\xfc.iOw\xe3\xbb\x01\xb7D \x05\xf9\x05\x8c\xed\x16D\v\xa8c|)\xea\x1b%\xbd1D\xb6\x8e9\xa6|\x06B-\x905\x111!5\xaf\xddf\xf8\xd2b\x16\xec\xf8<\xd9\xbc\xf7-F\x80\x8a\xe9D|n*\x9fM\x1e\x80\xf02\x89^\x92\x1fY\xcbcN\xf1\x06\xe9\xdfy&\xbaX\x03\xbeD\xb6\xe2\xa4\x12v\xc4=?f\xf1g@l17\xbb\xc9\xc51\x83@M\x13\xa6\xe84\xb2\xe74*+\xc1\xab\x15G\xef<\a\x8d\x00zf\x88\xe5\x9d\\\xc8\xf9\xb3', &(0x7f00000009c0)='\x00\x1d\xb2O\x8b\x1b\x83\x1e\n\x13\x00\x00\xd9\xd0\x1c\x1cY\x8d\xca\xc6\f\x95\xdej_\x95_\xfc>;\x1fh\xb3\x91{9[\xc0\xc66\x9e\xb9\a\xcb\x06\xa0\xd7\xefvR\x85/\x05$\xecx\x8a\x9b\xc29\x8fc\\\xab8!\xe2\x03$z-U\xbcx\xea \xcb\x16\\\x1b\xe7U\xde\x88\xda\xad\xcfZ9`\x86\x18\xb8\xb7\xd2\xa2\xf0\xc0\x93L\xac7\x85\xc2jg^\xfe>eA<\xac\xe1\xd34Df\x02L:\x14WI\x10\xffe}J\xe3Y\xe5\xaf\xde\x9f\xcf\xfb\xa2'], &(0x7f0000000380)=[&(0x7f0000000300)='vfat\x00', &(0x7f00000006c0)='\xa5\x19\xa3\x15\xe4fB|\x8e\xa6V\x8d[(\xb7\xa4\x06~\x01-Wl\xb2\x84Ax\xfb7W\x89\xd3[I\xc8\x8c%0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f00000008c0)={r7, 0x5, 0x80000001}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000b00)={r7, 0x2d7b, 0x0, [0x4, 0x4, 0x200, 0x6, 0x5a4a], [0xb207, 0x8, 0xf2e3, 0x100000000, 0x4, 0xff, 0x5, 0x6, 0xffffffff80000000, 0x101, 0x4, 0x1000, 0x369c, 0x3, 0x5, 0x2956, 0x19d, 0xff, 0x8, 0x4, 0xc955, 0x4ae, 0x1, 0x2, 0x80000001, 0x3, 0xfffffffffffffff8, 0xf2a3, 0x1, 0x1, 0x4, 0x6, 0x6, 0xad, 0x81, 0x7, 0x2, 0x3, 0x8001, 0x4, 0x7, 0x81, 0x5, 0x9, 0x8c6a, 0x4, 0x10001, 0x1ff, 0x2, 0x3, 0x6, 0x1, 0x0, 0x0, 0xf70c, 0x426, 0x9, 0x1, 0x9, 0x8000, 0xfffffffffffffffe, 0x4, 0x4, 0x3ff, 0xffff, 0xb6, 0x9, 0x80000000, 0x3, 0x9, 0xffffffff, 0x401, 0x100, 0x8, 0x3ff, 0x6, 0x3f, 0x6, 0x1, 0x72, 0xdca5, 0x3ff, 0x6, 0x6, 0x7f, 0x800000000000, 0x8, 0xfffffffffffffc00, 0x7, 0x3, 0xaa1e, 0x1, 0x1710, 0x8001, 0x5c00154, 0x0, 0x5, 0x4, 0x20, 0x8, 0x2, 0x7, 0xbc67, 0x20, 0x5, 0x8, 0x4, 0x4, 0x7, 0x504, 0x6, 0xd6a, 0x3ce, 0x2, 0xfa, 0x1, 0x100, 0xd38, 0x2, 0x6, 0x7]}) copy_file_range(r4, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)=0x7, 0x7, 0x0) r8 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) openat(r8, &(0x7f0000000240)='\x00', 0x200, 0x13) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/632], 0x278) sendfile(r1, r3, 0x0, 0x100000001) 18:01:16 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x29}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:01:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) [ 1632.038047] 9pnet: p9_fd_create_unix (11317): problem connecting socket: ./file0: -111 18:01:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:01:16 executing program 0: dup(0xffffffffffffffff) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x202100, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000540)) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) readv(r2, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/15, 0xf}, {&(0x7f0000000680)=""/204, 0xcc}, {&(0x7f0000000780)=""/108, 0x6c}], 0x4) set_mempolicy(0x0, &(0x7f0000000000)=0x3, 0x200000000000004) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f00000002c0)=""/208, 0xd0}], 0x4) r3 = fork() syz_open_procfs(r3, &(0x7f0000000580)='net\x00') mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001cc0)={0x0, 0xfffffffffffffffb, 0xdb, 0x0, @scatter={0x4, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/203, 0xcb}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f00000009c0)=""/137, 0x89}, {&(0x7f0000000a80)=""/185, 0xb9}]}, &(0x7f0000000b80)="a1162556e36eaf950d8968fc4e854b9f84b42754d6170c0b7872c6bc0435e3263bf173eb76b6ca4adb397de055d8012f257a6ac0c87b75ed658a14ce9f363b419c1f9653404d541df0c6d2eddd1372de981e2eab4cc432ca5aab0747473f9104c7de6bc0a9ca6feb77fd02bcd4e461cf700bfbe30272930c5934892b4fc7381642f29f89b8db0b5dd34cfece482d3063681aaecd6aca165ea493dd2c2c9ec609eacf68a13f60ac5c2386bff51c2c584d903fad8a4553b99035641fd5c670633906e64fe81b32a09fcc913e060879d88463760aa8ffe2171e5cf675", &(0x7f0000000c80)=""/4096, 0xffff0659, 0x2, 0x1, &(0x7f0000001c80)}) 18:01:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:01:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:01:16 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:01:16 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x2b}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:01:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:01:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) [ 1632.167522] 9pnet: p9_fd_create_unix (11329): problem connecting socket: ./file0: -111 18:01:16 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x2c}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:01:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x7, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:01:16 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:01:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:01:16 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) syz_io_uring_setup(0x4a14, &(0x7f0000000340)={0x0, 0x8ecf, 0x1, 0x0, 0x31e}, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0xff}}, './file0\x00'}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) ftruncate(r4, 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x65, 0x4, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8000}, 0x54, 0x10001, 0x7211, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) removexattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@known='trusted.overlay.impure\x00') kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 18:01:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) [ 1632.338950] 9pnet: p9_fd_create_unix (11352): problem connecting socket: ./file0: -111 18:01:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x3) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) readv(0xffffffffffffffff, &(0x7f0000001ac0)=[{&(0x7f0000000080)}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000180)}, {&(0x7f0000001880)=""/221, 0xdd}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000240)=""/25, 0x19}, {&(0x7f0000001a40)=""/86, 0x56}], 0x7) socket$netlink(0x10, 0x3, 0x8) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000001640)=""/79, 0x4f}, {&(0x7f0000000200)=""/58, 0x3a}, {&(0x7f00000016c0)=""/100, 0x64}], 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001580), 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0xa) io_uring_enter(r1, 0x2978, 0x3d5e, 0x1, &(0x7f0000000180)={[0x2]}, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x6801, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0xbcebb000) mount$9p_unix(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x1f381d, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) unshare(0x48020200) 18:01:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:01:29 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:01:29 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x2f}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:01:29 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:01:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x8, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:01:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:01:29 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x79d1c3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x1, 0xc9) r3 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x1f, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="5b757418b6bb47f6fe41cc0d3f756b0f94989a36669572403f7786e6f1a8513973a73292a890be3b2b543bd4b7715dafe84c9f50444b07da864b8c6e50c429707db121629eb9a8977c6cf5b9df6a4332de6d94b4c68883a563d45d1d86d62da73dd2f7dbe3783c9a9ac41a903dae1c41df2ebe586ac78040ce6d047fad7d73", 0x7f, 0x5}], 0x2000, &(0x7f0000000200)=ANY=[@ANYBLOB="68696465e692f6a357e5cb98726e2c6e6f726f636b2c6e6f726f636b2e6e6f636f6d7072650716c4db184673732c6e6f726f636b2c7375626a5f726f6c653d265d2c7375626a5f74797065707072616973655f747970653d696d61736967"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {}, {}, {0x0}, {}, {0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r85}, {}, {}, {}, {}, {0x0, r85}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {r83}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r86}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {r87}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r87}, {r83}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {r83}, {r87}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {r83}, {}, {0x0, r85}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {0x0, r85}, {0x0, r86}, {}, {}, {}, {}, {0x0, r86}, {}, {}, {0x0, 0x0}, {0x0, r86}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, r86}, {0x0, r86}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, r85}, {0x0}, {r83}, {0x0}, {}, {0x0, 0x0}, {r87, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, r86}, {}, {}, {r87}, {}, {}, {}, {}, {}, {}, {0x0, r85}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {r84}, {0x0, r85}, {}, {}, {0x0}, {}, {}, {0x0, r85}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, r86}, {}, {r83}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, r86}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, r85}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {r87}, {r84}, {0x0, 0x0}, {}, {}, {}, {0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000015c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000511c0)={0x4f, [{0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {r41}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {r84, 0x0}, {r147}], 0x1, "74a884bcd02bd9"}) openat(r3, &(0x7f0000000280)='./file1\x00', 0x800, 0x60) r224 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x100000000, 0x2, &(0x7f0000001400)=[{&(0x7f0000000380)="ccab8cf7992346743787437ab5cb7ca515979b2059e306799ec5078696ade273b86f3a61c249c11eed5d0aac503deed24a53883aad551e7a7864bd74f9cc73752aa9f4629ba1895bfb4d9d1548b32483e6fb25268f508fd9e0708d4b4d23a9fee88ef1d7ad671e550201b5b2a77491e282e506b6d9a2ad98b46d", 0x7a, 0x2}, {&(0x7f0000000400)="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", 0x1000, 0xa00000000}], 0x1008000, &(0x7f0000001440)={[{@numtail}, {@shortname_win95}], [{@euid_gt={'euid>', 0xee01}}, {@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@euid_lt={'euid<', 0xee01}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@permit_directio}]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005e3c0)={0xb5b, [{}, {r158, r122}, {0x0, r54}, {0x0, r206}, {r51}, {0x0, r133}, {r154, r7}, {0x0, r62}, {0x0, r20}, {r80, r161}, {0x0, r175}, {0x0, r55}, {}, {r71, r159}, {}, {}, {}, {r177}, {r144}, {0x0, r128}, {r19}, {}, {}, {r221, r115}, {r47}, {0x0, r202}, {r153}, {}, {}, {r214}, {r212, r8}, {}, {r181}, {}, {}, {0x0, r215}, {r60}, {}, {}, {0x0, r85}, {}, {}, {0x0, r46}, {}, {}, {0x0, r187}, {}, {0x0, r39}, {0x0, r162}, {r108, r48}, {r25, r58}, {}, {0x0, r201}, {0x0, r23}, {r174, r211}, {}, {r182, r132}, {}, {r76, r136}, {r31, r120}, {r170}, {r185}, {r90, r209}, {0x0, r127}, {}, {r196}, {r52, r199}, {}, {}, {r218}, {0x0, r37}, {}, {r74}, {r29}, {r12, r178}, {0x0, r109}, {r28, r91}, {r81}, {r77, r26}, {r179}, {}, {0x0, r186}, {0x0, r17}, {0x0, r143}, {}, {r149, r197}, {r157}, {}, {0x0, r49}, {}, {r70, r27}, {}, {r4}, {0x0, r66}, {r56}, {}, {}, {r160, r195}, {}, {r52, r15}, {r124, r11}, {0x0, r123}, {r152}, {r148}, {r200}, {}, {}, {r216, r88}, {r38, r75}, {0x0, r168}, {r111, r40}, {}, {}, {}, {0x0, r120}, {r221, r92}, {}, {r194}, {}, {r176, r93}, {0x0, r112}, {r104, r67}, {0x0, r78}, {r151, r68}, {r198}, {r99, r50}, {}, {r113}, {}, {r28}, {}, {r220, r32}, {r192}, {0x0, r106}, {r177}, {r125, r130}, {}, {}, {0x0, r171}, {0x0, r45}, {r138, r167}, {0x0, r208}, {0x0, r53}, {}, {r6, r13}, {0x0, r64}, {}, {}, {}, {0x0, r215}, {}, {0x0, r193}, {}, {r10, r203}, {r210, r217}, {r108}, {0x0, r184}, {0x0, r121}, {r103, r34}, {r146}, {r135}, {0x0, r116}, {r190}, {r72}, {r107}, {0x0, r102}, {0x0, r44}, {0x0, r131}, {r25}, {r214}, {r89, r98}, {}, {}, {r21}, {0x0, r42}, {r148, r183}, {}, {0x0, r14}, {}, {}, {r16, r205}, {r60, r57}, {r165, r173}, {}, {r30}, {r22, r145}, {0x0, r134}, {}, {r69, r180}, {r169, r150}, {0x0, r95}, {0x0, r9}, {r105, r14}, {r36}, {0x0, r166}, {}, {}, {0x0, r213}, {0x0, r150}, {r126, r63}, {r79, r222}, {0x0, r207}, {}, {r163}, {r110, r156}, {r59}, {r142, r5}, {r172}, {r151}, {r94, r97}, {0x0, r141}, {}, {}, {r96, r166}, {0x0, r155}, {}, {}, {0x0, r223}, {r82}, {}, {0x0, r219}, {r189}, {}, {}, {}, {}, {0x0, r164}, {}, {}, {0x0, r24}, {}, {}, {0x0, r118}, {r61}, {r129, r101}, {}, {r119, r161}, {r188, r114}, {0x0, r42}, {}, {0x0, r137}, {r117}, {r65, r33}, {0x0, r35}, {0x0, r43}, {r18}, {}, {}, {r100, r55}, {r204}, {0x0, r73}, {}, {r191}, {r140, r139}], 0x4, "d7e752a0d56175"}) r225 = openat(r224, &(0x7f0000001500)='./file1\x00', 0x4802, 0x54) lseek(0xffffffffffffffff, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r225, 0xc0189376, &(0x7f0000001540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1\x00'}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r226, 0x54a2) mknodat$loop(r224, &(0x7f0000001580)='./file1\x00', 0x80, 0x1) [ 1645.345369] 9pnet: p9_fd_create_unix (11367): problem connecting socket: ./file0: -111 18:01:29 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x32}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1645.388339] loop2: detected capacity change from 0 to 135266304 18:01:29 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:01:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x9, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:01:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:01:29 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) [ 1645.463024] loop2: detected capacity change from 0 to 135266304 [ 1645.484368] 9pnet: p9_fd_create_unix (11389): problem connecting socket: ./file0: -111 18:01:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x20000, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:01:44 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x33}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:01:44 executing program 0: open_tree(0xffffffffffffffff, 0x0, 0x91001) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x17, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = signalfd(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4662, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r3, 0x0) r5 = syz_io_uring_complete(r4) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0xb1130482ba6eb07d}}, 0x9) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x430}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000080)) dup3(r1, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x2, 0x1f, 0x5, 0x0, 0x3ff, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x1, @perf_config_ext={0x6}, 0x1004, 0x2, 0x3, 0x2, 0xc9, 0x44, 0x1, 0x0, 0x21c, 0x0, 0x100000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30b) 18:01:44 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:01:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:01:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xa, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:01:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:01:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:01:44 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:01:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xb, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) [ 1660.730879] 9pnet: p9_fd_create_unix (11407): problem connecting socket: ./file0: -111 18:01:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:01:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000030000000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb81fdb2ff74d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc66"]) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xffffffffffffff90, 0x3fb, 0x100, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) r4 = accept4$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r4) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000040)='syzkaller0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 18:01:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:01:44 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x3a}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1660.881465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:01:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xf, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:01:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, 0x0, 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) [ 1660.905189] 9pnet: p9_fd_create_unix (11430): problem connecting socket: ./file0: -111 18:01:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x7a9, &(0x7f0000000200)={0x0, 0x7220, 0x10, 0x1, 0x3da}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) lseek(r2, 0x0, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\r\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0000e6ffffffffe12d2f66696c653100"]) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, @out_args}, './file1\x00'}) readlinkat(r3, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140)=""/188, 0xbc) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:01:45 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:01:45 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:01:45 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x3c}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1660.965172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.966889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.972395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1660.985723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:01:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) 18:01:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:01:45 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1661.070560] 9pnet: p9_fd_create_unix (11449): problem connecting socket: ./file0: -111 18:02:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x44) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10010, r0, 0xb9d9d000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)={0x0, 0x3, 0xc465, 0x4}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) pread64(r2, &(0x7f0000000300)=""/247, 0xf7, 0x10001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000040)) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000300)={{r1}, "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"}) 18:02:00 executing program 0: unshare(0x28020600) unshare(0x30000000) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000000)={0x7f, 0xffffffff, 0x1, 'queue0\x00', 0xffff0001}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xfb, 0x77, 0x6, 0x8, "d552842d4282208d85e38fbbef63ec40", "07c3b6977b327efcc8df6d9f0212ae9c9551d2f98298030db23a501d44c28ad81b574545da32318faea7a80b7afc4d3b663bec61983023c32f9db788b65edb57d97225b935f2fbe39dff07ba5ddcfa803f0355d980c2f6fae4895aa7878e56a30605"}, 0x77, 0x1) unshare(0x48020200) 18:02:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) 18:02:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:02:00 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x6c}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:02:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, 0x0, 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:02:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x11, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:02:00 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) [ 1676.824392] 9pnet: p9_fd_create_unix (11463): problem connecting socket: ./file0: -111 18:02:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x6c, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:02:15 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:02:15 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:02:15 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) waitid(0x0, r0, 0x0, 0x8, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) syz_io_uring_setup(0x5dc, &(0x7f00000000c0)={0x0, 0xaf9e, 0x1, 0x3, 0x30d, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff6000/0x6000)=nil, &(0x7f0000000000), &(0x7f0000000140)) 18:02:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:02:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, 0x0, 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:02:15 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:02:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) 18:02:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x59) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) [ 1691.600609] 9pnet: p9_fd_create_unix (11492): problem connecting socket: ./file0: -111 18:02:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x116, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:02:15 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x2}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:02:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) 18:02:15 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:02:15 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='\x00', r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000280)='rxrpc\x00', &(0x7f0000000380)=@secondary) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xb, r0, &(0x7f0000001880)='dns_resolver\x00', &(0x7f00000018c0)={'syz', 0x2}, 0x0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db44a5dc824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) 18:02:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) [ 1691.813415] 9pnet: p9_fd_create_unix (11508): problem connecting socket: ./file0: -111 18:02:15 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:02:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x300, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:02:15 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:02:29 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:02:29 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x5c}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:02:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x500, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:02:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) 18:02:29 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000340)={{}, {0x306, @link_local}, 0x2a, {0x2, 0x0, @remote}, 'syz_tun\x00'}) r1 = socket$inet(0x2, 0x1, 0x200) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000600)={'nat\x00', 0x0, 0x4, 0xe7, [0x8, 0x6, 0x80000000, 0x0, 0xfc6c], 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/231}, &(0x7f00000002c0)=0x78) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x222142, 0x20, 0x4}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) pread64(r2, &(0x7f0000000300)=""/247, 0xf7, 0x10001) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x8, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000500)='bond0\x00', 0x1, 0x10, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x4, 0xd67, 0x3, 0xe1e, 0xfff, 0x9}, {0xfa4, 0x7fff, 0xfb22, 0x80000001, 0x17, 0x2}], ['\x00']}) fallocate(r3, 0x6b, 0xfffffffffffffffe, 0x1000002) pread64(r3, &(0x7f0000000300)=""/247, 0xf7, 0x10001) r5 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1, 0x80) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000940)=ANY=[@ANYBLOB="0026670000000000000010540100000000000000", @ANYRES32=r5, @ANYBLOB="02000000000000002e2f66696c653000"]) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) fcntl$notify(r6, 0x402, 0x1) execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000680)='nat\x00', &(0x7f00000006c0)='syz_tun\x00', &(0x7f0000000700)='nat\x00', &(0x7f0000000740)='{\x00', &(0x7f0000000780)='syz_tun\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='\x00', &(0x7f0000000840)='syz_tun\x00'], &(0x7f0000000900)=[0x0, &(0x7f00000008c0)='\x00'], 0x100) 18:02:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:02:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:02:29 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(0x0, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) [ 1705.712477] 9pnet: p9_fd_create_unix (11535): problem connecting socket: ./file0: -111 18:02:29 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:02:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x600, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:02:29 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x60}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:02:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) 18:02:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) [ 1705.926235] 9pnet: p9_fd_create_unix (11559): problem connecting socket: ./file0: -111 18:02:30 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(0x0, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:02:30 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x63, 0x0) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r3) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x18c, r4, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc4}, 0x40) r5 = pidfd_getfd(r0, r1, 0x0) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c0000000c06010100000000000000000300000105000100070000000900020073797a300000000005781be7490000000900020073797a31000000000900020073797a300000000005000100070000000900020073797a30000000000500010007000000050001000700f3ff"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x24040881) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$unix(r0, &(0x7f00000007c0), &(0x7f0000000340)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) connect$netlink(r3, &(0x7f0000000040)=@proc={0x10, 0x0, 0x0, 0x2}, 0xc) dup2(0xffffffffffffffff, r3) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x0, 0x3, 0x0, 0x8, 0x0, 0x4, 0x8842, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x57d, 0x400}, 0x1000, 0x4, 0x9, 0x7, 0x3, 0x3e, 0x1, 0x0, 0x6, 0x0, 0x2b}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1706.048487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1706.077400] 9pnet: p9_fd_create_unix (11564): problem connecting socket: ./file0: -111 [ 1706.109452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1706.111273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.113905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1706.129820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:43 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x70}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:02:43 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="e6f5d69772ee99ed0000000086dd6096033f00303a00fc020000000000000000000000000000ff1200000000000000dcec93cb08649ad208ed421bc3fa000000000000010200907800000000600009e600"/90], 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) syz_extract_tcp_res(&(0x7f0000005100)={0x41424344}, 0x9, 0x5) write$tun(r0, &(0x7f00000059c0)={@val={0x0, 0x88fb}, @void, @ipv6=@tcp={0x8, 0x6, '^i2', 0x1038, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@fragment={0x4, 0x0, 0x4, 0x1, 0x0, 0x9, 0x66}, @fragment={0x2b, 0x0, 0x8, 0x0, 0x0, 0x5, 0x66}], {{0x4e24, 0x4e21, r1, 0x41424344, 0x1, 0x0, 0xa, 0x40, 0x8, 0x0, 0x800, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x10, 0xf989, "321a119af15f9ceee4988de2"}]}}, {"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"}}}}}, 0x1064) syz_emit_ethernet(0x91, &(0x7f0000005900)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb00173fead35768d5088654533f16c7de6d592a3b6614f97f677b6a4779f51864dafb805221703209b8f5f98fe83b4481d99c49fda56ecc5c72fcbbfd07817d4b2d3c86178e584f2f74c6dbee0bb4e0b8669cbf6a5b204088dc628fd40e6fb0f908000000000000008404113b093f20d0723ca443ec28224cbff7192248b0d57e5f9140cf97"], 0x0) syz_emit_ethernet(0x1d, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000006a80)) syz_emit_ethernet(0x1e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbfbbbbbbbaaaaaaaa8aaa000c040000c004010000004ae69c7c4765c9"], &(0x7f0000000200)={0x0, 0x3, [0xf03, 0xf7b, 0x49, 0x9b8]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000780)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@multicast1, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}, 0x0, 0x200}}]}, 0x13c}}, 0x0) dup3(r0, r3, 0x80000) getpgrp(0x0) r4 = getpgid(r2) process_vm_readv(r4, 0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/175, 0xaf}, {&(0x7f0000001a80)=""/3, 0x3}], 0x2, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) 18:02:43 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(0x0, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:02:43 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:02:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x700, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:02:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file1\x00', 0x121000, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:02:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:02:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 1) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) [ 1719.868187] 9pnet: p9_fd_create_unix (11589): problem connecting socket: ./file0: -111 18:02:43 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0xff}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1719.890343] FAULT_INJECTION: forcing a failure. [ 1719.890343] name failslab, interval 1, probability 0, space 0, times 1 [ 1719.891801] CPU: 0 PID: 11589 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1719.892572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1719.893497] Call Trace: [ 1719.893800] dump_stack+0x107/0x167 [ 1719.894208] should_fail.cold+0x5/0xa [ 1719.894640] ? getname_flags.part.0+0x50/0x4f0 [ 1719.895161] should_failslab+0x5/0x20 [ 1719.895590] kmem_cache_alloc+0x5b/0x310 [ 1719.896047] getname_flags.part.0+0x50/0x4f0 [ 1719.896539] getname_flags+0x9a/0xe0 [ 1719.896962] do_mkdirat+0x8f/0x2b0 [ 1719.897362] ? user_path_create+0xf0/0xf0 [ 1719.897832] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1719.898423] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1719.899006] do_syscall_64+0x33/0x40 [ 1719.899424] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1719.899997] RIP: 0033:0x7fc0b1e4eb19 [ 1719.900413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1719.902472] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1719.903336] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1719.904139] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1719.904943] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1719.905744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1719.906547] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:02:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x900, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:02:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:02:44 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000004f0200000000024f0000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010a00)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010d00)="2200170000000000001700080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012c00190000000000001964000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x96, 0xb800}, {&(0x7f0000010f00)='\"', 0x1, 0xc000}], 0x0, &(0x7f0000000080)={[{}, {@hide}]}) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x1) 18:02:44 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:02:44 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:02:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:02:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:02:44 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x2}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:02:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xa00, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:02:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) pread64(r2, &(0x7f0000000300)=""/247, 0xf7, 0x10001) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80010, r2, 0x1075d000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) pread64(r3, &(0x7f0000000300)=""/247, 0xf7, 0x10001) openat(r3, &(0x7f00000000c0)='./file1\x00', 0x101200, 0x12) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x5, 0x1, 0x7, 0x4, 0x0, 0x7fff, 0x88000, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000600), 0xc}, 0x5080, 0x100000001, 0x2, 0x2, 0x1, 0x0, 0x7b5, 0x0, 0x7, 0x0, 0x3}, r4, 0x1, r0, 0x0) recvmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000b7334d7aebe3a109010004004aaad77185b01cefc82b3139021f2de05a1fa01407fbab3c41f0dbc271687e205ad569fd424cb5cda27d4ce7740b2963412f768c663bc3c2c4f58428c2608a1f86e0d5a879053a525505454f4bedcd2868d9015cafa618abfb8fb22b0d669c6522bd555fd7aac250f392b43a297e99ef3e908bd1a8a798a5cff4cd88aed864ef2398342033276ac4b9e4f5617d7c29f192", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000010000000000000000100000001000000"], 0x80}, 0x1040) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x9, &(0x7f00000004c0)=0x8395, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r6, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:02:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:02:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:02:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xb00, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:02:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 2) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:02:57 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:02:57 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:02:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) [ 1733.451249] 9pnet: p9_fd_create_unix (11636): problem connecting socket: ./file0: -111 18:02:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xf00, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) [ 1733.465330] FAULT_INJECTION: forcing a failure. [ 1733.465330] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.467094] CPU: 0 PID: 11636 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1733.468061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1733.469220] Call Trace: [ 1733.469598] dump_stack+0x107/0x167 [ 1733.470111] should_fail.cold+0x5/0xa [ 1733.470649] ? create_object.isra.0+0x3a/0xa20 [ 1733.471304] should_failslab+0x5/0x20 [ 1733.471836] kmem_cache_alloc+0x5b/0x310 [ 1733.472411] ? ksys_write+0x21a/0x260 [ 1733.472951] create_object.isra.0+0x3a/0xa20 [ 1733.473564] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1733.474282] kmem_cache_alloc+0x159/0x310 [ 1733.474878] getname_flags.part.0+0x50/0x4f0 [ 1733.475497] getname_flags+0x9a/0xe0 [ 1733.476027] do_mkdirat+0x8f/0x2b0 [ 1733.476531] ? user_path_create+0xf0/0xf0 [ 1733.477113] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1733.477847] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.478561] do_syscall_64+0x33/0x40 [ 1733.479095] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1733.479814] RIP: 0033:0x7fc0b1e4eb19 [ 1733.480334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.482923] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1733.483985] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1733.484979] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1733.485968] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.486975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1733.487903] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:02:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x882c3, 0x158) fallocate(r2, 0x0, 0x0, 0x1000002) pread64(r2, &(0x7f0000000300)=""/247, 0xf7, 0x10001) openat(r2, &(0x7f0000000040)='./file1\x00', 0x20000, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:02:57 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x5c}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:02:57 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x208001, 0x20) clock_adjtime(0x0, &(0x7f0000000100)={0x8733, 0x0, 0x8001, 0x0, 0x0, 0x7, 0xe2a, 0x3f, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffb) clock_gettime(0x0, &(0x7f00000003c0)) msgsnd(r0, &(0x7f0000000200)={0x2, "4b91cd68f8f7fc30b3c04bee4a2f972997943ae581e56e1c0b8bc09e686df56104159829864bd1bdf67dba38bbd80c571d194a1e0f23124fddb5035dc4127e45ac3b9d861c39dd5be449dd8fbed4b0814aba7ad240ebd2f8b40e203dff5b4ea60a6edfdc2ea66629b1a4600cf63d6f8d2512eb91af3cfc284431eb15cc7fc2715be9211dfb6fc091ceed48dbfdf025e444a6a66ea348c59ed3"}, 0xa1, 0x800) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001c40), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x44}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x12'}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@remote}]}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000002) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/247, 0xf7, 0x10001) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'vxcan0\x00', 0x0}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000002c0)={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000300)="5facc2ed50ba2fa68ef5095e5ff2fdc27003920e45ae1476e51997998a30ee63e24c12fc209a48f0bfa1589682358008b6defbb9cec9892a848fabf2be1e8eee8bfb655dea17e8470a41c80861b48214a060b56e727021d0753b7eae952899291485a4580c077f13d0c14c520a13ae7b2de0f71b4a13238e3bb183dc7d588684b9d0c2bd309d9fbe130fc2fd5abfcf25f77278973a1d07aeed780189", 0x9c}, {&(0x7f0000000400)="99733a4c2f3e3bb61fe928054dff78face134e993c54fdef02022471c37b0af4ac89662f9898ebb6bf318a7558ee0e956035912db9ad75886c9c9c76d9b239e8d939a36014277ff574ed2b18c9a7e2678ae26532944f1eea65011ecbc591ee3e1e35d39badc3fb460712f4a5b14e70a07b54b26b3b071d47295b9b7547604a5f251ae0998da254ff9b46479c93ab62a782752a42f392", 0x96}, {&(0x7f00000004c0)="11b244ad7d562dfd6ee48b36cd827f83e9f7d3497c93d2ca56f5d77241041e3c8fda0ce48957f9d52872283baf0004979d56758b8e81da104782229525cbd21cdde78c6687f5850b4085fb99039bca0e690335", 0x53}, {&(0x7f0000000580)="b28f33ee16b8e5e0af6978e162f3ba727d34b121d6b8351832e6a87998077c561e5c419550092aa67dafc821463c3b826df4b0869cbcc8f86ac611c1dc96c1bd8c13e28e7f94516459255f43b48f170ec1d1c77d374a0e1ba1f482f140c5d1ceca531b7a673a4ebe82d6a1abe9b118306195ca6495d4a05a0eb12ad1450be6644aea4a02b5bb45fead32a7051700c25b1d3d0e6272ad9c497df03d53b7b3fb9f33ce9d3a3b53e7da805c7ae9d765d4ba090e7d33a16ea9", 0xb7}, {&(0x7f0000000640)="fb1e87554ecd28770c9f2ebc25f7ba60bfff7e5decc230327618e3282d70aaac3198386cd7861969d8ba816eeac377e9b035ef00bb7ce5bd5d597f422f6ebc91be367e0e9c07fe3bea3b3fc9638dc64e9d14f6f4ec26a53d8a994c00cfcd27baaa40eac4a83c871e956690492957e9a82227272d2f167f32e2e5ed5d10aab94d7115745150e9fe9ad5a8a1e7d0ec87a578949d59ee474246e4a54baf31f0226d3421410f4e", 0xa5}, {&(0x7f0000000700)="434014716815ca8e6c847bb02c67673e8d68a9a57505de6cffa6f9e92912ff75e364a0ead28f5d10d59b94c116db10d3517a9a4ea6fbbddebd1d5e060e57bb53ce3b1b202225b5198db32c69ede4786c72fd4e63d3dd4e6d8893b27e483b45ec74b0c8f08c9341c7c3c7e319438deb5d4ba84df2b76bfecc5565b1cdce8c3e85e4e254ea4675990647a7e099b637ac344a714724c2e95fbe314dc89a6363ff5ae79f4c116b67c2ce4302e3fc64ca056c1f75710c4ce211af46", 0xb9}], 0x6, &(0x7f0000000880)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r4}}}, @rthdrdstopts={{0x1040, 0x29, 0x37, {0xff, 0x204, '\x00', [@generic={0x26, 0x1000, "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"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x1, [0x0]}, @padn, @hao={0xc9, 0x10, @loopback}]}}}], 0x1068}, 0x4) 18:02:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:02:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:02:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x1100, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:02:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 3) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:02:57 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:02:57 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0xffffffffffffffff, 0x1000002) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x507000, 0x108) bind(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r0, 0x7ff, 0x0, 0xa48f, 0x4, 0x1}, 0x3) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0)=0x9, 0x4) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x84000, 0x89) mmap(&(0x7f0000125000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xfffff000) 18:02:57 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x60}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1733.690125] 9pnet: p9_fd_create_unix (11658): problem connecting socket: ./file0: -111 18:02:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x1601, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) [ 1733.728019] FAULT_INJECTION: forcing a failure. [ 1733.728019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1733.729689] CPU: 0 PID: 11658 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1733.730548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1733.731581] Call Trace: [ 1733.731924] dump_stack+0x107/0x167 [ 1733.732360] should_fail.cold+0x5/0xa [ 1733.732837] strncpy_from_user+0x34/0x470 [ 1733.733354] getname_flags.part.0+0x95/0x4f0 [ 1733.733896] getname_flags+0x9a/0xe0 [ 1733.734346] do_mkdirat+0x8f/0x2b0 [ 1733.734789] ? user_path_create+0xf0/0xf0 [ 1733.735313] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1733.735953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.736573] do_syscall_64+0x33/0x40 [ 1733.737039] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1733.737665] RIP: 0033:0x7fc0b1e4eb19 [ 1733.738126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.740390] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1733.741291] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1733.742169] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1733.743047] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.743917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1733.744738] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:02:57 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x70}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:02:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:02:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:03:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:03:11 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:03:11 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0xff}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:03:11 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0xffffffffffffffff, 0x1000002) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x507000, 0x108) bind(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r0, 0x7ff, 0x0, 0xa48f, 0x4, 0x1}, 0x3) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0)=0x9, 0x4) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x84000, 0x89) mmap(&(0x7f0000125000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xfffff000) 18:03:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x6c00, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:03:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 4) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:03:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:03:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xffffffff00000000, 0x4, &(0x7f0000000380)=[{&(0x7f0000000140)="0ea17d385c4f97dcc1a056c72cca1b083f9c8a8f18237b42d1cf090ef9e85db0c4e66cd668332bb3c2deb2cc593e1040edbaae683e71cb422487d59b7ebb7af8f38d70bd5d05a2a4361b1632efb6de470115f2a73f4a99f26245fe3b3ae8634ab994753ede179ce36b3e284644291669", 0x70, 0x401}, {&(0x7f00000000c0)="d7706912884234f8151db1f31702f285e3f2e7", 0x13, 0x2}, {&(0x7f00000001c0)="013fecba75807d21fa938611511f16d618b85fae76785b4596ca13116307cfda5888e86976ad3b6758266b739a5d7a9a0eab33ece0a479481367ce2b7b8ca63efda65fb95fcc5b6503a214dc7f8d80b313eae6443474d7c2e33f73778bb747e7b4c26fd8b5af43f48b32a6d86edf4ce9af3a59badae6eb2759a17023851547ac7e0a07a66647ba89d5507258ae9f76adb6997ba6b5ff83b21f4d65324fbd085b96419a37161af2460f3aaf998b89c798c515b68251a36b6248cc4c7bc22ebb5abfed5a65d0f22bdffe4b88", 0xcb, 0x3}, {&(0x7f0000000300)="d60a29aeeb7577cce9c3a29658572c1d02ec3129f2acfca7acacd025091fd6aa79c6230e60bd06f5d38e28d0f3c79035911cd8c09821db382e088a4e2249b1cc1765f195be05", 0x46, 0x7ff}], 0xa0, &(0x7f0000000400)={[{'{^,^/}^)!'}, {'*/$'}, {':'}, {'/-$]\\-:\xa4^'}], [{@hash}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@obj_type={'obj_type', 0x3d, ':'}}, {@audit}, {@smackfsroot={'smackfsroot', 0x3d, '{:-\''}}]}) r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x703000, 0x5) lseek(r3, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) [ 1747.695079] 9pnet: p9_fd_create_unix (11694): problem connecting socket: ./file0: -111 [ 1747.733070] FAULT_INJECTION: forcing a failure. [ 1747.733070] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.734914] CPU: 1 PID: 11694 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1747.735790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1747.736883] Call Trace: [ 1747.737246] dump_stack+0x107/0x167 [ 1747.737733] should_fail.cold+0x5/0xa [ 1747.738242] ? __d_alloc+0x2a/0x990 [ 1747.738725] should_failslab+0x5/0x20 [ 1747.739239] kmem_cache_alloc+0x5b/0x310 [ 1747.739780] ? __d_lookup+0x3bf/0x760 [ 1747.740287] __d_alloc+0x2a/0x990 [ 1747.740755] d_alloc+0x46/0x1c0 [ 1747.741193] __lookup_hash+0xcc/0x190 [ 1747.741711] filename_create+0x186/0x4a0 [ 1747.742250] ? filename_parentat+0x570/0x570 [ 1747.742829] ? getname_flags.part.0+0x1dd/0x4f0 [ 1747.743459] do_mkdirat+0xa2/0x2b0 [ 1747.743939] ? user_path_create+0xf0/0xf0 [ 1747.744495] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1747.745188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1747.745861] do_syscall_64+0x33/0x40 [ 1747.746354] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1747.747041] RIP: 0033:0x7fc0b1e4eb19 [ 1747.747509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1747.749956] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1747.750954] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1747.751902] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1747.752841] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1747.753783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1747.754720] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 [ 1747.756005] loop2: detected capacity change from 0 to 135266304 18:03:24 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:03:24 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:03:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x109000, 0x40) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0xeb23806) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r3}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000140)={{0x0, 0x80, 0x7fff, 0x4, 0xa65c, 0x6, 0x1, 0x81, 0x80, 0x6, 0x40000000, 0x9, 0xfffffffffffffffa, 0x6, 0x20}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) creat(&(0x7f0000000040)='./file1\x00', 0x3d) socket$netlink(0x10, 0x3, 0xe) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r5, 0x0, 0x0, 0x1000002) pread64(r5, &(0x7f0000000300)=""/247, 0xf7, 0x10001) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r6, 0x0, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r7, 0x0, 0x0, 0x1000002) pread64(r7, &(0x7f0000000300)=""/247, 0xf7, 0x10001) lseek(r7, 0x1, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) [ 1760.059032] 9pnet: p9_fd_create_unix (11712): problem connecting socket: ./file0: -111 18:03:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 5) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:03:24 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0xffffffffffffffff, 0x1000002) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x507000, 0x108) bind(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r0, 0x7ff, 0x0, 0xa48f, 0x4, 0x1}, 0x3) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0)=0x9, 0x4) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x84000, 0x89) mmap(&(0x7f0000125000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xfffff000) 18:03:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:03:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:03:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xf000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:03:24 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:03:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) [ 1760.099330] FAULT_INJECTION: forcing a failure. [ 1760.099330] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.101327] CPU: 0 PID: 11712 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1760.102459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1760.103819] Call Trace: [ 1760.104266] dump_stack+0x107/0x167 [ 1760.104868] should_fail.cold+0x5/0xa [ 1760.105498] ? create_object.isra.0+0x3a/0xa20 [ 1760.106238] should_failslab+0x5/0x20 [ 1760.106851] kmem_cache_alloc+0x5b/0x310 [ 1760.107524] create_object.isra.0+0x3a/0xa20 [ 1760.108243] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1760.109049] kmem_cache_alloc+0x159/0x310 [ 1760.109727] __d_alloc+0x2a/0x990 [ 1760.110293] d_alloc+0x46/0x1c0 [ 1760.110836] __lookup_hash+0xcc/0x190 [ 1760.111465] filename_create+0x186/0x4a0 [ 1760.112120] ? filename_parentat+0x570/0x570 [ 1760.112846] ? getname_flags.part.0+0x1dd/0x4f0 [ 1760.113612] do_mkdirat+0xa2/0x2b0 [ 1760.114186] ? user_path_create+0xf0/0xf0 [ 1760.114865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1760.115738] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1760.116570] do_syscall_64+0x33/0x40 [ 1760.117182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1760.118025] RIP: 0033:0x7fc0b1e4eb19 [ 1760.118641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1760.121634] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1760.123102] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1760.124622] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1760.126087] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1760.127421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1760.128578] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:03:24 executing program 2: r0 = syz_io_uring_setup(0x4257, &(0x7f0000000040)={0x0, 0x6ed2, 0x4, 0x0, 0x165}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd, 0x9931, 0x0, 0x2, 0x4, 0x1}, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r3, 0x0, 0x3) syz_io_uring_setup(0x14b9, &(0x7f00000001c0)={0x0, 0xe825, 0x4, 0x0, 0xba, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8000}, 0x0, {0x0, r7}}, 0x54d) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:03:24 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x0) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:03:24 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0xffffffffffffffff, 0x1000002) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x507000, 0x108) bind(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r0, 0x7ff, 0x0, 0xa48f, 0x4, 0x1}, 0x3) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0)=0x9, 0x4) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x100000001) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x84000, 0x89) mmap(&(0x7f0000125000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xfffff000) 18:03:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x80000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:03:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x0, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:03:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:03:24 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:03:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 6) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:03:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xf0ffff, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:03:24 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:03:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f00000002c0), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x5, 0x0, 0x0, 0x80, 0x4, 0x9, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x4}, 0x4484, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x8) clone3(0x0, 0x0) sendfile(r1, r0, &(0x7f00000001c0)=0x9d, 0x10001) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f00000004c0)=0x3, 0x4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x801802}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="020066bd7000fddbf12531000000e804ba02b8ebe43e07243b957bb7acc92e34ed"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x8d86143294dedec3) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) write$P9_RLINK(r4, &(0x7f0000000340)={0x7, 0x47, 0x2}, 0x7) sendmmsg$inet(r5, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r7], 0x38}}], 0x1, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1c, 0xfffffffffffffffc, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pread64(r4, &(0x7f0000000240)=""/26, 0x1a, 0x3) 18:03:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x1000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) [ 1760.345510] 9pnet: p9_fd_create_unix (11753): problem connecting socket: ./file0: -111 18:03:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x0, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) [ 1760.381130] FAULT_INJECTION: forcing a failure. [ 1760.381130] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.382686] CPU: 1 PID: 11753 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1760.383529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1760.384478] Call Trace: [ 1760.384794] dump_stack+0x107/0x167 [ 1760.385306] should_fail.cold+0x5/0xa [ 1760.385868] ? cgroup_mkdir+0x251/0xf50 [ 1760.386407] should_failslab+0x5/0x20 [ 1760.386823] __kmalloc+0x72/0x390 [ 1760.387244] cgroup_mkdir+0x251/0xf50 [ 1760.387660] ? cgroup_destroy_locked+0x710/0x710 [ 1760.388220] kernfs_iop_mkdir+0x14d/0x1e0 [ 1760.388670] vfs_mkdir+0x493/0x750 [ 1760.389083] do_mkdirat+0x150/0x2b0 [ 1760.389475] ? user_path_create+0xf0/0xf0 [ 1760.389959] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 18:03:24 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x5c}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1760.390526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1760.391297] do_syscall_64+0x33/0x40 [ 1760.391711] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1760.392274] RIP: 0033:0x7fc0b1e4eb19 [ 1760.392684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1760.394700] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1760.395551] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1760.396337] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1760.397123] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1760.397909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1760.398693] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:03:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:03:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x2000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:03:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:03:41 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x0, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:03:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) utime(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x5, 0xbb00000000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:03:41 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 7) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:03:41 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x60}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:03:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x3000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:03:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:03:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100}) creat(&(0x7f0000000240)='./file0\x00', 0x16) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5f9b0010150000042abd7000fddbdf251b0000000c00378008004a00", @ANYRES32=r1, @ANYRES16], 0x370}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000700)=0xfffffffffffffe16) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) lseek(r5, 0x3ad3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/163, 0xa3, 0xf7a1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r0) syz_emit_ethernet(0x56, &(0x7f0000000740)={@local, @multicast, @void, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x1b, 0x1, 0x0, 0x0, "950552ca0087924f8e05a3dd363c31e4fecc0fbbf04bbb80e4a2699f94d75600612c89ef5f3d11acd201b6f868946539a61ff19b61cb929ecd0b112c4fdff861"}}}}, 0x0) recvmmsg(r4, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) [ 1777.373987] 9pnet: p9_fd_create_unix (11779): problem connecting socket: ./file0: -111 18:03:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x4000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) [ 1777.403432] FAULT_INJECTION: forcing a failure. [ 1777.403432] name failslab, interval 1, probability 0, space 0, times 0 [ 1777.406158] CPU: 0 PID: 11779 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1777.407685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1777.409502] Call Trace: [ 1777.410084] dump_stack+0x107/0x167 [ 1777.410878] should_fail.cold+0x5/0xa [ 1777.411731] ? create_object.isra.0+0x3a/0xa20 [ 1777.412737] should_failslab+0x5/0x20 [ 1777.413557] kmem_cache_alloc+0x5b/0x310 [ 1777.414451] create_object.isra.0+0x3a/0xa20 [ 1777.415416] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1777.416526] __kmalloc+0x16e/0x390 [ 1777.417316] cgroup_mkdir+0x251/0xf50 [ 1777.418153] ? cgroup_destroy_locked+0x710/0x710 [ 1777.419184] kernfs_iop_mkdir+0x14d/0x1e0 [ 1777.420096] vfs_mkdir+0x493/0x750 [ 1777.420876] do_mkdirat+0x150/0x2b0 [ 1777.421669] ? user_path_create+0xf0/0xf0 [ 1777.422573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1777.423727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1777.424848] do_syscall_64+0x33/0x40 [ 1777.425655] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1777.426760] RIP: 0033:0x7fc0b1e4eb19 [ 1777.427571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1777.431571] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1777.433251] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1777.434824] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1777.436391] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1777.437944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1777.439513] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:03:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:03:56 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x70}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:03:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x5000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:03:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:03:56 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:03:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 8) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:03:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) pread64(r3, &(0x7f0000000300)=""/247, 0xf7, 0x10001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:03:56 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, r0) pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10031, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x0, 0xfffffffa, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0xc000) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/53) shmctl$SHM_UNLOCK(r1, 0xc) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) [ 1792.803493] 9pnet: p9_fd_create_unix (11815): problem connecting socket: ./file0: -111 [ 1792.852355] FAULT_INJECTION: forcing a failure. [ 1792.852355] name failslab, interval 1, probability 0, space 0, times 0 18:03:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1792.855213] CPU: 0 PID: 11815 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1792.857029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1792.858806] Call Trace: [ 1792.859373] dump_stack+0x107/0x167 [ 1792.860174] should_fail.cold+0x5/0xa [ 1792.860985] ? create_object.isra.0+0x3a/0xa20 [ 1792.861945] should_failslab+0x5/0x20 [ 1792.862742] kmem_cache_alloc+0x5b/0x310 [ 1792.863618] create_object.isra.0+0x3a/0xa20 [ 1792.864554] kmemleak_alloc_percpu+0xa0/0x100 [ 1792.865598] pcpu_alloc+0x4e2/0x1240 [ 1792.866453] ? cset_cgroup_from_root+0x220/0x220 [ 1792.867449] percpu_ref_init+0x31/0x3d0 [ 1792.868301] cgroup_mkdir+0x288/0xf50 [ 1792.869103] ? cgroup_destroy_locked+0x710/0x710 [ 1792.870102] kernfs_iop_mkdir+0x14d/0x1e0 [ 1792.870975] vfs_mkdir+0x493/0x750 [ 1792.871735] do_mkdirat+0x150/0x2b0 [ 1792.872499] ? user_path_create+0xf0/0xf0 [ 1792.873375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1792.874472] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1792.875555] do_syscall_64+0x33/0x40 [ 1792.876352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1792.877422] RIP: 0033:0x7fc0b1e4eb19 [ 1792.878206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1792.882074] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1792.883689] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1792.885182] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1792.886679] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1792.888194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1792.889701] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:03:56 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xff}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:03:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x6000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:04:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:04:11 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x4, 0x9195, 0x80000000, 0x0, 0x9}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0xc) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) write(r2, &(0x7f00000000c0)="f54c10c1cdf98b129e49f86e8c733690aa6ba73cf5928fcc93b7bf2e0ea3217faa99ce09b6f5b99ba95b7697a00e411f3a27be8c189116a0be2d5cf389", 0x3d) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000340)=0x80000000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000240)={"860e84e90a042a37e7b15f60dac89a5b", 0x0, 0x0, {0x96, 0x6}, {0xa97, 0x4}, 0x7fffffff, [0x9, 0xfffffffffffffffb, 0x956, 0xdb, 0x120000000000, 0x19ac, 0x1ff, 0x401, 0x100000001, 0xffffffff, 0x7d5f, 0x3d, 0x3, 0x3, 0x5, 0x3]}) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x0, 0x0) 18:04:11 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:04:11 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:04:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:04:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 9) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:04:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x7000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:04:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_mount_image$nfs4(&(0x7f0000001c80), &(0x7f0000001d80)='./file0\x00', 0x9, 0x1, &(0x7f00000020c0)=[{&(0x7f0000002000)="6bdcd57ff64c4624116e2db7692aa2a8251746bbb18ef5277e73555d3d6df11d2247b1dc7d93f990e3ec02c6ab7104983ecbaf152f56a90404915981e9999a7c8bd3b09a8bab7173581f1f65921f187d704391a4863aee1b5491af5b9293bb74f5393b1483e9e6afe9d154b6cb1b970dc40147b34ee63ebad8a012e30d87c64d17b56791986f50378e74c550b6890694fa57850ee4e258101ef57b6685a82be6f869aeb4165f0d", 0xa7, 0x9}], 0x8, &(0x7f0000002100)={[{'*'}, {'[]-]$'}, {'dont_appraise'}, {'subj_role'}, {'#$'}, {'{@-/%{-{/7-/]\''}, {'smackfsfloor'}, {'*'}], [{@appraise}, {@uid_gt={'uid>', 0xee01}}]}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000002180)={0x1bf, 0x40000, 0x4, 0x1000, 0x480}) r3 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x0, 0xb2) lseek(r3, 0x0, 0x4) unlinkat(r3, &(0x7f0000000040)='./file1\x00', 0x200) sendfile(r0, r1, 0x0, 0x100000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x80000001, 0x10000) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000140)="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") lseek(r4, 0x0, 0x4) getresuid(&(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00)=0x0) stat(&(0x7f0000000100)='.\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r7, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000240)='./file1\x00', 0x1, 0xa, &(0x7f0000000980)=[{&(0x7f0000000280)="537d9a7c8911aa94bd697b96dc9df3666b230f04d7e9bc57", 0x18, 0x7}, {&(0x7f0000000300)="af1765cf2a7c192d0fecc6250cb0a27c1d0ef162ad567fb2babe2d55be7359493aabd663af300214928473f1d8155351c2a57e8a48633f7b4e9e98c1a5d727b7f1f890000eb893585a27cf138b4768bbc02d339647f32b5349b56a6240", 0x5d, 0x7fffffff}, {&(0x7f0000000380)="f202a11f0ce33747fb5bedeab384fb90b5d1276c7ad46cf4ae15c5f3ddc53ea81d04317e21b06b29e75dc9482bb4a853ca53e7920a89bcc707f837ff9c4c689d7599af127a44fa1923197b53d0f2d30527e9c3269ece6852055faebe09556ff4d61bc6c13386799eb5bee1250693d3bccd6e31a8f907028d2ad78ec218f8efcb8f8d07bf44706b338221da71b69d3e764f6434894499e9dd4b1771337db631387a341bd1567af158f613618c40cbd90368f70f9f822853ff731fa82df478416c4c", 0xc1, 0x6}, {&(0x7f0000000480)="6106412e50496b087979f15edd6f2778fa3c5a158407f5a0ce8537ddcba0eae6b3dc199e17dfb9621e05099f1eed99b0feaf83924b445718a633df1aeadf8c5a50cfef471ff2629bcb7e47cd97eea9440a7056eb7c8a6e318b47265f263aa2a39de6fdde00aa87002c390dd772ef95612a40a0f5bf48432d96c8af52ebd27f15801d20591508c647b73e489f61764441602f30307013780211cacf857d9c3c5294cdea713a77b51f5cbb723f7bba0041193125a41c4d0d639577a163af0f278a7aabe9f8ca75", 0xc6, 0x6}, {&(0x7f0000000580)="ef5e43dfc9d11eb096c7983f879f3c940e232416215f3fc7bd2c18fa587bd78ce5fd2618165146283216b26763791afd69a1e115e4613f45df40f245604669b821", 0x41, 0x9}, {&(0x7f0000000600)="ccd27db20d375ad9744bc56c60a87d2488dedf5d257a31ee11ffb34462f37e6e415cd38f2df1cfc42b9d3b2d1cbe75f5f89bd7cb61f10d6fa852e5a48b7bc5aacf2364b05e02bbbf6f03fd95cc15d576c4eeadacdae5bf21cb11c95a8ede8ede0e631b598661dcebfe36fe1cea6ed38b073c6e80df7d19b52c9ab14f50bcced8abcab84a595e558398bd409d4e19e3b56ba42ed339364959e990ea675ac0c7377820d3238e3993efe7e4e79ee37a5159c5a1d7b67d09acec6cd62f83b1aa85443212bbeb3993b5953b", 0xc9, 0xffffffffffffffff}, {&(0x7f0000000700)="9cef8102ad3d0afd612883c5e0699436b20334c11aae5d0684b2e4f93c57d9fceee420990c7221fff7cbb8a3a7793735abcf804d1f8bda2355b3ebdceb105c074321e1e6977bf4c25196dcdd93253355c1581378f7d1abe069f5c7a5ef344a4745c4ca9fcd74f8182a115bd549b2ed3664e78c0544942dbf6eb3ece5bacb0e16d79cdea1", 0x84, 0x7}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="33e3b8b15f0bb2c5a6732df56d98718120622680ca85af34ada07db918e320e2a160f967f94186eb803f97dbc13a4795379126f6432dddc7b0f439956e239c3075fa995d83fb8c2ed16538c072bf794c0d3166ab8285480e283fd83a9a9cf237a066cff57f6c81574ca40bbf8e0a7acafa34d9f52bda7d69b18c8b8db58a86aeb950872bda464ff6f56e361ae14a560ebfa60096685e479ee4099e58a5e65f845bc2fcbc81498a7276a19c72ef7d863650bb9d617b3866357dbcfb9c", 0xbc, 0x401}, {&(0x7f00000008c0)="18e668b83b1d5be2606ebcb18e5084b6a906820b19ec176661faac2743b9cade99f940f6bc148e922d29aa47d36ffcb65e89702d46a48398e19489aa15fc965476ab545ee16d0722bb4bc2e2ae15a7c25ebff62899f29b37ca6b01af1232ebab67c1dc506b1572b2b3baeb43936e69104b272b76fb0442aae49ef7f3394de566472a7394c5c9af5a5cd1", 0x8a, 0x8001}], 0x2001410, &(0x7f0000000b40)={[{@noauto_da_alloc}], [{@subj_role={'subj_role', 0x3d, '['}}, {@dont_appraise}, {@euid_lt={'euid<', r6}}, {@uid_gt={'uid>', r7}}]}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001cc0)=@abs, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001d40)=""/38, 0x26}, {&(0x7f0000001d80)}], 0x2, &(0x7f0000001e00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0x2000) [ 1807.503081] audit: type=1326 audit(1755108251.577:173): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11831 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec9e098b19 code=0x0 syz_mount_image$nfs4(&(0x7f00000007c0), &(0x7f0000000bc0)='./file0\x00', 0x0, 0x2, &(0x7f0000001c40)=[{&(0x7f0000000c00)="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", 0x1000, 0x3f}, {&(0x7f0000001c00)="a651e182dae8647fd9bb386410103e09828a62226398a4f0e854eb757313730371ae3a1eddfa359092c84838cca62c1f45edd77079", 0x35, 0x7}], 0x400, &(0x7f0000001f80)={[{'/],}'}, {'uid>'}, {'uid>'}, {}, {'['}, {'-]'}, {'{@'}, {'){+'}], [{@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '['}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>', r8}}]}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) [ 1807.509601] 9pnet: p9_fd_create_unix (11836): problem connecting socket: ./file0: -111 [ 1807.517613] nfs4: Unknown parameter '*' [ 1807.543475] FAULT_INJECTION: forcing a failure. [ 1807.543475] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.546344] CPU: 1 PID: 11836 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1807.548096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1807.550190] Call Trace: [ 1807.550813] dump_stack+0x107/0x167 [ 1807.551706] should_fail.cold+0x5/0xa [ 1807.552594] ? create_object.isra.0+0x3a/0xa20 [ 1807.553720] should_failslab+0x5/0x20 [ 1807.554676] kmem_cache_alloc+0x5b/0x310 [ 1807.555634] ? mark_held_locks+0x9e/0xe0 [ 1807.556618] create_object.isra.0+0x3a/0xa20 [ 1807.557768] kmemleak_alloc_percpu+0xa0/0x100 [ 1807.558834] pcpu_alloc+0x4e2/0x1240 [ 1807.559792] ? cset_cgroup_from_root+0x220/0x220 [ 1807.561016] percpu_ref_init+0x31/0x3d0 [ 1807.561963] cgroup_mkdir+0x288/0xf50 [ 1807.562887] ? cgroup_destroy_locked+0x710/0x710 [ 1807.564102] kernfs_iop_mkdir+0x14d/0x1e0 [ 1807.565089] vfs_mkdir+0x493/0x750 [ 1807.566001] do_mkdirat+0x150/0x2b0 [ 1807.566907] ? user_path_create+0xf0/0xf0 [ 1807.567919] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1807.569058] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1807.570392] do_syscall_64+0x33/0x40 [ 1807.571260] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1807.572437] RIP: 0033:0x7fc0b1e4eb19 [ 1807.573244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1807.577539] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1807.579200] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1807.580984] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1807.582580] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1807.584218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1807.585983] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:04:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x8000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:04:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:04:11 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x802, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:04:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:04:11 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:04:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x10d142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:04:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r2) [ 1808.303189] audit: type=1326 audit(1755108252.377:174): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11831 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec9e098b19 code=0x0 18:04:27 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 18:04:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x10d142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:04:27 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:04:27 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x803, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:04:27 executing program 2: r0 = semget$private(0x0, 0x3, 0x40) semop(r0, &(0x7f0000000040)=[{0x3, 0xffff, 0x1000}, {0x1, 0x81}, {0x2, 0x2, 0x1800}, {0x3, 0x8, 0xb270a1f42760d86a}, {0x0, 0xfffe, 0x1000}, {0x1, 0x7}], 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x0, 0x2) sendfile(r1, r2, 0x0, 0x100000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:04:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x9000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:04:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 10) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:04:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r2) [ 1823.047115] 9pnet: p9_fd_create_unix (11888): problem connecting socket: ./file0: -111 [ 1823.064173] FAULT_INJECTION: forcing a failure. [ 1823.064173] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.065815] CPU: 0 PID: 11888 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1823.066656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.067641] Call Trace: [ 1823.067968] dump_stack+0x107/0x167 [ 1823.068405] should_fail.cold+0x5/0xa [ 1823.068855] ? percpu_ref_init+0xd8/0x3d0 [ 1823.069340] should_failslab+0x5/0x20 [ 1823.069774] kmem_cache_alloc_trace+0x55/0x320 [ 1823.070316] ? cset_cgroup_from_root+0x220/0x220 [ 1823.070872] percpu_ref_init+0xd8/0x3d0 [ 1823.071335] cgroup_mkdir+0x288/0xf50 [ 1823.071785] ? cgroup_destroy_locked+0x710/0x710 [ 1823.072362] kernfs_iop_mkdir+0x14d/0x1e0 [ 1823.072829] vfs_mkdir+0x493/0x750 [ 1823.073249] do_mkdirat+0x150/0x2b0 [ 1823.073661] ? user_path_create+0xf0/0xf0 [ 1823.074156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.074786] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.075381] do_syscall_64+0x33/0x40 [ 1823.075819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1823.076431] RIP: 0033:0x7fc0b1e4eb19 [ 1823.076848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.079014] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1823.079882] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1823.080731] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1823.081538] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1823.082376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1823.083219] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:04:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x10d142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:04:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xa000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:04:27 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:04:27 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:04:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00', 0x0, &(0x7f0000000440)='\xd7,+[-&@\x00'], &(0x7f0000000440), 0x1000) ftruncate(0xffffffffffffffff, 0x1000003) preadv(r1, &(0x7f0000000400), 0x0, 0x1, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = fcntl$dupfd(r4, 0x406, r3) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6603e7307b90f38a3b5accd9e5d2fc84ca2466a60387d868b0b143ca0103f957563ff46f897a0300cbcf8495acda0a1f4ad28f0000000001000000aa80d4075ef8325e85858946"], 0x14}}, 0x0) openat(r5, &(0x7f0000000080)='./file0\x00', 0x200, 0x4a) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb2, 0xd34, 0x1, 0x1f, 0x4}) lseek(0xffffffffffffffff, 0x7, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'virt_wifi0\x00', {0x2, 0x0, @multicast1}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x9, 0x2, 0x0, 0x0, 0x6, 0x0, {0x1}}, 0xfffffff7) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) 18:04:27 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:04:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r2) 18:04:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 11) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:04:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xb000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:04:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x10d142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:04:27 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x85c, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1823.316111] 9pnet: p9_fd_create_unix (11912): problem connecting socket: ./file0: -111 [ 1823.329370] FAULT_INJECTION: forcing a failure. [ 1823.329370] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.331292] CPU: 1 PID: 11912 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1823.332389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1823.333695] Call Trace: [ 1823.334111] dump_stack+0x107/0x167 [ 1823.334687] should_fail.cold+0x5/0xa [ 1823.335291] ? create_object.isra.0+0x3a/0xa20 [ 1823.336016] should_failslab+0x5/0x20 [ 1823.336612] kmem_cache_alloc+0x5b/0x310 [ 1823.337254] create_object.isra.0+0x3a/0xa20 [ 1823.337945] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1823.338747] kmem_cache_alloc_trace+0x151/0x320 [ 1823.339487] ? cset_cgroup_from_root+0x220/0x220 [ 1823.340235] percpu_ref_init+0xd8/0x3d0 [ 1823.340864] cgroup_mkdir+0x288/0xf50 [ 1823.341469] ? cgroup_destroy_locked+0x710/0x710 [ 1823.342214] kernfs_iop_mkdir+0x14d/0x1e0 [ 1823.342864] vfs_mkdir+0x493/0x750 [ 1823.343426] do_mkdirat+0x150/0x2b0 [ 1823.344005] ? user_path_create+0xf0/0xf0 [ 1823.344657] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1823.345475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1823.346282] do_syscall_64+0x33/0x40 [ 1823.346866] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1823.347668] RIP: 0033:0x7fc0b1e4eb19 [ 1823.348256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1823.351117] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1823.352317] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1823.353435] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1823.354547] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1823.355652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1823.356809] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:04:27 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 18:04:27 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x860, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:04:41 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x2000, 0x0, 0x0, 0x0) 18:04:41 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:04:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000c, 0x40010, r0, 0x0) syz_io_uring_setup(0x4a90, &(0x7f00000002c0)={0x0, 0xfffffffd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r4, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(r4, 0x0, 0x1) r5 = syz_io_uring_setup(0x21, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x12, 0x0, r6) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r4, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x1, 0x2000, @fd_index=0x3, 0x2b02, &(0x7f0000000240)="a77108a739040c79fdf3ca1ff77445e165ab91bd32e1385a88d5afedd9ad935720e54066ff4c27e960f3edd6e2b9ebc95bf414c8d543346867ccbab02a5cba0171bfbf5603d66b86936670d91f6a6d881b1b3eaf9d50eddda159cedd0a8f64a21b385fedb9e28220a92bdfa98c1f263315e23d152930d495", 0x78, 0xc, 0x0, {0x0, r6}}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x31713}, 0xa50f) sendfile(r0, r1, 0x0, 0x100000001) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r8, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r9 = io_uring_setup(0x5d26, &(0x7f0000000040)={0x0, 0x4a74, 0x2, 0x1, 0x142}) pwrite64(r9, &(0x7f0000000140)="a3c4e625ab0a5e2c5e7f1f2476bde03d7eb9aaf52bc7f6e2568bd0d6b9c96cb9969c790756f6c4b36505d18248079c4a1df3dc20823b000f6bcf306f8c5a05071ce30789c74dcebaeb4336e29d20ddfa8d1c1ea3326c4860b06da7705388faedf62184f2952242361db536709ba6eb886db58096a357a4611d087e62e96c10a60107845f48f60c1601c7da13a0ce0bb7635bf0ca387261ba447bfee49c77f5b42da3197c79abe176e98ba832caf2ccf98ab6a7087d795c", 0xb7, 0x4000ffffffff) 18:04:41 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 12) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:04:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) 18:04:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xf000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:04:41 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1041c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x80000, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000180)={0x400, 0x81, 0x8, 0x80000001, 0x12, "353e81c0ffd52f9026995575ae56d889a8f3a8"}) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000cd04ee15beebc8a0e2bbc9453b75b536c5b3fcaefdce9463868b13c5d32664300e5bfb8e8dc95ad814761da1c01497c402b2f2fc6bde109f9dfad44e86a5d5433dc1d22dd6e1ce068241296ded615547f45a8d6fcd2e625219f6269432e4b65133d9f6a217f8f4d4ed287344338ab6144668d41721b576d76a83ac5e5cebbb62db8e2dbc45c7beda395e6c585bdb16252a0a6d6362a5479f538a8d31a20000000000000000"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000780)=ANY=[@ANYBLOB="95b5f0ff008fd33a7600000000000000180000006d7e46e79ced5c5af7c929a8c76bac09e2413cacb76478a9b505e73e7a9db9b239ae66b78f8eeb5acbede39020ee0f3c71a64227fee653bd214138cdbd51a0f91a9c9a55f2e19fbec32c23b98c9b8547ee1c3d7f6d18fbbd8c326b650d746857db9754d48ee44e1cc2aa39ef78107a1245b61b6230e5f0e1e587399f2ce2be7afb41939cb7aea6a7fdf66039b84e09435c9b5755fbb7d31920d28279d7f8220db8aac1f922882e2bd9d25ef24a77f6f0613435cbab916bdce76c60dfc61d619a420b24d1d85a06bb19ee2b8abcfe32a520ce96ba99", @ANYRES32=r0, @ANYBLOB="04a500006ccf5e00a30878ffff75db00808ebf8b85b5363cdf1595a0bee6cc6ec57b594af05d2bcaace304ab11b2f0de03bff4371a9012ef1c32b4b5c6366f172a140b3c90f6de5877ef5a6a3a26844c4bc8c82413041c010b22156a4c9a107723a5f2df0884ac7b2d8cf48af5dc01fc3d1d08a58cc865e3f2f712e1a4eabdc0986bd04ce4c790d9de030b3ca0239c52c979afa3e6e8c80f01000eba254f7d13aa0b68306d66d92477fe946e898db0c1"]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = openat(r3, &(0x7f0000000400)='./file1\x00', 0x2202, 0x114) faccessat(r1, &(0x7f0000000000)='./file1\x00', 0xe7) read(r2, &(0x7f00000005c0)=""/135, 0x87) accept$unix(r4, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000000}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xfffffffffffffd29, 0x80000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) 18:04:41 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x870, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:04:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x10000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:04:41 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x4305, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1837.263437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:04:41 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0x0, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:04:41 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x8035, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1837.311791] 9pnet: p9_fd_create_unix (11942): problem connecting socket: ./file0: -111 [ 1837.338377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.340261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.342711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1837.356174] FAULT_INJECTION: forcing a failure. [ 1837.356174] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.357940] CPU: 1 PID: 11942 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1837.358942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1837.360206] Call Trace: [ 1837.360613] dump_stack+0x107/0x167 [ 1837.361120] should_fail.cold+0x5/0xa [ 1837.361721] ? create_object.isra.0+0x3a/0xa20 [ 1837.362352] should_failslab+0x5/0x20 [ 1837.362795] kmem_cache_alloc+0x5b/0x310 [ 1837.363263] create_object.isra.0+0x3a/0xa20 [ 1837.363761] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1837.364352] kmem_cache_alloc_trace+0x151/0x320 [ 1837.364894] ? cset_cgroup_from_root+0x220/0x220 [ 1837.365454] percpu_ref_init+0xd8/0x3d0 [ 1837.365923] cgroup_mkdir+0x288/0xf50 [ 1837.366365] ? cgroup_destroy_locked+0x710/0x710 [ 1837.366908] kernfs_iop_mkdir+0x14d/0x1e0 [ 1837.367379] vfs_mkdir+0x493/0x750 [ 1837.367790] do_mkdirat+0x150/0x2b0 [ 1837.368215] ? user_path_create+0xf0/0xf0 [ 1837.368707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1837.369318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1837.369903] do_syscall_64+0x33/0x40 [ 1837.370329] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1837.370914] RIP: 0033:0x7fc0b1e4eb19 [ 1837.371335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1837.373418] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1837.374280] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1837.375091] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1837.375900] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1837.376708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1837.377514] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 [ 1837.387010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 18:04:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa, 0x10010, r1, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x20080) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2004, @fd=r4, 0x3}, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:04:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x11000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:04:58 executing program 6: add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a5480900000000000000dac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) r0 = getegid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5805}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setresgid(0x0, r0, r0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) r2 = signalfd(r1, &(0x7f0000000480)={[0x1]}, 0x8) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="a407c3efc1edfab7037255db44a5dc824001767ee5522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600", 0xfffff, r3) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000003c0)={'fscrypt:', @auto=[0x65, 0x65, 0x39, 0x31, 0x63, 0x30, 0x35, 0x38, 0x62, 0x34, 0x39, 0x32, 0x62, 0x6d, 0x32, 0x34]}, &(0x7f0000000400)={0x0, "8b4ec03ab55bacee36617c0ebc78d43d822d8b747c99317925a5dffdaca2dc90cd8a857ba4102be922614685340b623222e9d119426fe1fd742ebdf35ea88f97", 0x18}, 0x48, r3) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x3, 0x8080) sendmsg$inet6(r1, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x6310, &(0x7f0000000340)={0x0, 0x5c0c, 0x0, 0x0, 0x3a7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180), 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'wg0\x00'}) request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\xf7{]&\x00', 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x1a, 0x0, 0x0) 18:04:58 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x8100, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:04:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0x0, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:04:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x4000, 0x0, 0x0, 0x0) 18:04:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) 18:04:58 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 13) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:04:58 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x8847, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1853.998947] 9pnet: p9_fd_create_unix (11983): problem connecting socket: ./file0: -111 18:04:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x16010000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:04:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x400000, 0x0, 0x0, 0x0) [ 1854.055350] FAULT_INJECTION: forcing a failure. [ 1854.055350] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.058351] CPU: 0 PID: 11983 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1854.059983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1854.061884] Call Trace: [ 1854.062490] dump_stack+0x107/0x167 [ 1854.063326] should_fail.cold+0x5/0xa [ 1854.064199] ? create_object.isra.0+0x3a/0xa20 [ 1854.065246] should_failslab+0x5/0x20 [ 1854.066119] kmem_cache_alloc+0x5b/0x310 [ 1854.067052] ? mark_held_locks+0x9e/0xe0 [ 1854.067989] create_object.isra.0+0x3a/0xa20 [ 1854.069028] kmemleak_alloc_percpu+0xa0/0x100 [ 1854.070055] pcpu_alloc+0x4e2/0x1240 [ 1854.070937] cgroup_rstat_init+0x14f/0x1f0 [ 1854.071918] cgroup_mkdir+0x706/0xf50 [ 1854.072816] ? cgroup_destroy_locked+0x710/0x710 [ 1854.073907] kernfs_iop_mkdir+0x14d/0x1e0 [ 1854.074878] vfs_mkdir+0x493/0x750 [ 1854.075709] do_mkdirat+0x150/0x2b0 [ 1854.076559] ? user_path_create+0xf0/0xf0 [ 1854.077518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1854.078733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1854.079929] do_syscall_64+0x33/0x40 [ 1854.080803] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1854.081983] RIP: 0033:0x7fc0b1e4eb19 [ 1854.082832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1854.087075] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1854.088830] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1854.090454] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1854.092083] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1854.093727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1854.095354] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:04:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0x0, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:04:58 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x8848, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:04:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) 18:04:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x800000, 0x0, 0x0, 0x0) 18:04:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0x0, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:04:58 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 14) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:04:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) [ 1854.319696] 9pnet: p9_fd_create_unix (12012): problem connecting socket: ./file0: -111 18:04:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x4000, 0x181) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) sendfile(r0, r3, 0x0, 0x345) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r4, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r5, 0x0, 0x0, 0x1000002) pread64(r5, &(0x7f0000000300)=""/247, 0xf7, 0x10001) openat(r5, &(0x7f0000000080)='./file1\x00', 0xe41301, 0x20) read(r4, &(0x7f0000000140)=""/149, 0x95) close(r1) [ 1854.340417] FAULT_INJECTION: forcing a failure. [ 1854.340417] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.341921] CPU: 1 PID: 12012 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1854.342701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1854.343646] Call Trace: [ 1854.343951] dump_stack+0x107/0x167 [ 1854.344385] should_fail.cold+0x5/0xa [ 1854.344821] should_failslab+0x5/0x20 [ 1854.345250] __kmalloc_track_caller+0x79/0x370 [ 1854.345762] ? kstrdup_const+0x53/0x80 [ 1854.346202] ? find_held_lock+0x2c/0x110 [ 1854.346668] kstrdup+0x36/0x70 [ 1854.347031] kstrdup_const+0x53/0x80 [ 1854.347453] __kernfs_new_node+0x9d/0x860 [ 1854.347921] ? mark_held_locks+0x9e/0xe0 [ 1854.348390] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1854.348929] ? cpumask_next+0x1f/0x30 [ 1854.349363] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1854.349892] ? pcpu_alloc+0x12a/0x1240 [ 1854.350341] kernfs_new_node+0x18d/0x250 [ 1854.350802] kernfs_create_dir_ns+0x49/0x160 [ 1854.351299] cgroup_mkdir+0x315/0xf50 [ 1854.351735] ? cgroup_destroy_locked+0x710/0x710 [ 1854.352270] kernfs_iop_mkdir+0x14d/0x1e0 [ 1854.352747] vfs_mkdir+0x493/0x750 [ 1854.353149] do_mkdirat+0x150/0x2b0 [ 1854.353561] ? user_path_create+0xf0/0xf0 [ 1854.354034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1854.354626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1854.355215] do_syscall_64+0x33/0x40 [ 1854.355635] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1854.356213] RIP: 0033:0x7fc0b1e4eb19 [ 1854.356641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1854.358725] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1854.359763] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1854.360771] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1854.361768] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1854.362785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1854.363683] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:04:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x6c000000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:05:13 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:05:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 15) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:05:13 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x1000000, 0x0, 0x0, 0x0) 18:05:13 executing program 2: pread64(0xffffffffffffffff, &(0x7f0000000300)=""/247, 0xf7, 0x10001) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfd}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000005}, 0x800) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/253, 0xfd}, {&(0x7f0000000040)=""/110, 0x6e}, {&(0x7f0000000300)=""/170, 0xaa}, {&(0x7f00000003c0)=""/174, 0xae}], 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0x8000000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r5, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(r5, 0x0, 0x1) r6 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x12, 0x0, r7) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r5, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x1, 0x2000, @fd_index=0x3, 0x2b02, &(0x7f0000000240)="a77108a739040c79fdf3ca1ff77445e165ab91bd32e1385a88d5afedd9ad935720e54066ff4c27e960f3edd6e2b9ebc95bf414c8d543346867ccbab02a5cba0171bfbf5603d66b86936670d91f6a6d881b1b3eaf9d50eddda159cedd0a8f64a21b385fedb9e28220a92bdfa98c1f263315e23d152930d495", 0x78, 0xc, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(r3, 0x0, &(0x7f0000000580)=@IORING_OP_STATX={0x15, 0x4, 0x0, r4, &(0x7f0000000480), &(0x7f0000000280)='\x00', 0x24, 0x0, 0x0, {0x0, r7}}, 0x10000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:05:13 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0x0, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:05:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x9effffff, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:05:13 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:05:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) (fail_nth: 1) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) [ 1869.122318] FAULT_INJECTION: forcing a failure. [ 1869.122318] name failslab, interval 1, probability 0, space 0, times 0 [ 1869.124502] CPU: 0 PID: 12038 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1869.125533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1869.126726] Call Trace: [ 1869.127112] dump_stack+0x107/0x167 [ 1869.127643] should_fail.cold+0x5/0xa [ 1869.128190] ? alloc_pipe_info+0x10a/0x590 [ 1869.128807] should_failslab+0x5/0x20 [ 1869.129363] kmem_cache_alloc_trace+0x55/0x320 [ 1869.130021] alloc_pipe_info+0x10a/0x590 [ 1869.130609] splice_direct_to_actor+0x774/0x980 [ 1869.131279] ? _cond_resched+0x10/0x30 [ 1869.131835] ? inode_security+0x107/0x140 [ 1869.132425] ? pipe_to_sendpage+0x380/0x380 [ 1869.133051] ? avc_policy_seqno+0x9/0x70 [ 1869.133625] ? selinux_file_permission+0x92/0x520 [ 1869.134315] ? do_splice_to+0x160/0x160 [ 1869.134880] ? security_file_permission+0xb1/0xe0 [ 1869.135582] do_splice_direct+0x1c4/0x290 [ 1869.136177] ? splice_direct_to_actor+0x980/0x980 [ 1869.136877] ? avc_policy_seqno+0x9/0x70 [ 1869.137468] ? security_file_permission+0xb1/0xe0 [ 1869.138164] vfs_copy_file_range+0x4f8/0x13c0 [ 1869.138814] ? generic_file_rw_checks+0x240/0x240 [ 1869.139523] __do_sys_copy_file_range+0x193/0x420 [ 1869.140223] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1869.140909] ? ksys_write+0x1a9/0x260 [ 1869.141452] ? __ia32_sys_read+0xb0/0xb0 [ 1869.142040] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1869.142796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1869.143541] do_syscall_64+0x33/0x40 [ 1869.144075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1869.144814] RIP: 0033:0x7fdf43728b19 [ 1869.145339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1869.147941] RSP: 002b:00007fdf40c9e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1869.149068] RAX: ffffffffffffffda RBX: 00007fdf4383bf60 RCX: 00007fdf43728b19 [ 1869.150079] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 1869.151085] RBP: 00007fdf40c9e1d0 R08: 000000000200f5ef R09: 0000000000000000 [ 1869.152095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1869.153133] R13: 00007ffd09cd0e3f R14: 00007fdf40c9e300 R15: 0000000000022000 18:05:13 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x8906, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1869.158696] 9pnet: p9_fd_create_unix (12037): problem connecting socket: ./file0: -111 18:05:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xf0ffffff, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:05:13 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0x0, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) [ 1869.205376] FAULT_INJECTION: forcing a failure. [ 1869.205376] name failslab, interval 1, probability 0, space 0, times 0 [ 1869.208457] CPU: 1 PID: 12037 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1869.210231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1869.212357] Call Trace: [ 1869.213065] dump_stack+0x107/0x167 [ 1869.214007] should_fail.cold+0x5/0xa [ 1869.214982] ? create_object.isra.0+0x3a/0xa20 [ 1869.216153] should_failslab+0x5/0x20 [ 1869.217057] kmem_cache_alloc+0x5b/0x310 [ 1869.218060] create_object.isra.0+0x3a/0xa20 [ 1869.219009] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1869.220110] __kmalloc_track_caller+0x177/0x370 [ 1869.221119] ? kstrdup_const+0x53/0x80 [ 1869.221958] ? find_held_lock+0x2c/0x110 [ 1869.222839] kstrdup+0x36/0x70 [ 1869.223539] kstrdup_const+0x53/0x80 [ 1869.224343] __kernfs_new_node+0x9d/0x860 [ 1869.225252] ? mark_held_locks+0x9e/0xe0 [ 1869.226130] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1869.227157] ? cpumask_next+0x1f/0x30 [ 1869.227994] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1869.229026] ? pcpu_alloc+0x12a/0x1240 [ 1869.229882] kernfs_new_node+0x18d/0x250 [ 1869.230772] kernfs_create_dir_ns+0x49/0x160 [ 1869.231735] cgroup_mkdir+0x315/0xf50 [ 1869.232580] ? cgroup_destroy_locked+0x710/0x710 [ 1869.233610] kernfs_iop_mkdir+0x14d/0x1e0 [ 1869.234511] vfs_mkdir+0x493/0x750 [ 1869.235281] do_mkdirat+0x150/0x2b0 [ 1869.236082] ? user_path_create+0xf0/0xf0 [ 1869.237005] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1869.238156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1869.239277] do_syscall_64+0x33/0x40 [ 1869.240083] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1869.241206] RIP: 0033:0x7fc0b1e4eb19 [ 1869.242013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1869.246003] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1869.247651] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1869.249220] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1869.250768] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1869.252322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1869.253881] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:05:13 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:05:13 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x20000000, 0x0, 0x0, 0x0) 18:05:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) (fail_nth: 2) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) [ 1869.328179] FAULT_INJECTION: forcing a failure. [ 1869.328179] name failslab, interval 1, probability 0, space 0, times 0 [ 1869.329925] CPU: 0 PID: 12052 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1869.330895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1869.331943] Call Trace: [ 1869.332322] dump_stack+0x107/0x167 [ 1869.332770] should_fail.cold+0x5/0xa [ 1869.333225] ? create_object.isra.0+0x3a/0xa20 [ 1869.333749] should_failslab+0x5/0x20 [ 1869.334176] kmem_cache_alloc+0x5b/0x310 [ 1869.334645] create_object.isra.0+0x3a/0xa20 [ 1869.335139] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1869.335704] kmem_cache_alloc_trace+0x151/0x320 [ 1869.336231] alloc_pipe_info+0x10a/0x590 [ 1869.336707] splice_direct_to_actor+0x774/0x980 [ 1869.337251] ? _cond_resched+0x10/0x30 [ 1869.337802] ? inode_security+0x107/0x140 [ 1869.338270] ? pipe_to_sendpage+0x380/0x380 [ 1869.338881] ? avc_policy_seqno+0x9/0x70 [ 1869.339340] ? selinux_file_permission+0x92/0x520 [ 1869.340020] ? do_splice_to+0x160/0x160 [ 1869.340585] ? security_file_permission+0xb1/0xe0 [ 1869.341267] do_splice_direct+0x1c4/0x290 [ 1869.341853] ? splice_direct_to_actor+0x980/0x980 [ 1869.342538] ? avc_policy_seqno+0x9/0x70 [ 1869.343114] ? security_file_permission+0xb1/0xe0 [ 1869.343800] vfs_copy_file_range+0x4f8/0x13c0 [ 1869.344433] ? generic_file_rw_checks+0x240/0x240 [ 1869.345126] __do_sys_copy_file_range+0x193/0x420 [ 1869.345800] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1869.346457] ? ksys_write+0x1a9/0x260 [ 1869.346922] ? __ia32_sys_read+0xb0/0xb0 [ 1869.347497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1869.348100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1869.348703] do_syscall_64+0x33/0x40 [ 1869.349128] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1869.349713] RIP: 0033:0x7fdf43728b19 [ 1869.350140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1869.352226] RSP: 002b:00007fdf40c9e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1869.353110] RAX: ffffffffffffffda RBX: 00007fdf4383bf60 RCX: 00007fdf43728b19 [ 1869.353925] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 1869.354729] RBP: 00007fdf40c9e1d0 R08: 000000000200f5ef R09: 0000000000000000 [ 1869.355539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1869.356352] R13: 00007ffd09cd0e3f R14: 00007fdf40c9e300 R15: 0000000000022000 18:05:13 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:05:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 16) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) [ 1869.476780] 9pnet: p9_fd_create_unix (12063): problem connecting socket: ./file0: -111 [ 1869.515433] FAULT_INJECTION: forcing a failure. [ 1869.515433] name failslab, interval 1, probability 0, space 0, times 0 [ 1869.516959] CPU: 0 PID: 12063 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1869.517915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1869.518905] Call Trace: [ 1869.519275] dump_stack+0x107/0x167 [ 1869.519701] should_fail.cold+0x5/0xa [ 1869.520138] ? __kernfs_new_node+0xd4/0x860 [ 1869.520655] should_failslab+0x5/0x20 [ 1869.521148] kmem_cache_alloc+0x5b/0x310 [ 1869.521719] __kernfs_new_node+0xd4/0x860 [ 1869.522306] ? mark_held_locks+0x9e/0xe0 [ 1869.522883] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1869.523541] ? cpumask_next+0x1f/0x30 [ 1869.524083] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1869.524741] ? pcpu_alloc+0x12a/0x1240 [ 1869.525298] kernfs_new_node+0x18d/0x250 [ 1869.525868] kernfs_create_dir_ns+0x49/0x160 [ 1869.526491] cgroup_mkdir+0x315/0xf50 [ 1869.527032] ? cgroup_destroy_locked+0x710/0x710 [ 1869.527698] kernfs_iop_mkdir+0x14d/0x1e0 [ 1869.528285] vfs_mkdir+0x493/0x750 [ 1869.528796] do_mkdirat+0x150/0x2b0 [ 1869.529304] ? user_path_create+0xf0/0xf0 [ 1869.529894] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1869.530624] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1869.531344] do_syscall_64+0x33/0x40 [ 1869.531868] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1869.532600] RIP: 0033:0x7fc0b1e4eb19 [ 1869.533121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1869.535685] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1869.536743] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1869.537733] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1869.538733] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1869.539727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1869.540730] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:05:29 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x4, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:05:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:05:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 17) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:05:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) (fail_nth: 3) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:05:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xfffff000, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:05:29 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x2000, 0x0, 0x0) 18:05:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x10d140, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) sendfile(r0, r1, 0x0, 0x100000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:05:29 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) [ 1885.164394] 9pnet: p9_fd_create_unix (12085): problem connecting socket: ./file0: -111 18:05:29 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) [ 1885.184170] FAULT_INJECTION: forcing a failure. [ 1885.184170] name failslab, interval 1, probability 0, space 0, times 0 [ 1885.185594] CPU: 1 PID: 12078 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1885.186380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1885.187328] Call Trace: [ 1885.187642] dump_stack+0x107/0x167 [ 1885.188064] should_fail.cold+0x5/0xa [ 1885.188514] ? alloc_pipe_info+0x1e5/0x590 [ 1885.189008] should_failslab+0x5/0x20 [ 1885.189446] __kmalloc+0x72/0x390 [ 1885.189849] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1885.190436] alloc_pipe_info+0x1e5/0x590 [ 1885.190914] splice_direct_to_actor+0x774/0x980 [ 1885.191448] ? _cond_resched+0x10/0x30 [ 1885.191898] ? inode_security+0x107/0x140 [ 1885.192368] ? pipe_to_sendpage+0x380/0x380 [ 1885.192873] ? avc_policy_seqno+0x9/0x70 [ 1885.193335] ? selinux_file_permission+0x92/0x520 [ 1885.193892] ? do_splice_to+0x160/0x160 [ 1885.194349] ? security_file_permission+0xb1/0xe0 [ 1885.194912] do_splice_direct+0x1c4/0x290 [ 1885.195389] ? splice_direct_to_actor+0x980/0x980 [ 1885.195937] ? avc_policy_seqno+0x9/0x70 [ 1885.196406] ? security_file_permission+0xb1/0xe0 [ 1885.197003] vfs_copy_file_range+0x4f8/0x13c0 [ 1885.197519] ? generic_file_rw_checks+0x240/0x240 [ 1885.198082] __do_sys_copy_file_range+0x193/0x420 [ 1885.198635] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1885.199173] ? ksys_write+0x1a9/0x260 [ 1885.199608] ? __ia32_sys_read+0xb0/0xb0 [ 1885.200079] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1885.200685] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1885.201286] do_syscall_64+0x33/0x40 [ 1885.201715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1885.202301] RIP: 0033:0x7fdf43728b19 [ 1885.202725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1885.204830] RSP: 002b:00007fdf40c9e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1885.205702] RAX: ffffffffffffffda RBX: 00007fdf4383bf60 RCX: 00007fdf43728b19 [ 1885.206516] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 1885.207335] RBP: 00007fdf40c9e1d0 R08: 000000000200f5ef R09: 0000000000000000 [ 1885.208159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1885.208982] R13: 00007ffd09cd0e3f R14: 00007fdf40c9e300 R15: 0000000000022000 [ 1885.210052] FAULT_INJECTION: forcing a failure. [ 1885.210052] name failslab, interval 1, probability 0, space 0, times 0 [ 1885.212750] CPU: 0 PID: 12085 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1885.214238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1885.216017] Call Trace: [ 1885.216596] dump_stack+0x107/0x167 [ 1885.217397] should_fail.cold+0x5/0xa [ 1885.218223] ? create_object.isra.0+0x3a/0xa20 [ 1885.219190] should_failslab+0x5/0x20 [ 1885.220007] kmem_cache_alloc+0x5b/0x310 [ 1885.220887] create_object.isra.0+0x3a/0xa20 [ 1885.221827] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1885.222917] kmem_cache_alloc+0x159/0x310 [ 1885.223815] __kernfs_new_node+0xd4/0x860 [ 1885.224695] ? mark_held_locks+0x9e/0xe0 [ 1885.225569] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1885.226586] ? cpumask_next+0x1f/0x30 [ 1885.227398] ? kmemleak_alloc_percpu+0xaf/0x100 18:05:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xffffff7f, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) [ 1885.228404] ? pcpu_alloc+0x12a/0x1240 [ 1885.229368] kernfs_new_node+0x18d/0x250 [ 1885.230241] kernfs_create_dir_ns+0x49/0x160 [ 1885.231178] cgroup_mkdir+0x315/0xf50 [ 1885.232041] ? cgroup_destroy_locked+0x710/0x710 [ 1885.233053] kernfs_iop_mkdir+0x14d/0x1e0 [ 1885.233931] vfs_mkdir+0x493/0x750 [ 1885.234686] do_mkdirat+0x150/0x2b0 [ 1885.235464] ? user_path_create+0xf0/0xf0 [ 1885.236348] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1885.237468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1885.238582] do_syscall_64+0x33/0x40 [ 1885.238643] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1885.240142] RIP: 0033:0x7fc0b1e4eb19 [ 1885.240949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1885.240959] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1885.240979] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 18:05:29 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x76c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x34}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x1d7, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @ssid={0x0, 0xa, @random="6e80b02c42455599e061"}, @fast_bss_trans={0x37, 0x144, {0x4, 0x9, "da7a48cb8dc9e322df6d8a5927aa8f69", "76395fbb64bcd084384d62a8aab416b7a05778648c9cb40781a276fcfdf090e7", "d97139623d229a0a7e73327db2d57db3a6bc293a2a647d59639e383dbb3cb648", [{0x2, 0x9, "e296f25a3941d09b5c"}, {0x2, 0x23, "980beb17d6206d40210ce4f8b51b55f57d9317e61a23a8b86263d2e5ce5ccf8140bce7"}, {0x2, 0x1e, "84e0728605fdf9918837b7f9060fd8788a1cad1b3b950eb0d9f21a624f12"}, {0x4, 0xa, "480d563961ad911e7561"}, {0x3, 0xa, "6f63adaebff4fdef263b"}, {0x2, 0x26, "a5072e27a30ace3738f75bd7ef20456cab98fe4cfdfa6160f88e4f31e7d6a9399bd396a136a1"}, {0x1, 0x28, "63712ce652be41c835d2f30c4424fa7ecbaa67dbfe0b18b2265a75d18db8978ec8f2312775879f54"}, {0x2, 0x1c, "35e8e258df73e69cd4e268bfd599e2bab0ffb42e20f63b12b522e861"}, {0x2, 0x18, "276991e99be7fe8a76d0e2ab8cb3af31aedf0ebd7905e2cf"}]}}, @random_vendor={0xdd, 0x62, "43aea862c54f426bd2b339b593e7a4de9ab938c374f5483bd08a3c877f7c77cafb46f60a058622314c67eac877aecd67af85c138597bbda05f9e3d7e6d95c0372a17dea426f1a1ff91a0dd28b7990d910d474c3a5a3aa1fb02fe8ad0cdbdc4684795"}, @mesh_chsw={0x76, 0x6, {0x3, 0x40, 0x2, 0x6}}, @dsss={0x3, 0x1, 0x6c}, @erp={0x2a, 0x1, {0x0, 0x1}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f, 0x19}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_PROBE_RESP={0x1e5, 0x91, "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"}, @NL80211_ATTR_IE={0x119, 0x2a, [@fast_bss_trans={0x37, 0xd7, {0x8, 0x5, "627f48037255a31f09ec16425b17adc3", "7aa121b7cff22202e9374108d1e3ede02b8b4eb3aed2330206c2db88228c3334", "56e6ea0aad2ef9af8bf0bb914e3d47e4ec2ed46aad91db20cbecd49d4bad0d31", [{0x1, 0x16, "7d8dedd76bb4969858175b2cef44ff16dcf8fe4207fa"}, {0x4, 0x1f, "6894e08bc9382d403e7fa6670c64ded3de1b6cac9f97648b3c9bcd415f1441"}, {0x4, 0x28, "ebc0b24add2ea8a75ff98d711d50619de6bb0e8b808e307d37050be349fa1282a76f9c40ce05adfd"}, {0x2, 0x7, "05868900948cab"}, {0x1, 0x17, "05b77f8482313e7fa7d51a3c6b931f590ec48aaca61b8f"}]}}, @ht={0x2d, 0x1a, {0xc, 0x2, 0x7, 0x0, {0x3, 0x6, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x3, 0x3}}, @chsw_timing={0x68, 0x4, {0x0, 0x88}}, @rann={0x7e, 0x15, {{0x1, 0x22}, 0x2a, 0x3f, @device_a, 0x1, 0x3}}, @dsss={0x3, 0x1, 0x95}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x18, 0x80, [@link_id={0x65, 0x12, {@random="40cbf2eb9c5b", @device_b, @broadcast}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x18f, 0x7f, [@rann={0x7e, 0x15, {{0x1, 0x9}, 0x7, 0x40, @device_a, 0xd7, 0x5, 0x7}}, @cf={0x4, 0x6, {0xc0, 0x0, 0x40, 0x47d5}}, @cf={0x4, 0x6, {0x1f, 0x6, 0x3ff, 0x40}}, @ht={0x2d, 0x1a, {0x69d56e6f65c997ec, 0x3, 0x6, 0x0, {0xffff, 0x20, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x7ff, 0x81}}, @mic={0x8c, 0x10, {0xbc, "135121c27ed0", @short="622cd3461b9f4da9"}}, @tim={0x5, 0xe5, {0x2, 0x3e, 0x7, "55fbc040cc8adf9951e3e2cc1f06aae49eeeb0187692b626c11e71499046f1310c0101ee8eaaa20a97312651f8dd3f72012d446fe72ade73009ddd8ab2d70d86187677041416ed0ebf96cbd713e4d0b6964aa0e21b94fbb9f0734d6d2646bfcac32567346f6a7772f436550ce5e691788eb1469e0646d23510bde859df6697afa9c28b62eef3bf472090e3e5dd36cce92987b8d23636d9a1524c93f9a2f385f8e8fbcfe30aad2e419f0cf41efa2fd0f49e2d8694b2efc1e283694fc3dd4e43cef91d988f2d84307e8a523bdb012c53f743e882e0ac1dbf64850d87b89c14533daaca"}}, @link_id={0x65, 0x12, {@random="0a93a9efbf6c", @broadcast}}, @challenge={0x10, 0x1, 0x28}, @random={0xf7, 0x36, "28adca0c467a662bd8cea0540e879c244b31bc1822bf43d4045b4f1f0820ad118be9259aa2b562bc2a221c74c935cb1dff298b1eec46"}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x22eb}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88e5}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]]}, 0x76c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x245142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x88000, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) pread64(r4, &(0x7f0000000300)=""/247, 0xf7, 0x10001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r5, 0x0, 0x4) sendmsg$nl_generic(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac030000380002002abd7000fddbdf25120000008f27d9a19da291844e9095302d7d521f6687cb7bff220c0081006f77000000000000f0384408004700ff0300003c033d806b113abc66f60e504686ba0d54766f92d6283b04e4837029a745d1fb26f0dd29a8ece7b84bb798a547f6c8f8661531bd4f5b052f0c0f0755023d0e1c6e08b3f22f1590edbb142550a61837aa8627c30a69ae240dcb767bee33ec39443732fb69139eaec26a88e9e43c320cf1de3695a3d81745630811da06e0118f12883fa7a540cf785c722678b31b1e38a5393f57067ad024892a124da3eef7f2776dc2ce90e9d0bbc43f3050eae2e38573321c96c1a2c12e7c1e8479c3aa950fab5f74e5a5bd38abc71597c98d8075972a808215f7904bbcf5b8157a9422f59eebb845400338dafacd3bd07fae5a3426b58a534875852217cf193935be10a877085f1f02981287d6c1c57886f406abb97f4340384d86ea36c180656d9c82cec25993317d6a992631ce3d31582153c8fb40889ee2ce58bf51e39380f9f5c3a3be5f8d482a438a58727686cbf6005ec4d3262ea334845cd57f0162ef42a0e7a2c373e38f012a2a8a40d180a06e72ec87eeb5bf6c495b58d0353f48f216671bcaeba7e526713981c281f95972e55d4108a1d14de073dc0163031d8bbf030cc187f95cd49435f4c000ee2bc6bbbb04585c5c9330ed2b4676094f75d3180cf1245263eb8d0c6a135624525b524b48fa92dd11e51c1000db0db3e955bcc74c57c7528f6b3f1720eb1e06b17f179e16da23018eef63ddfd526b8786f4233bcb63b3ab2788d3c9a9da8aa9f8a42452bac83691c0ec29736356fdd5849cdce6fc95609fd4526536e4a2000c760c1728fe220731b0b6838fa873e90172bbcbeb79cd7f4107d6565d5b9734c3f60de367c11c6188ef8e58460dcddbf3f10179679140def0ea53e4cf47e9aa50f55d1156060faefa6a78c6716a98dc64185dac5302a71069db873fba0fce30fba8f7402ca14591c9d6fc968002cc4abb930063704e1439982ca87c3bc712e6c7172a351d69a00bb0e3f3ed286ffdeeb76e6cfb0a559b75152bb23b3e7292860a76f02336875a74c593ed7ca268ad9202f88c1773ef4f375ecf2b1f14b2ed28acc2421d7b51239d666a296d8e0dfda3f68560e56b0dd24ab3a20e4d3c4d6b0b6855586124556d5605f24e229d343f074f84c6a06ef3ca6bb33e0b2ce37d4a1cc75c69128df1eb90471e4c5e36230208003000", @ANYRES32=r5, @ANYBLOB="2c008c80190034007252f32e16bb999d380a4da400ae2d1bf4b972796f0000000cb70d7ca46200000000"], 0x3ac}, 0x1, 0x0, 0x0, 0x10}, 0x2400a085) [ 1885.240989] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 18:05:29 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1885.240999] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1885.241009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1885.241019] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:05:29 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:05:29 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x4000, 0x0, 0x0) 18:05:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000002) r2 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xf, 0x8, &(0x7f0000002580)=[{&(0x7f0000000140)="e99138196342ce9dfe99c2d0f206f1b5b7f7add3219c6981b7ed93c3f26440e49d43a64395efaeb1a74b14a6fcccc2bc36d43b2faec4e95e0bb802ffbc41990982975261df485474906aa34c9b34b9c12447761f3e733e37480683ef0d22ee4bc08debf17cb55ac1f046039e22600a1329c7dabf17a9a13ad7ea63954ded0d2061c871b1600232b922ef0b6abbaf8a004ef8ebbffa61dc0a5d665cd8975f3aec9697b8af34497461b897e5e63f", 0xad, 0x3}, {&(0x7f0000000200)="fe37cbb189e1eb56a4035fc8837823af97eaca7db2e0b5d04ecdf3f4f50bcb112ffc974235df509a7300d9c8dcd87ab16f2beae9d637b69b29c5dde649d91126d73d29d9ea42ee2f951157702e928651ddc12c1cab9b51212a68af89868ae384ac5c", 0x62}, {&(0x7f0000000300)="d6119ee3f996bac83f969951ac8bc04a861730a57fc6109359cdfdf57545313e8bfa47edb55f8d6a8ac515b203fcea819cedb6c9e61d60e897e569c7ce156ed381be526f2fdb1f0efddf633a7024e78b0d0b563013588ac207df0d55e46fb1682fa6857a559fa85f6bb829d6fb3595516510cc6336cccc007f0b5366337af48f56523f630b220ddb6e2b11d57a668663b64b80bbe7c5c3fd375ece2320cd5884", 0xa0, 0x401}, {&(0x7f00000003c0)="807ebf236e98963a858de750f65ac24962d5ea2eec4ce3bd65c51e9594e45df368cc930c74c146b5f365e95ae6712df4a40fce8f32d8ab77b624f80ffbbe3fb0b985acc96fed7b47a6c2d5", 0x4b, 0x1}, {&(0x7f0000000440)="3b30493bf98a620264256c72f5a8d1f94e98024d27fd3b76245e13b4bfcb8455c03a90b298ebfebb310e6daa5a06ac6042637ff49bbbfa45acadae3add5069783d4c759263d34ad64702ff80a2b735e302899f0775c4", 0x56, 0x1}, {&(0x7f00000004c0)="787e9750ce33174ccbf1a89ad756ee7971b98658698a6b7d2bebdd59b5844e6d48cac4e2d8faf2d7ea6f9264b697ab1555f39cbe0a80152949177787d92a608019a67318596a74a852020b0ea7d8427957f94f1426bef0b88fc3455b04c824d0dd85586823b8bb86a35ae7565801575cf50285c5f698a7fc6dbeb3bd09558f463afdc633efe40c2081a189fca1091abaa1555ca6b475726ba4ef85df0b72faf60a624366972014f1da0f293af9f7f584d3f55536f1009809ec7f580e30379b6f8cea06d99e33764d00c6174f9e0f83e0a9b55b8d76d5b97775d24895423444e784e096a231931405f32c29d732ff8cfb0a6d14138e6e9ffb125dd0612b86acdc877858da84473fdd86631a6ee0d7cb3d5211d044dc8f7e9e63fc972760e7ea47466eaffb9e9bc8f77772d892b843efd9325e7cc7dec37c8fc4a0397981168042fbbfbb6ad3785397e79b87a662f8395e607de0e43c41f581b3a9321f67319a4a58644e3384d7271f5f143d9afaad289089065c549eb90a209770be1d222502d7684869b83feb28fd4ead21bedf1631fe724bd341997647c26c025d71c2650652196f797d740cf92287381a8eec32ae4577882167d42fb64e7768f67a3153b93fe6a9e083233de4566eb19deea315948ed7587e124e607a2b4166af7235103c7784b883eabf4f81312e9aca57900174f5a10a8c60121f0e5bacb5017135cb07039e60a9455dca67295e14c2f6cd9d7b54ad81c6f0dcd16e3d18fd877881959697c1a8d10bd48f27699c1f2da6950a42f1f3a6b1127b923784f2bd1f8641f3214042ab9bc83d712650d99be83b7901b93777dec24509daee17ce5ce5a4a95fb4b1ddf7ceaf17548dc1735c430a7655aa0b03dfbdb8bef055530b3c6df31f491a705a4de8344f9090f4902ad474b4cd3b58cb0407743955157115c534fae940974ba4e6632cab0d1e99c47810044904df5e4b68849f3c64c488e5cd931e5611028ccbd0f1451f90b65aa95ebe4f7c89b0af416c6ed61bca395214226ea643325bce8c9e8c6ef65a80fbcccb63517b4fcaddcde05f385f32bb2620b379d6c98af77e57e47023802711e96ad6f0fa682b4fdbf8f3979a46f6d353a9b723f32d690d083fb45a6523521f6f03304c258704753f4d1c3548e18e079d3be4b46fdbdaf2c7d28a49e3a58f982ab01c955185cdef2bad57be2936dc6d39adaafc13c225de41afd0b9478c49b7747be8cbc57b759d07c2ad3cab3e96f2f1bd0a84a3f2609df17ab3db5b5487e8cdc6e3cf26360e224dced715c7f8cb1f5595c9a3568b35103617866edaed8cedfc0d9d6c97f3229ef7c884caa06da18fd243f7977836e34f37c2999c08776383249c23678dcc7ea28c9327248ffe2ab14dca687be1747e6018f8ab25aec244c8880036e14ebd7430cd1a5fdf25e43e1dedfd2a3c26b782a2e44d465dd3445955425e3a41660878d06f06794b4553377688526150224e226a3685d877bad72b4c420546a5c608c2f8e460bdc6a8c59e7e60d5b3a28235c47cf9f8d106f59862bf3538063b45714fcf93d15eeb5c03b4eb45dfb28dcb1d8dd08e8b579c1cf49e06cc4d70a0cab13e7a8cc376c09519fb86d07102604c5a110d5eaf93b8103a66ff8e10eab119ae355191982cc656ee8b0bda8ae56a1019574e64f86a9f52381e1bf8f07e051d58456c8815d9cb78b4dba4bb59f24116f7a8d37cef9733e2f5fb63022e86010dcee1ef531780525af8ccb78e600a1687d6e7effcd97b5b731f8e1f41779fdc30afb0d62c1cff1f5e03d7b5de4d3430ca8f55bfd4b37e8c8b3302d8e1650e2f852b96e0ed4cd1e5993709e23b0ff15998770b049b3ff7be6bd50a911fe711b0cdabfed1aca3f4af9385117d616574ece9f964918583ed2bbd0346994b2c38041ed200a149da570966275388dfe8b1dc04d068cd277842826b83149d561bd0adf5f66d69c98123f1e213c8f2af837163cd33be46b9401edbe4e8386a8a00bd28e851cf515a7be4dc999f41043a73c55a8cf3a1fc231be10f6ce686b5bcf71f36f0de0982fcbbb794d62fa657c9a3ec92c74336861c58ce2058c16c4f1fa424b8bd8b94af952a2c427278e7ec200db22af46d6bd26a06f2dca6e1e0997d7230314d95f935bed4ee43543f3ee4b50b1bf56866bfe6edb38bd90deaf0d4c37bb9cc24ec2e4d88597d1ffa2cc2d41bd9fc8665697acea386e9da5dfdbb2d7f5e777f2616199797c26387bd9586575c8763f2254b0c16c957c8a271d74e997e9746c2aa5e2931abe462120ffb20339775685fbba074e4ef8f382b4ebf7d95e71a2a18e47ca0d8d4a1c388d6a3f99defb86cf2fb1860a4eea1f9ddc90d5f0af7f529376b902ca3a77707c7a1826699403ea3405eaccdc9492b82d974fc5e773c41ae0acbdbc335ce82063e1320d2cb956e84ea537eae970e5358d488753572a53943b74305bdc34a9219643953483dc021057113ce99f35e29e23d7dd87776fd0bbeccd829bffc6a96cc48ca32edbb2463dd404ba4e45d2d2873417c725a37d43310384eadd248fbc77e048ee88eac2db6bdcfc3ccc0aa3c1f8d6014f590c403a1db0a544659cde524d944d229b54a8e8974fe560d051670131ed7a64cb5c8cffc6493a1d5223833c87726a5498d2ce7b3c81052ff1efee52a71ee4612d30299a5a4ee8a52816131c175d26257a1b8a5d874c290ef813c17cb602f5de03519840068399efaea0d47e3508c62da8bc16f6ce21230cf21b12694a3c4cae71cb1c57943c1125e4e17a3a135e801c7853d5fee1db3db34a9eaad100572c127bd28e7651c7ae0c1e8771931453be75067e5f5169c11ea024c7703686efd4c72bed33d7e4aedc2e220f36e43057cdcbfdcb2e9c2654abf7a26e3184ca6382f51e8a9b24399cd1e5427e019e5bd4a7022ca24dac0c5d87b8434efa1c9e8d7c6fb37ad50516e7a5b587c55d4696200d8fce2b0d2b6cbcf78c018c3d3d7008026b3c333bcbebbc2944f43c4ea5f567216e5306ad4ebf2cdfa61bc10ecbfa28510951d50a8a07fecfd804ca65863496b1b08e6eedb962b0958042025e81a9bd2cf1e8521171c579bd8aa8718fe7b521dc5e43891a1e7f28e85ab11b3640f85c263b1730958b62e8d705a01cc9689a7b2bfea1ab3272ed8ff6286433ea6dbcc83a87f5d6c58890601307b0c7d8c7198dc16bbc4ade0535818934165d719120f0e48475b5fdb1e4e08a117a6f3ef0b2f0f80b30bfe11e1bea89a90ab6a1ff11d7a793a3619f498cd312682aff4661e8aba59011c7d18372ded4ccdeb363471ba45bfa5956f5d1e7809de39487e82ba2d222a0e38f8cf55c28149f44bdb7fb7a6e0d85072dfbc9082a4f837bd835aa020cbb2136fe79699ff066678ad71ec5ea0d2e5711d049de524407acdaab7d76ac3306d9f414a06667043b9bd2a89c6e6c35d61abcdea90b6a08050b1d10549c15f6efb856813ab8c1baea9dec1f72c1d52f9697aad088e067b9464a7e4447cdc352a0cf0de5bbc20c6818d8e59e7f70777edc592ecb459cb1d6251e4e774ff1cad2fda4a370245cd4c96f1b1b82448eca1f6bc4bd548ae498df7127d4eacba699e71e9d408cbcbbe317fd8c2c8cd8792cff9f69c65d17754a2d006e9a84e0b54da1e42fe789607114ba866cf6d5d046c914ce1172904e335b20eaf3445056879aca296268b8a86fa30620b2ab04ce7f0b87a95e9e176771943856469e8ba1e8534829fb5035ba122db411f1e1bd5cf01d9501c9abd222a30671e5a8e59c656aaa910f5af95f8c562bd9fc5afbc4b81c041892ba54d929c75e0cc9b3613fff229e69c59435ca0a05b8618406875a5dd4a418521bfb824d2664eaffdeca3ab57828f68df99e481f380d375f520b7d0041e6146c0294186fb3c0dc301da35b14b407392f6ab81c84a84d575667109cf8f9aee7d4d606b4e1f9c68254078cab69f9b0966dbf5dd7730a1d812a22330b3bb3f2c02235cde6081fa4ba2dada8f5e562f458fe411508d004f5305574a274e2ad8d8829d9f6bd0200d137b23734cf9ce9d48a707a6c40a583c4d4550140b5e177788f5e9f28666a9d503d17ab11e9f5716ff392ea1e7f35736c2de160fd308ab3bffadbcd5cff7f36e5301c4ce1381f459bb32513918d659581eb4eb46c48d3811ef68b68a1ff3163d6b9bd90d2e3e06afe36c98639e1de75ef629c1e61192b79909bfeccc22183022007f50fdecd045fe15f49890a64ebed16cb528ab5d900af75574d9fc9e826617c04e42a0d88f3ac84ecfe5027447ec6c7fc7812c63fb970e9ed43dc496117fea05252738775290ee08ea02b57316db3b4b12040270f6d4f19572e089fd6b7dab353cba8668ad90f16a38f301b89b81487bd83033c18766ce1c0a22d1c5a9591db2a4e93ebf276bd707b2cdd5a2b09e6ca4052ddc9795e66f9305f2ddef7254e5335fc29ec0c6c8b6e971caf2bd5124db54db94427ea5322710f6d694735f47f907c9c8be5edf5c855a41ac356cd6083f16bad1322b17ed85a59d497b3dfc0b0c67cde8314b2d07e5b3868f4115a5ee46a077c68a59152fbf2a78567ad915372be45b93a9a12f17eb1ba875ef28c33a0b641f9e6bd3bbd11f4e328e55b2d07e26f0c6438171b43ab3084b246ff463e424b785feffeb5a4f7c517a74329410bdcd391afe942b56247dabf8179a64366d0503468e9cdd549cd2742aa9bbda467d29eb49fea7adc779645a750cc50af0eb51202b5d71566ccbf2372a623487b3d78f0b7cb266e50dc7d96113b6a3990f2e2e931916f20d4fc1595455133824c24d0791e57ef7923631efd66ffad0551f132cf8d582f3527c05f4b80ccea8533f4b707d2fb624a1d5d577b6f408262173af9aff5e13ef0d89b73508f8e117068ce31cbb3a2d1d2cfab5362dad430e8695385852b7e1f48f63a48fda9d7815a8bf7bf1181a29e429b02c2ef858193d6d304cf90afa6b67b14c6b1799d87e44e71c328e0d29eeb1edc7158d52a06ba72c0c299ddadc0d080faac52a1cbed543620ba150c090922c3df20933e9eadd124f7c6fb3f6fa010f26e2f02e3c97c439b294596d8453437a6c2353b2c60cba50099917e9de13f45c37b8bfced93471ab477108aba062cb360091341ac11d2dd67c742057578ca916627c1c66ae9fd74cb518fa3454ba518d459e3eca44570b864ffffd981995e7eeee6728c762b7f8f83bd3ca4969b25beba1e26e6f2dab0d8644d487c749ae6278ac08a4f181d8c5cdd07a91613fe89dd2167860bfe7d5cd84c7a4f98821e816c5b3126a483b208b3380da7b6cb81556a2ba581a8d01a58f3667cd9acfcdad5da78a5bd83c25ceed8c9db52a54c2d2b9c9460ed2c558450deb1af05b4848df5c19c9da4cbb2b9b1ba9a33719906ac30d5835168f79b0ac00ebe8505241c8861aeb426db234ab3f64b72886a8540e8aa4a23f3ece0cd7b287ecfdeda0be8d23bf17363e43a2e455626d2088bf08b022946610716cc819fda3660e2c95bf319e62b791500d8695364fc1e739415a725521d46d87fac75ec5393b83221efe7ae2562fe2e271b2f4ee12e5cdcc29e8e1183c95b667cb833c6f7c03e92724ea74c724b1576dd4a59a8fe0953a1c639344fc14478573e20505377c5fddffa9247a55daaa22d8d2b514fb0ef24615ab8a6d9fe0a9fce40240b836f0e052940674413b08a81ec04cd299cf4ee276b33d18ff83d2fe7d5fd38e312df50f004c4f29b3d6c2c752fe43dbbe3a5d1477fe0c168376fd89147e117a696eaaa13fdc906b484bb89dbcd9a6", 0x1000, 0x200}, {&(0x7f00000014c0)="5cf16b449c6e9baa8cc57dd2e87580b24f79f156efab5567e456f66f082f7baee87bd4acde4bcc954250fd8e7a4a269ae4bd2ba410d69b8987ef400671b07d5550c3cb9faa9b83f77073489f3e57ed3854736447b75db5375f23ffebd0dd90a351be5dc353359438beaf3e1c7fe5b607fcd674744d7636a4b7ad1ac474f1d3c54d40fe24428b8796c3c7665c0a5a73ba20ed1376c4a1da90a4dc833178d833fedfcce3204960a2170c1f825ef144adc520548ece1024ab65f7b02e2cb31cdd6f279d26aa8a8c307a7ea75592b6fe7a86c661fb7e0621515466f7fbc58a91ae8f1250a9d840b3bd2bb08bbe25b870862dff993bb09c7ec74c9af5a12a7bbb4849809eed73f5d667a70fa5602a7645330f18b999f6a074aac1797a521b8712c9428409433765c170aeacf241105f6478c48d44959d872b06f7305df9a0c693db905df11660bb9f4f4c3587da2956c3f145dc6baf0d0c5ccf2f37d52a7126e6abfcc3f916a48685698ce9e710fdd8709b1ec611d5930196d7798e211d5fa53fed662a913c84e5ba3e50a15a1429f00ab10463aff88f7550111dcc12884d954cb5e51041c280fdbf683956dd17075496d6ade135fbc502bb1297061f054f2b1a2d8fdd5de94436dca7e7d473b31753d80752374b4f7d175f32ca095f3c8fae1a91bf83dba980f2e926568be256d9c433b629e4ecfbcbb11268d126bf7d043a64fbf3cddf4337959ebe7f828ad5f4bf822f8a8489470c3342a901775d88d6ddb35d3292eab816567303dcee6e895267d73c7c1846d09635a89d2fe80a06b80e6b7afb3b8acea91c98a57066daff397d57fe24db158ed23a61096675f830858d992e4d3748b04c7ba8075cf4b5a813e6a698fb76b44f054fdbed4ee2df56192c541f84999bbdb3dfce2b1aca8baf97aacbd9d12355354c5b8043c53fe26086d96e6001c82f4fa22af848829015b2c7a58284095974897adeb3f7c85c56c9e7e4e43a286b3ef94efb97f3d046443c8434e122296551d137bb6c805e95ef372809269e5593357092099ef6f5916fbb46ea21d5b2ac96526e22cc79cb330f14ceb1f73295f5c80d442b542a75f1a81e6f49e8291c485bae545c4103b530b1b789109df25627ab33d29963bc28a8ccef3fd5583a24948d69bf38a7c769d3ea3413e416664eccc11f104af3d44dbaa72fbf2995997a94773b6a28e3e53f6508057bf4c6a07fc3c98883a8a209190cd622a7cac1a84607d03e50c1266a80d646d02f26afe81c04b9ebb4c7c08a994123f0b57da419acc92f3945dee6c55b78c32c762b855b37c33ab6f0ecaacd784d1a0bb74acbb33c6d783c5cfffa278058ba87d8ad507f47026f190fff483fe1af6c53a2587f03003941d2fbe4d31081f264a4e1c321484cbaa1d6b6f1f9bc22b9aa182832ba2b02058bc4e5e21bbbc2081abd51929f07e6f36f17502e8b06d0a84a16686588a513cbf18d0f003deb3095f6f8498a7677067931a0e4300428d829e4c90a6218f029a276294a32cc2ec587e45c9e5a6617be003e0e5ba85efe534c2ac3f9479a3f4b3bc78dd023b3c4fb0d38ac6a2325896759d8aed008e66268ca3bfcc5fe245025080ad6bcc652a3817694adff5b27f43a31bfe694c4c40259ef5f993807622c0163d450215d64ef73a448dcff21f89f553797d855de84562b3677fda9cd2aa9374c510cf052f51143707e9f98507818eb851dc4b70506561c3500ce6d7f454cf5fc527568ebec9722c106867ff778039c9bf7f4b1c910edda0da2fb4ead9df36ca1f0ee313734bffc041930f19692bcf331542defdd2b9d4bd8bbe162d417a9605b7ce9f503255362267232fa4d9fb01151c44088a6f30e3275d17a2c2baca0dd574b695b50b063bec7610cd231006d835e120832e928c2bf35432b47c03018c45452ac3028212a316360f975f179303413480cb8254d29b5a42ca8f5524c41d1c2082c0b110c9c931a81c50d63f07a77d03bdc6f20827a4b4e66d38258954c88c89b7e1e3c8c2ed64324737d4e6db1f8c382e49b1432b2aa1ad3080594bb7234cc72010138c3c4bb343cf3f16f6da96c01d5d5b5935c0e1d1992256a5af8bf20bbc36e86de6f872d630630f41d676250afe7063c297586d946b1bb03241025cccbd53dd3978e6c659e391827d309d4b6a657e0dadc05ad0c1710d07abc4acf296b6db12ce905abf6065f938eb2535faccf748ce93e430702cf79148b7a50a0ea5223c0255cb775009619b33e4e73f85b7f2e025a540dd31c68df8a3e8d5d03730e23f7eb4ea4eacad9f294bde7c7160c336ba3dbbb2ef2d27c79c95efd968cfb26a1580cf5107dbeac9c76326cca53ba0363ec5c0f3ae5c677e38c272553191deefa850e3c4e470130aa042de970534cc6d7f6267d3ae07b00061eba178eb9edc05053084ed92dc0e3c63d2b2a1d22cc0c7b420ae79b2c8ef73002f115c093b177d7929b0736dd85b1c69280924e33f1dfa257334ae0c8768dfc3e37574969c624ff0963a119e92a2122b1ddfbc4665c64a42a1b57eebaa2dd9be3e5517d402008b34833cfed481e8bb7a921f2d53554473025b6334022e1f6d5cc12d4ff485bfe44dd77d6d566c80855f90b037eed3ce147d48935499182a2926760db41e09a4b6d5f3a8f1409d83599d121d1495034c73c13d517ecf0c286bb5469d5912871891d61a7000f911845ae7416feada8ddc06629fe000443f38f27c9a1de0da7aa066cbe3d0d72f9ac2783b6be2893d7782ff72d6f36fe0d7d455bf2c55e0134a89e73071f48a76c43dcf97b0f3348c2cc35cd087855778fd2ec8bbc8f786ceee5d438865417842e4610bc3d65e2903863ed5447b21e82812beb8549ea16ded6fc8c5dc194bf79b70b9b00798da508422d49099b1e9553c303fe292845986ef832cf65a563df1ba9eedfd18d5353faea42f6de69db8fde0a61b1b121031ab2f5f117b5b60326ba6d85e727c9ea7a374ff743058106ec5caeac7ac4591e1c284bb9111e1a6c18a1ae30bcbab93b69aff786f22c473b3f3d2121e806138e6ba072bca17969fddac3e2f721194a07bc353df8e515069fea08116192593aef669e98fa01808b86b67504da0c42651715d76826d908c7134ae08f618cb2c2431b2b06e69c26e37b1421c9e76fd919da8d740e6813424ec34e3a7ae8bda55878a6c044e96e8ed9fe89d3353b6e62bd295acb27f248c195958efc4ba6299de363b8fcad265d736383006684b1d6f0b3325a6a2a9dd383843fcfa0f4b712b9bb911b5ef5037e9c12e9f7c313a6ca3b555363bb3a05ad116f8dfe0baaa11fe1c2a213e6ac611a887a71126d64bc284431b3514da3d5936fe801e4ee31fa81265e2034e4fe74f74c69221fd687d0cf2ba255e28384af5d3b3a725ad2448ccc9fa00bb8aad0ff3a3b5f1728875cacd891270663a1f4b9ecc7309c3dfca4d9ccee2c1f0605903c3dc28cdc7551d01ab68c653d6d54da7941d60ac0cf48f8a66d73a34158f572b4943842572754b8c4fb5ed3938c6c60ce23b0fbfa6704e44fa3c342ee6bb5e5978675e94fd2df53c09732bb56264e9e054f978dda02cdc6c56337049c3601762d5e07fea20887a97329e05b0cf79075dc1e8be29a810de3c90cc9b611348f13c911dba2cce63be3d1b18dc9efdade2b2bd0871567618695003186cbcdc052a00f3e336686122d52bb5d5c47a5334b4a99b5613a98f393984f41722f4892284a2f335403a87b9bfaccfbfbb303297612477e926afe76e3d986faf8713bc3dbb55315039e198e04c1235d59f3f405a2ecc7dda316eff633e90e5df99442b859920b6fa3ca5657ab828c0096d9a75655fcd441bec9793923fe4adf10aa8265b90deb985b4322617e78b46127af0cf14f7c64e0db7481944875a1cb0eec3e33ff2801488cadd6bd4afc0669edcaff23a9adcbac8c14d457e440e519d12122f4be489f85da1e435007a7d308c84e19749f284f35261b488397e93525eb237738fd7611030106f6bb4af552a226a3438542f8270c609ff0076124a1760a066faf1ec799baaa859e3b97c20462efaf2598e744e9d0d3c9f4835dd37c5841c000a1e072a80c19e53bfe77456f40f5a489b3bdc51eb3b793d2486f530c86b68dcf621f7990e3907c62c28a8aa4c14f4cd4f6fee1636584919d2538a5e00520fc07dab10406505714285c5af012528fade68f5c2e257b57a4ae4588a503b25eb60d8c54c9f421aae1e94fc1f4ce7682658d05ea686b27d2ce9df4a50a4554023268b6c24fb6a040f29c08f1f54d32f3144fe027b815c87829ebd26223c9f5950cd104b4e5ea8e3969892528fff7717f0e8f76cf388a76909bed8b48ae1446ab0aa70fe653bc87777d429d3c5ce494f87eafe398cc99c1fefb6efba0999816e5140ef86bd97e9cf5af71d05a21bcd331602dbd4d2316314784886b025c253c668be6270f14a2f1ce75d27c2cd0fd5cb44db79016bd9033efb36749e1415238f606d819c687d7f955847a0e2b40059a4fa567ad8d4a4a17f8f8dde9588abb2a8d1c0c26970e1f97cc0ba3ca78f3023d4cc53053254bba688af007bcf4a9328481d83f0eda8c627a7fff1f494055a1ff6662e0849e9c48868ba957cd2947eec7e7bd2968bb3e7d6ec6ec5ca2b6c9689e48f6370ba3892d59b62fe9d0f2ff5347c735cda9723327b893ce819654ee2360ce3d6326008827a958b2a2ad2372df071b02744883bbd0e5b9b2fc6c04fd0f3bf6b7fcf68c4b3497fbf9128b13dd28f38037b2ae0c9a14266fd4b9b8f8a60285e1e438b8a636860bb0c90756113f3b8df45455ec06eda9f14f8ad48f13d564ee8b8000854f5e4ac90c17f86a6562f5e87f2b85b50628c0913ae56fb13e33e378db398c1a11ed933799468bdc32ccb70fa1bf5485752704f49c973374ac5cedabdab3b5f36a81def260c08e019ef44c43fd4c6610c5cd57d34dc5ee7f0164ea27280b8bfcd4f83f190e51488f9d4cdc578c36c4fffe2e7fd802ee6be157cd093d13bbb328491ea402006312954796ce889b4fd1e90faada856edf8b43c00452e2f4aec52ad898af7f5d4114093c58a18216dbcab8f0f4a9d28b410264a1f2e9616da8075eb0eee2a3b457a7a2774951126d5e6ebe4642eb748a9802038160101c08d017d96721638c4f5aa71cdcc19b9892b2e8ed9d91c4bf743aee2f5508b0bb9c83cb24249063398c3d161c3d271c10f93290e7d90ce6c2464fb534c74af6ee672f0f1e81a0eabf8da8e00f4bd74ac98dea32f7f4908988e70a17e5fdeea0e970ce7da2a88b584c78250335d1d1985437c1dac4080d72ad68333dbbd29b500091b5dd7dce56014686b40ecfc0549ce02d00245183abf2959e896074d0a2e72bfcf3e35249484578d1e0d7c36c13f8965a20e24a3669b5700ea42e8a884ad31b4dcba2f634ca126475759c80edf288d3ba34bca0b63a132e7f7c8b545fdd5808e5f65f6954387b357be20e2bab8fb9d01e9711c39d2e5da99010f95d6bdfe89908a5691248739ca2a47369f403d4a8d851d5798a0d8fd9f65bd0f1fc0a00216ad6f5d8e975c53b1c7217e812a23410ccbd11cc4ee0f5761deb89a91b1a4d6312c8f5291c330da4e2bb59dbc812ef3d762519de1bb895c659944761d8b54e5d2baec5a2d92d7b9b3a51ee612825397c953dc5ba838f527ca8d74db5160b36c024d437462a2352d67ec5619ea21dc884d02c176ae3a58ee73b2cf5664d03a4cc771aba1b363f16e38bdb2965934187b288eb507958794e3ce2100454832059bed24a10144ccc155c", 0x1000, 0x61dc}, {&(0x7f00000024c0)="dc67c48c9d602a63f59ee4d71ab1df46319198f6542280c70c29a13b34e43ea9f55d97d4117e24e7c466f8b5cdcd8cd1bf5be141315d0ca2a541f33a6884e9da8f78bc22f90a822fb72af955b69d8617005223bc0f36386fda2d55ac823845a1adc9de1f97c65e747b89058b967e75c5707d3dc2982a74922c21656b60d17036b46f5f1f822e7bbe5c5c29220b45463df3453d1b2215b33c633d9a51e7efdd96b3406af23b0f75401db631d6f4191808eade14f3", 0xb4, 0x1c000000000000}], 0x1, &(0x7f0000002640)={[{'\'*^%'}, {'['}, {')--*]'}, {']],!!])&#@'}], [{@smackfsfloor}, {@smackfshat={'smackfshat', 0x3d, '^&-^^\\\\!+'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, '+'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@uid_lt={'uid<', 0xee01}}]}) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x246000, 0x140) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x0, 0x0, 0x1000002) pread64(r4, &(0x7f0000000300)=""/247, 0xf7, 0x10001) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:05:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xffffff9e, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) [ 1885.398010] loop2: detected capacity change from 0 to 58720256 [ 1885.399456] nfs: Unknown parameter ''*^%' 18:05:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 18) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:05:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) (fail_nth: 4) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:05:29 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x2, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1885.467962] FAULT_INJECTION: forcing a failure. [ 1885.467962] name failslab, interval 1, probability 0, space 0, times 0 [ 1885.469681] CPU: 1 PID: 12114 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1885.470613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1885.471572] Call Trace: [ 1885.471882] dump_stack+0x107/0x167 [ 1885.472306] should_fail.cold+0x5/0xa [ 1885.472762] ? create_object.isra.0+0x3a/0xa20 [ 1885.473295] should_failslab+0x5/0x20 [ 1885.473748] kmem_cache_alloc+0x5b/0x310 [ 1885.474220] create_object.isra.0+0x3a/0xa20 [ 1885.474724] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1885.475309] __kmalloc+0x16e/0x390 [ 1885.475721] alloc_pipe_info+0x1e5/0x590 [ 1885.476191] splice_direct_to_actor+0x774/0x980 [ 1885.476730] ? _cond_resched+0x10/0x30 [ 1885.477184] ? inode_security+0x107/0x140 [ 1885.477658] ? pipe_to_sendpage+0x380/0x380 [ 1885.478156] ? avc_policy_seqno+0x9/0x70 [ 1885.478622] ? selinux_file_permission+0x92/0x520 [ 1885.479177] ? do_splice_to+0x160/0x160 [ 1885.479633] ? security_file_permission+0xb1/0xe0 [ 1885.480191] do_splice_direct+0x1c4/0x290 [ 1885.480670] ? splice_direct_to_actor+0x980/0x980 [ 1885.481233] ? avc_policy_seqno+0x9/0x70 [ 1885.481707] ? security_file_permission+0xb1/0xe0 [ 1885.482265] vfs_copy_file_range+0x4f8/0x13c0 [ 1885.482781] ? generic_file_rw_checks+0x240/0x240 [ 1885.483345] __do_sys_copy_file_range+0x193/0x420 [ 1885.483908] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1885.484450] ? ksys_write+0x1a9/0x260 [ 1885.484898] ? __ia32_sys_read+0xb0/0xb0 [ 1885.485369] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1885.485982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1885.486577] do_syscall_64+0x33/0x40 [ 1885.487010] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1885.487599] RIP: 0033:0x7fdf43728b19 [ 1885.488033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1885.490158] RSP: 002b:00007fdf40c9e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1885.491032] RAX: ffffffffffffffda RBX: 00007fdf4383bf60 RCX: 00007fdf43728b19 [ 1885.491857] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 1885.492672] RBP: 00007fdf40c9e1d0 R08: 000000000200f5ef R09: 0000000000000000 [ 1885.493495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1885.494315] R13: 00007ffd09cd0e3f R14: 00007fdf40c9e300 R15: 0000000000022000 [ 1885.508501] 9pnet: p9_fd_create_unix (12117): problem connecting socket: ./file0: -111 [ 1885.532269] FAULT_INJECTION: forcing a failure. [ 1885.532269] name failslab, interval 1, probability 0, space 0, times 0 [ 1885.534010] CPU: 1 PID: 12117 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1885.534811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1885.535764] Call Trace: [ 1885.536075] dump_stack+0x107/0x167 [ 1885.536496] should_fail.cold+0x5/0xa [ 1885.536950] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1885.537614] should_failslab+0x5/0x20 [ 1885.538050] kmem_cache_alloc+0x5b/0x310 [ 1885.538521] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1885.539168] radix_tree_extend+0x231/0x490 [ 1885.539660] idr_get_free+0x623/0x8f0 [ 1885.540107] idr_alloc_u32+0x170/0x2d0 [ 1885.540558] ? __fprop_inc_percpu_max+0x130/0x130 [ 1885.541123] ? lock_acquire+0x197/0x470 [ 1885.541582] ? __kernfs_new_node+0xff/0x860 [ 1885.542083] idr_alloc_cyclic+0x102/0x230 [ 1885.542558] ? idr_alloc+0x130/0x130 [ 1885.542983] ? rwlock_bug.part.0+0x90/0x90 [ 1885.543472] __kernfs_new_node+0x117/0x860 [ 1885.543956] ? mark_held_locks+0x9e/0xe0 [ 1885.544421] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1885.544973] ? cpumask_next+0x1f/0x30 [ 1885.545410] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1885.545946] ? pcpu_alloc+0x12a/0x1240 [ 1885.546399] kernfs_new_node+0x18d/0x250 [ 1885.546869] kernfs_create_dir_ns+0x49/0x160 [ 1885.547379] cgroup_mkdir+0x315/0xf50 [ 1885.547821] ? cgroup_destroy_locked+0x710/0x710 [ 1885.548363] kernfs_iop_mkdir+0x14d/0x1e0 [ 1885.548847] vfs_mkdir+0x493/0x750 [ 1885.549256] do_mkdirat+0x150/0x2b0 [ 1885.549677] ? user_path_create+0xf0/0xf0 [ 1885.550153] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1885.550755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1885.551348] do_syscall_64+0x33/0x40 [ 1885.551779] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1885.552369] RIP: 0033:0x7fc0b1e4eb19 [ 1885.552803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1885.554910] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1885.555783] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1885.556599] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1885.557420] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1885.558235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1885.559051] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 [ 1885.583695] loop2: detected capacity change from 0 to 58720256 [ 1885.584756] nfs: Unknown parameter ''*^%' 18:05:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) (fail_nth: 5) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:05:43 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:05:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 19) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:05:43 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x400000, 0x0, 0x0) 18:05:43 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:05:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xfffffff0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:05:43 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x3, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:05:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x402001, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00530f6c5ea70019779d7cc34ca76e"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r4, 0x0, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x585040, 0x0) utimensat(r6, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)={{0x77359400}}, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x7, 0x80, 0x2, 0x4, 0x0, 0x9, 0x4002, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5e16, 0x4, @perf_bp={&(0x7f0000000200), 0x9}, 0x17091, 0xfff, 0x9, 0x0, 0x3, 0x7, 0xff, 0x0, 0x1, 0x0, 0x4}, r5, 0x10, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r7, 0x0, 0x0, 0x1000002) pread64(r7, &(0x7f0000000300)=""/247, 0xf7, 0x10001) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000005c0)={0x1000, 0x7, 0xffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x6d, 0x9, 0xf6, 0x0, 0x0, 0x100, 0x280, 0x1e, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x3080, 0x5, 0x8, 0x6, 0x4, 0xce16, 0x20, 0x0, 0x24000, 0x0, 0x61bd}, r5, 0xa, r7, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fsetxattr$trusted_overlay_opaque(r8, &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x3) [ 1899.958458] FAULT_INJECTION: forcing a failure. [ 1899.958458] name failslab, interval 1, probability 0, space 0, times 0 [ 1899.961827] CPU: 0 PID: 12130 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1899.963244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1899.965005] Call Trace: [ 1899.965567] dump_stack+0x107/0x167 [ 1899.966338] should_fail.cold+0x5/0xa [ 1899.967141] ? __iomap_dio_rw+0x1ee/0x1110 [ 1899.968029] should_failslab+0x5/0x20 [ 1899.968824] kmem_cache_alloc_trace+0x55/0x320 [ 1899.969806] __iomap_dio_rw+0x1ee/0x1110 [ 1899.970663] ? lock_release+0x680/0x680 [ 1899.971505] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1899.972680] ? down_read+0x10f/0x430 [ 1899.973240] 9pnet: p9_fd_create_unix (12143): problem connecting socket: ./file0: -111 [ 1899.973470] ? lock_chain_count+0x20/0x20 [ 1899.976099] ? down_write+0x160/0x160 [ 1899.976889] iomap_dio_rw+0x31/0x90 [ 1899.977674] ext4_file_read_iter+0x2c7/0x4c0 [ 1899.978575] generic_file_splice_read+0x455/0x6d0 [ 1899.979593] ? pipe_to_user+0x170/0x170 [ 1899.980424] ? fsnotify_perm.part.0+0x22d/0x620 [ 1899.981419] ? security_file_permission+0xb1/0xe0 [ 1899.982407] ? pipe_to_user+0x170/0x170 [ 1899.983240] do_splice_to+0x10e/0x160 [ 1899.984023] splice_direct_to_actor+0x2fe/0x980 [ 1899.984996] ? pipe_to_sendpage+0x380/0x380 [ 1899.985885] ? do_splice_to+0x160/0x160 [ 1899.986690] ? security_file_permission+0xb1/0xe0 [ 1899.987678] do_splice_direct+0x1c4/0x290 [ 1899.988531] ? splice_direct_to_actor+0x980/0x980 [ 1899.989520] ? avc_policy_seqno+0x9/0x70 [ 1899.990355] ? security_file_permission+0xb1/0xe0 [ 1899.991346] vfs_copy_file_range+0x4f8/0x13c0 [ 1899.992266] ? generic_file_rw_checks+0x240/0x240 [ 1899.993315] __do_sys_copy_file_range+0x193/0x420 [ 1899.994296] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1899.995282] ? ksys_write+0x1a9/0x260 [ 1899.996057] ? __ia32_sys_read+0xb0/0xb0 [ 1899.996882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1899.997991] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1899.999044] do_syscall_64+0x33/0x40 [ 1899.999826] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1900.000868] RIP: 0033:0x7fdf43728b19 [ 1900.001655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1900.005403] RSP: 002b:00007fdf40c9e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1900.007005] RAX: ffffffffffffffda RBX: 00007fdf4383bf60 RCX: 00007fdf43728b19 [ 1900.008462] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 1900.009938] RBP: 00007fdf40c9e1d0 R08: 000000000200f5ef R09: 0000000000000000 [ 1900.011393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1900.012845] R13: 00007ffd09cd0e3f R14: 00007fdf40c9e300 R15: 0000000000022000 [ 1900.019153] FAULT_INJECTION: forcing a failure. [ 1900.019153] name failslab, interval 1, probability 0, space 0, times 0 [ 1900.022206] CPU: 1 PID: 12143 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1900.023754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1900.025613] Call Trace: [ 1900.026213] dump_stack+0x107/0x167 [ 1900.027032] should_fail.cold+0x5/0xa [ 1900.027886] ? create_object.isra.0+0x3a/0xa20 [ 1900.028918] should_failslab+0x5/0x20 [ 1900.029764] kmem_cache_alloc+0x5b/0x310 [ 1900.030688] create_object.isra.0+0x3a/0xa20 [ 1900.031667] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1900.032804] kmem_cache_alloc+0x159/0x310 [ 1900.033762] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1900.035019] idr_get_free+0x4b5/0x8f0 [ 1900.035890] idr_alloc_u32+0x170/0x2d0 [ 1900.036768] ? __fprop_inc_percpu_max+0x130/0x130 [ 1900.037852] ? lock_acquire+0x197/0x470 [ 1900.038738] ? __kernfs_new_node+0xff/0x860 [ 1900.039690] idr_alloc_cyclic+0x102/0x230 [ 1900.040611] ? idr_alloc+0x130/0x130 [ 1900.041450] ? rwlock_bug.part.0+0x90/0x90 [ 1900.042407] __kernfs_new_node+0x117/0x860 [ 1900.043348] ? mark_held_locks+0x9e/0xe0 [ 1900.044261] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1900.045333] ? cpumask_next+0x1f/0x30 [ 1900.046186] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1900.047235] ? pcpu_alloc+0x12a/0x1240 [ 1900.048115] kernfs_new_node+0x18d/0x250 [ 1900.049043] kernfs_create_dir_ns+0x49/0x160 [ 1900.050028] cgroup_mkdir+0x315/0xf50 [ 1900.050890] ? cgroup_destroy_locked+0x710/0x710 [ 1900.051949] kernfs_iop_mkdir+0x14d/0x1e0 [ 1900.052880] vfs_mkdir+0x493/0x750 [ 1900.053699] do_mkdirat+0x150/0x2b0 [ 1900.054513] ? user_path_create+0xf0/0xf0 [ 1900.055453] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1900.056616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1900.057778] do_syscall_64+0x33/0x40 [ 1900.058610] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1900.059753] RIP: 0033:0x7fc0b1e4eb19 [ 1900.060587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1900.064628] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1900.066327] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1900.067899] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1900.069470] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1900.071037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1900.072592] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:05:44 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x5, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:05:44 executing program 6: r0 = epoll_create(0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x200000000000031f, &(0x7f0000000080)=[{0x6}]}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1, 0x84) 18:05:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x100) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:05:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0xffffffff, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:05:58 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0xf, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:05:58 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) fcntl$dupfd(r1, 0x406, r2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) syz_emit_ethernet(0x134, &(0x7f0000000300)={@broadcast, @random="739ae2138273", @void, {@ipv4={0x800, @icmp={{0x34, 0x4, 0x0, 0x4, 0x126, 0x66, 0x0, 0xfa, 0x1, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4}, @noop, @lsrr={0x83, 0xb, 0x86, [@loopback, @multicast2]}, @ssrr={0x89, 0x1f, 0x5, [@multicast1, @empty, @remote, @private=0xa010102, @rand_addr=0x64010100, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0x54, 0xa5, 0x3, 0x5, [{@empty, 0x4}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0xfffffffb}, {@private=0xa010102, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@multicast1, 0x50}, {@private=0xa010100}]}, @cipso={0x86, 0xb, 0xffffffffffffffff, [{0x2, 0x5, "ed09d6"}]}, @cipso={0x86, 0x2b, 0x3, [{0x2, 0xf, "626bdba09ac186a972887b9e88"}, {0x6, 0x5, "ae1471"}, {0x7, 0x9, "b0ae903e6bf812"}, {0x2, 0x4, "4b9b"}, {0x2, 0x4, "f3cf"}]}]}}, @dest_unreach={0x3, 0xe, 0x0, 0x0, 0x71, 0xffff, {0x13, 0x4, 0x2, 0x0, 0x778b, 0x64, 0x20, 0x7f, 0x32, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x86, 0xb, "1882b408ad5e57c0e3"}, @timestamp={0x44, 0x14, 0xde, 0x0, 0x6, [0x68df, 0x3, 0x7fffffff, 0x6]}, @timestamp={0x44, 0x18, 0x15, 0x0, 0x3, [0x8000, 0x3, 0x100, 0x4, 0x5]}]}}, "b470"}}}}}, 0x0) 18:05:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) (fail_nth: 6) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:05:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x800000, 0x0, 0x0) 18:05:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:05:58 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 20) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) [ 1914.650519] 9pnet: p9_fd_create_unix (12172): problem connecting socket: ./file0: -111 [ 1914.684954] FAULT_INJECTION: forcing a failure. [ 1914.684954] name failslab, interval 1, probability 0, space 0, times 0 [ 1914.687453] FAULT_INJECTION: forcing a failure. [ 1914.687453] name failslab, interval 1, probability 0, space 0, times 0 [ 1914.687957] CPU: 1 PID: 12179 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1914.691755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1914.693613] Call Trace: [ 1914.694189] dump_stack+0x107/0x167 [ 1914.694975] should_fail.cold+0x5/0xa [ 1914.695799] ? create_object.isra.0+0x3a/0xa20 [ 1914.696776] should_failslab+0x5/0x20 [ 1914.697611] kmem_cache_alloc+0x5b/0x310 [ 1914.698494] create_object.isra.0+0x3a/0xa20 [ 1914.699433] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1914.700534] kmem_cache_alloc_trace+0x151/0x320 [ 1914.701544] __iomap_dio_rw+0x1ee/0x1110 [ 1914.702430] ? lock_release+0x680/0x680 [ 1914.703294] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1914.704292] ? down_read+0x10f/0x430 [ 1914.705114] ? lock_chain_count+0x20/0x20 [ 1914.706010] ? down_write+0x160/0x160 [ 1914.706839] iomap_dio_rw+0x31/0x90 [ 1914.707663] ext4_file_read_iter+0x2c7/0x4c0 [ 1914.708880] generic_file_splice_read+0x455/0x6d0 [ 1914.709927] ? pipe_to_user+0x170/0x170 [ 1914.710951] ? fsnotify_perm.part.0+0x22d/0x620 [ 1914.712101] ? security_file_permission+0xb1/0xe0 [ 1914.713199] ? pipe_to_user+0x170/0x170 [ 1914.714061] do_splice_to+0x10e/0x160 [ 1914.714881] splice_direct_to_actor+0x2fe/0x980 [ 1914.715924] ? pipe_to_sendpage+0x380/0x380 [ 1914.716939] ? do_splice_to+0x160/0x160 [ 1914.717782] ? security_file_permission+0xb1/0xe0 [ 1914.718867] do_splice_direct+0x1c4/0x290 [ 1914.719837] ? splice_direct_to_actor+0x980/0x980 [ 1914.720867] ? avc_policy_seqno+0x9/0x70 [ 1914.721749] ? security_file_permission+0xb1/0xe0 [ 1914.722784] vfs_copy_file_range+0x4f8/0x13c0 [ 1914.723749] ? generic_file_rw_checks+0x240/0x240 [ 1914.724799] __do_sys_copy_file_range+0x193/0x420 [ 1914.725839] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1914.726870] ? ksys_write+0x1a9/0x260 [ 1914.727738] ? __ia32_sys_read+0xb0/0xb0 [ 1914.728622] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1914.729742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1914.730847] do_syscall_64+0x33/0x40 [ 1914.731642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1914.732770] RIP: 0033:0x7fdf43728b19 [ 1914.733567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1914.737437] RSP: 002b:00007fdf40c9e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1914.739037] RAX: ffffffffffffffda RBX: 00007fdf4383bf60 RCX: 00007fdf43728b19 [ 1914.740538] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 1914.742058] RBP: 00007fdf40c9e1d0 R08: 000000000200f5ef R09: 0000000000000000 [ 1914.743571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1914.745070] R13: 00007ffd09cd0e3f R14: 00007fdf40c9e300 R15: 0000000000022000 [ 1914.746698] CPU: 0 PID: 12172 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1914.748221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1914.749983] Call Trace: [ 1914.750553] dump_stack+0x107/0x167 [ 1914.751331] should_fail.cold+0x5/0xa [ 1914.752142] should_failslab+0x5/0x20 [ 1914.752954] __kmalloc_track_caller+0x79/0x370 [ 1914.753945] ? security_context_to_sid_core+0xb4/0x890 [ 1914.755064] kmemdup_nul+0x2d/0xa0 [ 1914.755836] security_context_to_sid_core+0xb4/0x890 [ 1914.756922] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 1914.758076] ? do_raw_spin_lock+0x121/0x260 [ 1914.758986] ? rwlock_bug.part.0+0x90/0x90 [ 1914.759886] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1914.760910] ? do_raw_spin_unlock+0x4f/0x220 [ 1914.761847] ? _raw_spin_unlock+0x1a/0x30 [ 1914.762741] security_context_to_sid+0x35/0x50 [ 1914.763721] selinux_kernfs_init_security+0x19d/0x4c0 [ 1914.764815] ? selinux_file_mprotect+0x610/0x610 [ 1914.765824] ? find_held_lock+0x2c/0x110 [ 1914.766697] ? __kernfs_new_node+0x2ad/0x860 [ 1914.767631] ? lock_downgrade+0x6d0/0x6d0 [ 1914.768513] ? rwlock_bug.part.0+0x90/0x90 [ 1914.769432] security_kernfs_init_security+0x4e/0xb0 [ 1914.770500] __kernfs_new_node+0x531/0x860 [ 1914.771399] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1914.772409] ? cpumask_next+0x1f/0x30 [ 1914.773228] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1914.774220] ? pcpu_alloc+0x12a/0x1240 [ 1914.775065] kernfs_new_node+0x18d/0x250 [ 1914.775996] kernfs_create_dir_ns+0x49/0x160 [ 1914.777032] cgroup_mkdir+0x315/0xf50 [ 1914.777865] ? cgroup_destroy_locked+0x710/0x710 [ 1914.778859] kernfs_iop_mkdir+0x14d/0x1e0 [ 1914.779735] vfs_mkdir+0x493/0x750 [ 1914.780488] do_mkdirat+0x150/0x2b0 [ 1914.781267] ? user_path_create+0xf0/0xf0 [ 1914.782155] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1914.783256] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1914.784345] do_syscall_64+0x33/0x40 [ 1914.785139] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1914.786212] RIP: 0033:0x7fc0b1e4eb19 [ 1914.786986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1914.790870] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1914.792477] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1914.793979] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1914.795438] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1914.797176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1914.798672] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:05:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x1000000, 0x0, 0x0) 18:05:58 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:05:58 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(0xffffffffffffffff, r0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001480)=ANY=[@ANYBLOB="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"]) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, &(0x7f0000000000)={'veth0\x00', @ifru_map}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00008d7000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000001e00)="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", 0x1000, r2}, 0x68) flock(r4, 0x6) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000300)={{}, "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"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) unshare(0x48020200) 18:05:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0xf, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:05:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) (fail_nth: 7) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:05:58 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:05:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 21) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:05:59 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1915.008025] FAULT_INJECTION: forcing a failure. [ 1915.008025] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1915.010934] CPU: 1 PID: 12197 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1915.012686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1915.014851] Call Trace: [ 1915.015541] dump_stack+0x107/0x167 [ 1915.016476] should_fail.cold+0x5/0xa [ 1915.017464] __alloc_pages_nodemask+0x182/0x600 [ 1915.018669] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1915.020212] ? lock_acquire+0x197/0x470 [ 1915.021256] ? find_held_lock+0x2c/0x110 [ 1915.022300] ? jbd2_transaction_committed+0x111/0x150 [ 1915.023602] ? lock_downgrade+0x6d0/0x6d0 [ 1915.024645] ? ext4_map_blocks+0x87c/0x1910 [ 1915.025752] alloc_pages_current+0x187/0x280 [ 1915.026866] ? __kernel_text_address+0x9/0x40 [ 1915.027146] 9pnet: p9_fd_create_unix (12201): problem connecting socket: ./file0: -111 [ 1915.028023] push_pipe+0x2b5/0x6d0 [ 1915.028055] iov_iter_zero+0x418/0xef0 [ 1915.030875] ? ext4_iomap_begin+0x1a0/0x700 [ 1915.032002] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1915.033443] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1915.034685] ? kasan_save_stack+0x1b/0x40 [ 1915.035755] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1915.037052] ? __iomap_dio_rw+0x1ee/0x1110 [ 1915.038138] ? iomap_dio_rw+0x31/0x90 [ 1915.039111] ? ext4_file_read_iter+0x2c7/0x4c0 [ 1915.040284] iomap_dio_actor+0x40f/0x560 [ 1915.041339] iomap_apply+0x289/0x810 [ 1915.042306] ? iomap_dio_rw+0x90/0x90 [ 1915.043283] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1915.044767] ? mark_held_locks+0x9e/0xe0 [ 1915.045844] ? filemap_check_errors+0xa5/0x150 [ 1915.047037] __iomap_dio_rw+0x6cd/0x1110 [ 1915.048070] ? iomap_dio_rw+0x90/0x90 [ 1915.049076] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1915.050265] ? down_read+0x10f/0x430 [ 1915.051113] ? lock_chain_count+0x20/0x20 [ 1915.052167] ? down_write+0x160/0x160 [ 1915.053170] iomap_dio_rw+0x31/0x90 [ 1915.054127] ext4_file_read_iter+0x2c7/0x4c0 [ 1915.055255] generic_file_splice_read+0x455/0x6d0 [ 1915.056497] ? pipe_to_user+0x170/0x170 [ 1915.057526] ? fsnotify_perm.part.0+0x22d/0x620 [ 1915.058725] ? security_file_permission+0xb1/0xe0 [ 1915.059974] ? pipe_to_user+0x170/0x170 [ 1915.061007] do_splice_to+0x10e/0x160 [ 1915.062007] splice_direct_to_actor+0x2fe/0x980 [ 1915.063211] ? pipe_to_sendpage+0x380/0x380 [ 1915.064336] ? do_splice_to+0x160/0x160 [ 1915.065458] ? security_file_permission+0xb1/0xe0 [ 1915.066650] do_splice_direct+0x1c4/0x290 [ 1915.067670] ? splice_direct_to_actor+0x980/0x980 [ 1915.068845] ? avc_policy_seqno+0x9/0x70 [ 1915.069834] ? security_file_permission+0xb1/0xe0 [ 1915.070866] vfs_copy_file_range+0x4f8/0x13c0 [ 1915.071813] ? generic_file_rw_checks+0x240/0x240 [ 1915.072847] __do_sys_copy_file_range+0x193/0x420 [ 1915.073858] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1915.074845] ? ksys_write+0x1a9/0x260 [ 1915.075635] ? __ia32_sys_read+0xb0/0xb0 [ 1915.076479] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1915.077577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1915.078652] do_syscall_64+0x33/0x40 [ 1915.079427] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1915.080496] RIP: 0033:0x7fdf43728b19 [ 1915.081276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1915.082191] FAULT_INJECTION: forcing a failure. [ 1915.082191] name failslab, interval 1, probability 0, space 0, times 0 [ 1915.085124] RSP: 002b:00007fdf40c9e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1915.085144] RAX: ffffffffffffffda RBX: 00007fdf4383bf60 RCX: 00007fdf43728b19 [ 1915.085153] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 1915.085163] RBP: 00007fdf40c9e1d0 R08: 000000000200f5ef R09: 0000000000000000 [ 1915.085178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1915.093971] R13: 00007ffd09cd0e3f R14: 00007fdf40c9e300 R15: 0000000000022000 [ 1915.095473] CPU: 0 PID: 12205 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1915.096283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1915.097257] Call Trace: [ 1915.097572] dump_stack+0x107/0x167 [ 1915.097988] should_fail.cold+0x5/0xa [ 1915.098434] ? create_object.isra.0+0x3a/0xa20 [ 1915.098957] should_failslab+0x5/0x20 [ 1915.099399] kmem_cache_alloc+0x5b/0x310 [ 1915.099867] create_object.isra.0+0x3a/0xa20 [ 1915.100380] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1915.100973] kmem_cache_alloc+0x159/0x310 [ 1915.101473] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1915.102128] idr_get_free+0x4b5/0x8f0 [ 1915.102575] idr_alloc_u32+0x170/0x2d0 [ 1915.103031] ? __fprop_inc_percpu_max+0x130/0x130 [ 1915.103604] ? lock_acquire+0x197/0x470 [ 1915.104084] ? __kernfs_new_node+0xff/0x860 [ 1915.104595] idr_alloc_cyclic+0x102/0x230 [ 1915.105173] ? idr_alloc+0x130/0x130 [ 1915.105721] ? rwlock_bug.part.0+0x90/0x90 [ 1915.106359] __kernfs_new_node+0x117/0x860 [ 1915.106983] ? mark_held_locks+0x9e/0xe0 [ 1915.107593] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1915.108299] ? cpumask_next+0x1f/0x30 [ 1915.108875] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1915.109530] ? pcpu_alloc+0x12a/0x1240 [ 1915.109984] kernfs_new_node+0x18d/0x250 [ 1915.110502] kernfs_create_dir_ns+0x49/0x160 [ 1915.111007] cgroup_mkdir+0x315/0xf50 [ 1915.111461] ? cgroup_destroy_locked+0x710/0x710 [ 1915.112033] kernfs_iop_mkdir+0x14d/0x1e0 [ 1915.112520] vfs_mkdir+0x493/0x750 [ 1915.112934] do_mkdirat+0x150/0x2b0 [ 1915.113383] ? user_path_create+0xf0/0xf0 [ 1915.113876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1915.114496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1915.115096] do_syscall_64+0x33/0x40 [ 1915.115536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1915.116136] RIP: 0033:0x7fc0b1e4eb19 [ 1915.116573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1915.118831] RSP: 002b:00007fc0af3a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1915.119960] RAX: ffffffffffffffda RBX: 00007fc0b1f62020 RCX: 00007fc0b1e4eb19 [ 1915.121013] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1915.122096] RBP: 00007fc0af3a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1915.123155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1915.124225] R13: 00007ffc2a45bb1f R14: 00007fc0af3a3300 R15: 0000000000022000 18:06:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:06:14 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:06:14 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:06:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x20000000, 0x0, 0x0) 18:06:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = getpgrp(0x0) ioprio_set$pid(0x2, r2, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x2c, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x86, 0x0, 0x0, @uid}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="f27e13ed587a9828994b06140000001f76698c71f8dbb55d50df2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) clone3(&(0x7f00000006c0)={0x80000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000004c0), {0x16}, &(0x7f0000000500)=""/179, 0xb3, &(0x7f00000005c0)=""/148, &(0x7f0000000680)=[r2], 0x1, {r0}}, 0x58) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3052}}, './file0\x00'}) clone3(&(0x7f0000000440)={0x200080000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0), {0x1d}, &(0x7f0000000200)=""/147, 0x93, &(0x7f00000002c0)=""/111, &(0x7f00000003c0)=[0x0, r4, 0x0], 0x3, {r5}}, 0x58) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x7, 0x0, 0x80, 0x1f, 0x0, 0x401, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000001c0), 0x3}, 0x80, 0x4000000000000000, 0x6, 0x1, 0x7ff, 0x0, 0x4, 0x0, 0xe8, 0x0, 0x8}, r4, 0x2, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r6, 0x0, 0x0, 0x1000002) pread64(r6, &(0x7f0000000300)=""/247, 0xf7, 0x10001) sendmsg$nl_generic(r6, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x55d11e9ea9f41207}, 0xc, &(0x7f0000000980)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x24000000}, 0x48000) [ 1930.326977] 9pnet: p9_fd_create_unix (12217): problem connecting socket: ./file0: -111 18:06:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) (fail_nth: 8) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:06:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 22) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:06:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105342, 0x89) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x40200, 0x136) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) socket$netlink(0x10, 0x3, 0x15) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, 0x0) [ 1930.342977] FAULT_INJECTION: forcing a failure. [ 1930.342977] name failslab, interval 1, probability 0, space 0, times 0 [ 1930.344635] CPU: 1 PID: 12217 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1930.345464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1930.346454] Call Trace: [ 1930.346782] dump_stack+0x107/0x167 [ 1930.347249] should_fail.cold+0x5/0xa [ 1930.347715] should_failslab+0x5/0x20 [ 1930.348167] __kmalloc_track_caller+0x79/0x370 [ 1930.348723] ? sidtab_sid2str_get+0x17e/0x720 [ 1930.349258] kmemdup+0x23/0x50 [ 1930.349661] sidtab_sid2str_get+0x17e/0x720 [ 1930.350177] sidtab_entry_to_string+0x33/0x110 [ 1930.350718] security_sid_to_context_core+0x33c/0x5d0 [ 1930.351334] selinux_kernfs_init_security+0x239/0x4c0 [ 1930.351953] ? selinux_file_mprotect+0x610/0x610 [ 1930.352520] ? find_held_lock+0x2c/0x110 [ 1930.353017] ? __kernfs_new_node+0x2ad/0x860 [ 1930.353557] ? rwlock_bug.part.0+0x90/0x90 [ 1930.354068] security_kernfs_init_security+0x4e/0xb0 [ 1930.354698] __kernfs_new_node+0x531/0x860 [ 1930.355205] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1930.355777] ? cpumask_next+0x1f/0x30 [ 1930.356236] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1930.356798] ? pcpu_alloc+0x12a/0x1240 [ 1930.357265] kernfs_new_node+0x18d/0x250 [ 1930.357771] kernfs_create_dir_ns+0x49/0x160 [ 1930.358290] cgroup_mkdir+0x315/0xf50 [ 1930.358823] ? cgroup_destroy_locked+0x710/0x710 [ 1930.359524] kernfs_iop_mkdir+0x14d/0x1e0 [ 1930.360187] vfs_mkdir+0x493/0x750 [ 1930.360674] do_mkdirat+0x150/0x2b0 [ 1930.361124] ? user_path_create+0xf0/0xf0 [ 1930.361828] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1930.363308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1930.364703] do_syscall_64+0x33/0x40 [ 1930.365688] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1930.366677] RIP: 0033:0x7fc0b1e4eb19 [ 1930.367269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1930.370112] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1930.371032] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1930.371923] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1930.372816] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1930.373694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1930.374535] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 [ 1930.388957] FAULT_INJECTION: forcing a failure. [ 1930.388957] name failslab, interval 1, probability 0, space 0, times 0 [ 1930.391820] CPU: 0 PID: 12226 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1930.393296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1930.395059] Call Trace: [ 1930.395622] dump_stack+0x107/0x167 [ 1930.396399] should_fail.cold+0x5/0xa [ 1930.397216] ? create_object.isra.0+0x3a/0xa20 [ 1930.398191] should_failslab+0x5/0x20 [ 1930.399007] kmem_cache_alloc+0x5b/0x310 [ 1930.399873] create_object.isra.0+0x3a/0xa20 [ 1930.400800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1930.401899] kmem_cache_alloc_trace+0x151/0x320 [ 1930.402886] __iomap_dio_rw+0x1ee/0x1110 [ 1930.403753] ? lock_release+0x680/0x680 [ 1930.404605] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1930.405603] ? down_read+0x10f/0x430 [ 1930.406381] ? lock_chain_count+0x20/0x20 [ 1930.407254] ? down_write+0x160/0x160 [ 1930.408070] iomap_dio_rw+0x31/0x90 [ 1930.408842] ext4_file_read_iter+0x2c7/0x4c0 [ 1930.409789] generic_file_splice_read+0x455/0x6d0 [ 1930.410810] ? pipe_to_user+0x170/0x170 [ 1930.411667] ? fsnotify_perm.part.0+0x22d/0x620 [ 1930.412655] ? security_file_permission+0xb1/0xe0 [ 1930.413683] ? pipe_to_user+0x170/0x170 [ 1930.414525] do_splice_to+0x10e/0x160 [ 1930.415356] splice_direct_to_actor+0x2fe/0x980 [ 1930.416344] ? pipe_to_sendpage+0x380/0x380 [ 1930.417261] ? do_splice_to+0x160/0x160 [ 1930.418114] ? security_file_permission+0xb1/0xe0 [ 1930.419151] do_splice_direct+0x1c4/0x290 [ 1930.420030] ? splice_direct_to_actor+0x980/0x980 [ 1930.421045] ? avc_policy_seqno+0x9/0x70 [ 1930.421918] ? security_file_permission+0xb1/0xe0 [ 1930.422922] vfs_copy_file_range+0x4f8/0x13c0 [ 1930.423875] ? generic_file_rw_checks+0x240/0x240 [ 1930.424925] __do_sys_copy_file_range+0x193/0x420 [ 1930.425959] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1930.426960] ? ksys_write+0x1a9/0x260 [ 1930.427766] ? __ia32_sys_read+0xb0/0xb0 [ 1930.428626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 18:06:14 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) [ 1930.429745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1930.430989] do_syscall_64+0x33/0x40 [ 1930.431776] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1930.432857] RIP: 0033:0x7fdf43728b19 [ 1930.433660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1930.437548] RSP: 002b:00007fdf40c9e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1930.439135] RAX: ffffffffffffffda RBX: 00007fdf4383bf60 RCX: 00007fdf43728b19 [ 1930.440646] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 1930.442159] RBP: 00007fdf40c9e1d0 R08: 000000000200f5ef R09: 0000000000000000 [ 1930.443666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1930.445178] R13: 00007ffd09cd0e3f R14: 00007fdf40c9e300 R15: 0000000000022000 [ 1930.452651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 18:06:14 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:06:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x40000000000000, 0x0, 0x0) 18:06:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) lseek(r2, 0x0, 0x4) syz_io_uring_setup(0x4a90, &(0x7f00000002c0)={0x0, 0xfffffffd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:06:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 23) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:06:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0xc0, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:06:14 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1930.585953] 9pnet: p9_fd_create_unix (12245): problem connecting socket: ./file0: -111 18:06:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x80000000000000, 0x0, 0x0) [ 1930.617209] FAULT_INJECTION: forcing a failure. [ 1930.617209] name failslab, interval 1, probability 0, space 0, times 0 [ 1930.618649] CPU: 1 PID: 12245 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1930.619463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1930.620409] Call Trace: [ 1930.620720] dump_stack+0x107/0x167 [ 1930.621163] should_fail.cold+0x5/0xa [ 1930.621619] ? create_object.isra.0+0x3a/0xa20 [ 1930.622148] should_failslab+0x5/0x20 [ 1930.622592] kmem_cache_alloc+0x5b/0x310 [ 1930.623069] ? mark_held_locks+0x9e/0xe0 [ 1930.623541] create_object.isra.0+0x3a/0xa20 [ 1930.624051] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1930.624638] kmem_cache_alloc+0x159/0x310 [ 1930.625133] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1930.625767] idr_get_free+0x4b5/0x8f0 [ 1930.626225] idr_alloc_u32+0x170/0x2d0 [ 1930.626663] ? __fprop_inc_percpu_max+0x130/0x130 [ 1930.627239] ? lock_acquire+0x197/0x470 [ 1930.627680] ? __kernfs_new_node+0xff/0x860 [ 1930.628211] idr_alloc_cyclic+0x102/0x230 [ 1930.628682] ? idr_alloc+0x130/0x130 [ 1930.629127] ? rwlock_bug.part.0+0x90/0x90 [ 1930.629617] __kernfs_new_node+0x117/0x860 [ 1930.630123] ? mark_held_locks+0x9e/0xe0 [ 1930.630578] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1930.631142] ? cpumask_next+0x1f/0x30 [ 1930.631569] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1930.632129] ? pcpu_alloc+0x12a/0x1240 [ 1930.632571] kernfs_new_node+0x18d/0x250 [ 1930.633062] kernfs_create_dir_ns+0x49/0x160 [ 1930.633564] cgroup_mkdir+0x315/0xf50 [ 1930.634023] ? cgroup_destroy_locked+0x710/0x710 [ 1930.634551] kernfs_iop_mkdir+0x14d/0x1e0 [ 1930.635040] vfs_mkdir+0x493/0x750 [ 1930.635439] do_mkdirat+0x150/0x2b0 [ 1930.635880] ? user_path_create+0xf0/0xf0 [ 1930.636347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1930.636968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1930.637591] do_syscall_64+0x33/0x40 [ 1930.638029] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1930.638632] RIP: 0033:0x7fc0b1e4eb19 [ 1930.639079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1930.641258] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1930.642163] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1930.643018] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1930.643858] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1930.644701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1930.645547] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:06:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) (fail_nth: 9) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:06:14 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:06:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0xec0, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:06:14 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:06:14 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002800000000000028252f4500000000000000000000000000000000000000000000000000000000000100000101e70001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f00000000c0)="22c8551ed100bfc65ab5303a515d2968f1738c72fb578699f37e", 0x1a, 0xf000}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) fchownat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) [ 1930.723296] FAULT_INJECTION: forcing a failure. [ 1930.723296] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1930.725017] CPU: 1 PID: 12259 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1930.726035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1930.726982] Call Trace: [ 1930.727294] dump_stack+0x107/0x167 [ 1930.727711] should_fail.cold+0x5/0xa [ 1930.728152] __alloc_pages_nodemask+0x182/0x600 [ 1930.728691] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1930.729392] ? lock_acquire+0x197/0x470 [ 1930.729847] ? find_held_lock+0x2c/0x110 [ 1930.730316] ? jbd2_transaction_committed+0x111/0x150 [ 1930.730905] ? lock_downgrade+0x6d0/0x6d0 [ 1930.731380] ? ext4_map_blocks+0x87c/0x1910 [ 1930.731881] alloc_pages_current+0x187/0x280 [ 1930.732382] ? __kernel_text_address+0x9/0x40 [ 1930.732893] push_pipe+0x2b5/0x6d0 [ 1930.733307] iov_iter_zero+0x418/0xef0 [ 1930.733752] ? ext4_iomap_begin+0x1a0/0x700 [ 1930.734247] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1930.734883] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1930.735444] ? kasan_save_stack+0x1b/0x40 [ 1930.735914] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1930.736491] ? __iomap_dio_rw+0x1ee/0x1110 [ 1930.736974] ? iomap_dio_rw+0x31/0x90 [ 1930.737426] ? ext4_file_read_iter+0x2c7/0x4c0 [ 1930.737952] iomap_dio_actor+0x40f/0x560 [ 1930.738417] iomap_apply+0x289/0x810 [ 1930.738845] ? iomap_dio_rw+0x90/0x90 [ 1930.739280] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1930.739941] ? mark_held_locks+0x9e/0xe0 [ 1930.740410] ? filemap_check_errors+0xa5/0x150 [ 1930.740937] __iomap_dio_rw+0x6cd/0x1110 [ 1930.741422] ? iomap_dio_rw+0x90/0x90 [ 1930.741870] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1930.742402] ? down_read+0x10f/0x430 [ 1930.742830] ? lock_chain_count+0x20/0x20 [ 1930.743302] ? down_write+0x160/0x160 [ 1930.743744] iomap_dio_rw+0x31/0x90 [ 1930.744163] ext4_file_read_iter+0x2c7/0x4c0 [ 1930.744667] generic_file_splice_read+0x455/0x6d0 [ 1930.745222] ? pipe_to_user+0x170/0x170 [ 1930.745687] ? fsnotify_perm.part.0+0x22d/0x620 [ 1930.746194] ? security_file_permission+0xb1/0xe0 [ 1930.746744] ? pipe_to_user+0x170/0x170 [ 1930.747176] do_splice_to+0x10e/0x160 [ 1930.747616] splice_direct_to_actor+0x2fe/0x980 [ 1930.748126] ? pipe_to_sendpage+0x380/0x380 [ 1930.748624] ? do_splice_to+0x160/0x160 [ 1930.749053] ? security_file_permission+0xb1/0xe0 [ 1930.749613] do_splice_direct+0x1c4/0x290 [ 1930.750058] ? splice_direct_to_actor+0x980/0x980 [ 1930.750610] ? avc_policy_seqno+0x9/0x70 [ 1930.751049] ? security_file_permission+0xb1/0xe0 [ 1930.751606] vfs_copy_file_range+0x4f8/0x13c0 [ 1930.752092] ? generic_file_rw_checks+0x240/0x240 [ 1930.752659] __do_sys_copy_file_range+0x193/0x420 [ 1930.753177] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1930.753726] ? ksys_write+0x1a9/0x260 [ 1930.754137] ? __ia32_sys_read+0xb0/0xb0 [ 1930.754605] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1930.755169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1930.755771] do_syscall_64+0x33/0x40 [ 1930.756199] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1930.756779] RIP: 0033:0x7fdf43728b19 [ 1930.757203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1930.759305] RSP: 002b:00007fdf40c9e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1930.760170] RAX: ffffffffffffffda RBX: 00007fdf4383bf60 RCX: 00007fdf43728b19 [ 1930.760985] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 1930.761802] RBP: 00007fdf40c9e1d0 R08: 000000000200f5ef R09: 0000000000000000 [ 1930.762618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1930.763429] R13: 00007ffd09cd0e3f R14: 00007fdf40c9e300 R15: 0000000000022000 18:06:14 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:06:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 24) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:06:14 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1930.902182] 9pnet: p9_fd_create_unix (12275): problem connecting socket: ./file0: -111 18:06:14 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000010c0)={0x20000000, 0x3e, 0x2, @thr={0x0, 0x0}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x28}, 0x1}, 0x6) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000240)) timer_create(0x5, &(0x7f0000000100)={0x0, 0x18, 0x0, @thr={&(0x7f00000003c0)="a0723174e03a93e51addda188f89c75054d4cf1c235767b148dfbeeef871e4540e6c33f7b402c87d9bb49c1e8fddeb6b38c30490d27911687553ae1ea8b15d635b5224df3e8ebf977834bb0b4b1669", &(0x7f0000000540)="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"}}, &(0x7f0000000440)) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/52, 0x34}], 0x1) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640), 0x2}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x30, 0x0, @tid=r2}, &(0x7f0000000300)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010d000400"/20], 0x14}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) timer_settime(r3, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:06:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x100000000000000, 0x0, 0x0) 18:06:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x33fe0, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) [ 1930.940506] FAULT_INJECTION: forcing a failure. [ 1930.940506] name failslab, interval 1, probability 0, space 0, times 0 [ 1930.943299] CPU: 0 PID: 12275 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1930.944748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1930.946469] Call Trace: [ 1930.947027] dump_stack+0x107/0x167 [ 1930.947783] should_fail.cold+0x5/0xa [ 1930.948589] ? selinux_kernfs_init_security+0x137/0x4c0 [ 1930.949696] should_failslab+0x5/0x20 [ 1930.950507] __kmalloc+0x72/0x390 [ 1930.951256] selinux_kernfs_init_security+0x137/0x4c0 [ 1930.952333] ? selinux_file_mprotect+0x610/0x610 [ 1930.953337] ? find_held_lock+0x2c/0x110 [ 1930.954210] ? __kernfs_new_node+0x2ad/0x860 [ 1930.955160] ? lock_downgrade+0x6d0/0x6d0 [ 1930.956052] ? rwlock_bug.part.0+0x90/0x90 [ 1930.956941] security_kernfs_init_security+0x4e/0xb0 [ 1930.958040] __kernfs_new_node+0x531/0x860 [ 1930.958953] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1930.959977] ? cpumask_next+0x1f/0x30 [ 1930.960796] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1930.961816] ? pcpu_alloc+0x12a/0x1240 [ 1930.962663] kernfs_new_node+0x18d/0x250 [ 1930.963545] kernfs_create_dir_ns+0x49/0x160 [ 1930.964500] cgroup_mkdir+0x315/0xf50 [ 1930.965335] ? cgroup_destroy_locked+0x710/0x710 [ 1930.966353] kernfs_iop_mkdir+0x14d/0x1e0 [ 1930.967249] vfs_mkdir+0x493/0x750 [ 1930.968017] do_mkdirat+0x150/0x2b0 [ 1930.968804] ? user_path_create+0xf0/0xf0 [ 1930.969709] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1930.970838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1930.971950] do_syscall_64+0x33/0x40 [ 1930.972756] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1930.973865] RIP: 0033:0x7fc0b1e4eb19 [ 1930.974665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1930.978635] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1930.980268] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1930.981808] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1930.983320] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1930.984835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1930.986362] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 18:06:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x2000000000000000, 0x0, 0x0) 18:06:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x100000001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:06:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 25) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:06:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) (fail_nth: 10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:06:35 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:06:35 executing program 6: r0 = open(0x0, 0x10000, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000300)=""/197, 0xc5}, {&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f0000000540)=""/148, 0x94}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/158, 0x9e}, {&(0x7f0000000840)=""/210, 0xd2}], 0x7}, 0x40030000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb93e, 0xfffffffffffffffc}, 0x3000, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f0000000100)=ANY=[@ANYBLOB="900000003a00020027bd7000fddbdf25140000004a008b8046eb914e52c4c773db09d28ab8a75a93cf9cb89c4f742634c4aef2924be777294f415ce1315deda23b5c68f5a237e433ab770c6cd0b1ba4558f9958063f1300ec97144cbefb90000040000002322c25eb05b42ce6d055d2f5fa9cc29343eef4e6bcce0c976d15dfcf39cca189ffb24fadc2b137fd3f0dc848b2abb1b8e0721eb0fe49679792295b59ea3f62b320709037c9672a36930f0813456b86b4c6070"], 0x90}, 0x1, 0x0, 0x0, 0x880}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) shutdown(r1, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000009c0)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x2, 0xffc0, 0x282, 0x400, 0x9e, 0x40000000}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x68000000}, {0x6}]}, 0x10) 18:06:35 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:06:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x200009bc, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 18:06:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x7ffff000, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) [ 1951.009918] 9pnet: p9_fd_create_unix (12305): problem connecting socket: ./file0: -111 18:06:35 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1951.025377] FAULT_INJECTION: forcing a failure. [ 1951.025377] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.026910] CPU: 0 PID: 12305 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1951.027721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.028623] Call Trace: [ 1951.028923] dump_stack+0x107/0x167 [ 1951.029348] should_fail.cold+0x5/0xa [ 1951.029791] ? create_object.isra.0+0x3a/0xa20 [ 1951.030323] should_failslab+0x5/0x20 [ 1951.030780] kmem_cache_alloc+0x5b/0x310 [ 1951.031219] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1951.031792] create_object.isra.0+0x3a/0xa20 [ 1951.032303] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1951.032855] __kmalloc+0x16e/0x390 [ 1951.033276] selinux_kernfs_init_security+0x137/0x4c0 [ 1951.033853] ? selinux_file_mprotect+0x610/0x610 [ 1951.034405] ? find_held_lock+0x2c/0x110 [ 1951.034886] ? __kernfs_new_node+0x2ad/0x860 [ 1951.035398] ? lock_downgrade+0x6d0/0x6d0 [ 1951.035888] ? rwlock_bug.part.0+0x90/0x90 [ 1951.036349] security_kernfs_init_security+0x4e/0xb0 [ 1951.036939] __kernfs_new_node+0x531/0x860 [ 1951.037396] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1951.037985] ? cpumask_next+0x1f/0x30 [ 1951.038440] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1951.038996] ? pcpu_alloc+0x12a/0x1240 [ 1951.039456] kernfs_new_node+0x18d/0x250 [ 1951.039944] kernfs_create_dir_ns+0x49/0x160 [ 1951.040424] cgroup_mkdir+0x315/0xf50 [ 1951.040874] ? cgroup_destroy_locked+0x710/0x710 [ 1951.041426] kernfs_iop_mkdir+0x14d/0x1e0 [ 1951.041949] vfs_mkdir+0x493/0x750 [ 1951.042372] do_mkdirat+0x150/0x2b0 [ 1951.042774] ? user_path_create+0xf0/0xf0 [ 1951.043258] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1951.043826] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1951.044428] do_syscall_64+0x33/0x40 [ 1951.044849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1951.045449] RIP: 0033:0x7fc0b1e4eb19 [ 1951.045879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.048028] RSP: 002b:00007fc0af3c4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1951.048925] RAX: ffffffffffffffda RBX: 00007fc0b1f61f60 RCX: 00007fc0b1e4eb19 [ 1951.049777] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1951.050603] RBP: 00007fc0af3c41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1951.051435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1951.052261] R13: 00007ffc2a45bb1f R14: 00007fc0af3c4300 R15: 0000000000022000 [ 1951.066050] FAULT_INJECTION: forcing a failure. [ 1951.066050] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1951.069281] CPU: 1 PID: 12310 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1951.070989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.073019] Call Trace: [ 1951.073674] dump_stack+0x107/0x167 [ 1951.074569] should_fail.cold+0x5/0xa [ 1951.075519] __alloc_pages_nodemask+0x182/0x600 [ 1951.076665] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1951.078142] ? lock_acquire+0x197/0x470 [ 1951.079120] ? find_held_lock+0x2c/0x110 [ 1951.080126] ? jbd2_transaction_committed+0x111/0x150 [ 1951.081398] ? lock_downgrade+0x6d0/0x6d0 [ 1951.082420] ? ext4_map_blocks+0x87c/0x1910 [ 1951.083479] alloc_pages_current+0x187/0x280 [ 1951.084561] ? __kernel_text_address+0x9/0x40 [ 1951.085650] push_pipe+0x2b5/0x6d0 [ 1951.086543] iov_iter_zero+0x418/0xef0 [ 1951.087493] ? ext4_iomap_begin+0x1a0/0x700 [ 1951.088532] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1951.089868] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1951.091050] ? kasan_save_stack+0x1b/0x40 [ 1951.092041] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1951.093262] ? __iomap_dio_rw+0x1ee/0x1110 [ 1951.094292] ? iomap_dio_rw+0x31/0x90 [ 1951.095205] ? ext4_file_read_iter+0x2c7/0x4c0 [ 1951.096310] iomap_dio_actor+0x40f/0x560 [ 1951.097303] iomap_apply+0x289/0x810 [ 1951.098205] ? iomap_dio_rw+0x90/0x90 [ 1951.099124] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1951.100508] ? mark_held_locks+0x9e/0xe0 [ 1951.101504] ? filemap_check_errors+0xa5/0x150 [ 1951.102618] __iomap_dio_rw+0x6cd/0x1110 [ 1951.103583] ? iomap_dio_rw+0x90/0x90 [ 1951.104519] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1951.105640] ? down_read+0x10f/0x430 [ 1951.106531] ? lock_chain_count+0x20/0x20 [ 1951.107515] ? down_write+0x160/0x160 [ 1951.108431] iomap_dio_rw+0x31/0x90 [ 1951.109296] ext4_file_read_iter+0x2c7/0x4c0 [ 1951.110354] generic_file_splice_read+0x455/0x6d0 [ 1951.111504] ? pipe_to_user+0x170/0x170 [ 1951.112456] ? fsnotify_perm.part.0+0x22d/0x620 [ 1951.113569] ? security_file_permission+0xb1/0xe0 [ 1951.114720] ? pipe_to_user+0x170/0x170 [ 1951.115670] do_splice_to+0x10e/0x160 [ 1951.116574] splice_direct_to_actor+0x2fe/0x980 [ 1951.117692] ? pipe_to_sendpage+0x380/0x380 [ 1951.118725] ? do_splice_to+0x160/0x160 [ 1951.119662] ? security_file_permission+0xb1/0xe0 [ 1951.120811] do_splice_direct+0x1c4/0x290 [ 1951.121787] ? splice_direct_to_actor+0x980/0x980 [ 1951.122924] ? avc_policy_seqno+0x9/0x70 [ 1951.123890] ? security_file_permission+0xb1/0xe0 [ 1951.125055] vfs_copy_file_range+0x4f8/0x13c0 [ 1951.126134] ? generic_file_rw_checks+0x240/0x240 [ 1951.127303] __do_sys_copy_file_range+0x193/0x420 [ 1951.128448] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1951.129575] ? ksys_write+0x1a9/0x260 [ 1951.130480] ? __ia32_sys_read+0xb0/0xb0 [ 1951.131446] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1951.132645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1951.133891] do_syscall_64+0x33/0x40 [ 1951.134775] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1951.135980] RIP: 0033:0x7fdf43728b19 [ 1951.136854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.141186] RSP: 002b:00007fdf40c9e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1951.142988] RAX: ffffffffffffffda RBX: 00007fdf4383bf60 RCX: 00007fdf43728b19 [ 1951.144680] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 1951.146366] RBP: 00007fdf40c9e1d0 R08: 000000000200f5ef R09: 0000000000000000 [ 1951.148044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1951.149705] R13: 00007ffd09cd0e3f R14: 00007fdf40c9e300 R15: 0000000000022000 18:06:50 executing program 6: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:06:50 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x2000) 18:06:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/67, 0x43}], 0x3, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd7, 0x5}, 0x0, 0x0, 0x0, 0x8}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) (fail_nth: 11) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) 18:06:50 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x105bc2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r2, 0x1, 0x2) syz_io_uring_setup(0x4a90, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x0, 0x0, 0x34b}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r5, 0x0, 0x0, 0x1000002) pread64(r5, &(0x7f0000000300)=""/247, 0xf7, 0x10001) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x3f, 0x5}}, './file1\x00'}) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x1, 0x97, 0x7f, 0xff, 0x0, 0x16d, 0x316, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xb44, 0x6d}, 0x4000, 0x4, 0x5, 0xa, 0x3ff, 0xf019, 0xea, 0x0, 0x9, 0x0, 0x9}, r6, 0x5, r0, 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) lseek(r7, 0x0, 0x4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000740)) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0xef6, 0x2, &(0x7f0000000040)="fc435b41e741794521b5fece5b57e2797bd972695b50bd32e1b1e8bb4622727f9f351819bf89ac4ac9ddf8d651560b3e3ea6e52d63bc62ae0e743556072d15261f77781149191c788765c30398e4198f73f493431e99e3e58d662399e306c01c64c42f9ceae69cd8a60e69ef550b58004428b2b97574d287c2231c8810e5dbc312995e03750d4d5ff8f9f22a5b79", 0x6, 0x0, 0x0, {0x1}}, 0x8cb0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 18:06:50 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x2, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:06:50 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) umount2(&(0x7f0000000080)='./file0\x00', 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)) lseek(r0, 0xfa2b, 0x3) r1 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 26) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200) 18:06:50 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x1fffe}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x5, 0xff, 0x5, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1}, 0x4008, 0x5, 0x81, 0x2, 0x4, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0xfffffffffffffffc, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x665, 0xfffffffb}, 0x88, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8002, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x26, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setown(r3, 0x8, 0x0) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x18) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x2}, 0x6a}}, 0x18) r5 = gettid() ptrace$peek(0x1, r5, 0x0) perf_event_open(0x0, r5, 0x5, r2, 0x8) r6 = syz_io_uring_setup(0x2f8, &(0x7f0000000200)={0x0, 0xeb02, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x40000203}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 18:06:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0xfffffdef, 0x12, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) [ 1966.712866] FAULT_INJECTION: forcing a failure. [ 1966.712866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1966.713799] 9pnet: p9_fd_create_unix (12335): problem connecting socket: ./file0: -111 [ 1966.715702] CPU: 1 PID: 12331 Comm: syz-executor.4 Not tainted 5.10.240 #1 [ 1966.718615] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.720371] Call Trace: [ 1966.720931] dump_stack+0x107/0x167 [ 1966.721703] should_fail.cold+0x5/0xa [ 1966.722528] __alloc_pages_nodemask+0x182/0x600 [ 1966.723514] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1966.724781] ? lock_acquire+0x197/0x470 [ 1966.725628] ? find_held_lock+0x2c/0x110 [ 1966.726505] ? jbd2_transaction_committed+0x111/0x150 [ 1966.727595] ? lock_downgrade+0x6d0/0x6d0 [ 1966.728477] ? ext4_map_blocks+0x87c/0x1910 [ 1966.729388] alloc_pages_current+0x187/0x280 [ 1966.730319] ? __kernel_text_address+0x9/0x40 [ 1966.731270] push_pipe+0x2b5/0x6d0 [ 1966.732034] iov_iter_zero+0x418/0xef0 [ 1966.732874] ? ext4_iomap_begin+0x1a0/0x700 [ 1966.733801] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1966.734966] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1966.736012] ? kasan_save_stack+0x1b/0x40 [ 1966.736884] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1966.737968] ? __iomap_dio_rw+0x1ee/0x1110 [ 1966.738860] ? iomap_dio_rw+0x31/0x90 [ 1966.739668] ? ext4_file_read_iter+0x2c7/0x4c0 [ 1966.740642] iomap_dio_actor+0x40f/0x560 [ 1966.741513] iomap_apply+0x289/0x810 [ 1966.742315] ? iomap_dio_rw+0x90/0x90 [ 1966.743126] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1966.744358] ? mark_held_locks+0x9e/0xe0 [ 1966.745239] ? filemap_check_errors+0xa5/0x150 [ 1966.746237] __iomap_dio_rw+0x6cd/0x1110 [ 1966.747105] ? iomap_dio_rw+0x90/0x90 [ 1966.747938] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1966.748921] ? down_read+0x10f/0x430 [ 1966.749709] ? lock_chain_count+0x20/0x20 [ 1966.750591] ? down_write+0x160/0x160 [ 1966.751405] iomap_dio_rw+0x31/0x90 [ 1966.752180] ext4_file_read_iter+0x2c7/0x4c0 [ 1966.753123] generic_file_splice_read+0x455/0x6d0 [ 1966.754159] ? pipe_to_user+0x170/0x170 [ 1966.755015] ? fsnotify_perm.part.0+0x22d/0x620 [ 1966.756015] ? security_file_permission+0xb1/0xe0 [ 1966.757032] ? pipe_to_user+0x170/0x170 [ 1966.757882] do_splice_to+0x10e/0x160 [ 1966.758701] splice_direct_to_actor+0x2fe/0x980 [ 1966.759686] ? pipe_to_sendpage+0x380/0x380 [ 1966.760606] ? do_splice_to+0x160/0x160 [ 1966.761444] ? security_file_permission+0xb1/0xe0 [ 1966.762473] do_splice_direct+0x1c4/0x290 [ 1966.763354] ? splice_direct_to_actor+0x980/0x980 [ 1966.764378] ? lock_is_held_type+0x2c/0x110 [ 1966.765301] vfs_copy_file_range+0x4f8/0x13c0 [ 1966.766269] ? generic_file_rw_checks+0x240/0x240 [ 1966.767305] __do_sys_copy_file_range+0x193/0x420 [ 1966.768326] ? vfs_copy_file_range+0x13c0/0x13c0 [ 1966.769325] ? ksys_write+0x1a9/0x260 [ 1966.770136] ? __ia32_sys_read+0xb0/0xb0 [ 1966.770994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.772097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.773195] do_syscall_64+0x33/0x40 [ 1966.773997] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1966.775069] RIP: 0033:0x7fdf43728b19 [ 1966.775872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.780005] RSP: 002b:00007fdf40c9e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 1966.781708] RAX: ffffffffffffffda RBX: 00007fdf4383bf60 RCX: 00007fdf43728b19 [ 1966.783325] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000007 [ 1966.784926] RBP: 00007fdf40c9e1d0 R08: 000000000200f5ef R09: 0000000000000000 [ 1966.786548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1966.788150] R13: 00007ffd09cd0e3f R14: 00007fdf40c9e300 R15: 0000000000022000 18:06:50 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3eb7, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0xd, 0x40000022, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x5}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x4000) 18:06:50 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x3, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) [ 1966.792357] FAULT_INJECTION: forcing a failure. [ 1966.792357] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.795328] CPU: 0 PID: 12342 Comm: syz-executor.1 Not tainted 5.10.240 #1 [ 1966.796796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1966.798560] Call Trace: [ 1966.799122] dump_stack+0x107/0x167 [ 1966.799893] should_fail.cold+0x5/0xa [ 1966.800697] ? kvmalloc_node+0x119/0x170 [ 1966.801563] should_failslab+0x5/0x20 [ 1966.802377] __kmalloc_node+0x76/0x420 [ 1966.803187] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1966.804194] kvmalloc_node+0x119/0x170 [ 1966.805013] simple_xattr_alloc+0x43/0xa0 [ 1966.805892] simple_xattr_set+0x75/0x610 [ 1966.806749] kernfs_xattr_set+0x50/0x80 [ 1966.807598] selinux_kernfs_init_security+0x26d/0x4c0 [ 1966.808688] ? selinux_file_mprotect+0x610/0x610 [ 1966.809691] ? find_held_lock+0x2c/0x110 [ 1966.810544] ? __kernfs_new_node+0x2ad/0x860 [ 1966.811471] ? rwlock_bug.part.0+0x90/0x90 [ 1966.812377] security_kernfs_init_security+0x4e/0xb0 [ 1966.813451] __kernfs_new_node+0x531/0x860 [ 1966.814362] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1966.815375] ? cpumask_next+0x1f/0x30 [ 1966.816186] ? kmemleak_alloc_percpu+0xaf/0x100 [ 1966.817176] ? pcpu_alloc+0x12a/0x1240 [ 1966.818019] kernfs_new_node+0x18d/0x250 [ 1966.818885] kernfs_create_dir_ns+0x49/0x160 [ 1966.819826] cgroup_mkdir+0x315/0xf50 [ 1966.820637] ? cgroup_destroy_locked+0x710/0x710 [ 1966.821740] kernfs_iop_mkdir+0x14d/0x1e0 [ 1966.822640] vfs_mkdir+0x493/0x750 [ 1966.823393] do_mkdirat+0x150/0x2b0 [ 1966.824163] ? user_path_create+0xf0/0xf0 [ 1966.825040] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1966.826153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1966.827237] do_syscall_64+0x33/0x40 [ 1966.828019] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1966.829094] RIP: 0033:0x7fc0b1e4eb19 [ 1966.829889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1966.833976] RSP: 002b:00007fc0af3a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1966.835577] RAX: ffffffffffffffda RBX: 00007fc0b1f62020 RCX: 00007fc0b1e4eb19 [ 1966.837066] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1966.838557] RBP: 00007fc0af3a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1966.840054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1966.841556] R13: 00007ffc2a45bb1f R14: 00007fc0af3a3300 R15: 0000000000022000 18:06:50 executing program 6: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000640)={{r0}, "3537784fc6fdd5e06fe4c708792bab5d0bc9d74370caa063f660f42847a4656e64fb8f766150af25edad05ffa3335a9f0a85e63c6fd8dd293916514ed859a2c02299120f9dca079945f71b2027086a996fe50731cbd1b789f5f52c113412eb60f3edb4da73ad9f928fa6bc05a0012a514f0873d32b025c02b20a98a13609c2440ab775a82c81a70765886cb35a2195e9a8ed283978a9dd50e63458010ffc539d48a8bd7d10e4dbb00d44749308a753bff0565972d4ec01263fe23dc9d20b6f27abd2a9a1b3dbd8b208666dba00704dc084b0ca61889cad5ea06c959ab7126f3526522de688221d3a1a74d445265210476a0d4c647f24058949b9d5d9802c923ad164ed989acc6dd8fac054d00ed4d2f76670b9a465e203b96eca05dce1ccaf3d2d4dfe8766ee4f718dfa92443613e2907b953dae3b22f49f08bc2f3916efba5eb61d717047c5a20c7d353c2459517a809a21edb845f90843b90abd24abf5aea9dbaad9ec1161a6671fc7af0ebabd900e4b5e1d75d0b2ea318b9c4bc905e9ca253c457404fd51193721ce9908eaee779a3d26716f7ba2b9dc341418d5f3359ba76d1fdf2eaf0d73a4552a3602bd07e52d1d0720de2c8075847b3e78e9534f69c922a3be1334bf953fccbff9c495b1fef334d2a9aa29ff50fef156dfc5aee8b38ff976cba37a5878333fe2304f5c84b9b7215c72792c408c17e545423c0f581afc795634104b928001944e070f50b72e16541bd4a03a4f25853ccb18022f515b4a606535f74967004e35a45755f3734416d7eb8644fa9af1bc613e59b84ea91e48382e2fe9aefd5c5885fca72c72ac045801b999b316e69439f11f9cf4033779afb71271b3b61bda7728801236505753ba72b3ee4ab6b2c49cc814f0f7b31f2bf40adbd47ec680d7d7df909beefc5f88d5ab2282e4dcda7b534e721c71628dae9a344f360e39823cffd34f3440dd5ecf0a8c7451aaff66966999823c6b14a867d81ad2e2938ccc13042b384418ea7ea0b8d29577ea1591c2474a65602fcd58f609aba97bd62cd006b5865d0a39e744d25b7d22b0434d57a85f6798e43f4baf210260dfd9825e07f1995c5ad94be363170a52d2c908fc4db8c0e4d217d91bbfdedae8febd877c13022deca98519727c11dffb2bc6be93f6c6a1bbcb3f0f6763a86b6905d20e6618d40c3036847f0a5ff189558492af0eb386a5115bd5275804e7d6bdee52348083bf8ff945f0aac9d62fe01f71b6d696b9d448422e5cf402ff948107713b5539052452975a58260a95b0a68a47890fa0ba20df940ec9b2deb7be3ff21c93c9a97ee6f8888a9775c3dc0d48bc21077b0841c6f5099073e0358c07aab56560620ca6ceb5304990f628a4b7b3363847b24576fd9ea176014a02b5a3ddfe4799743b2fc9e316e36e4a1d45f2332f1c18f678e5ac3bca9e32fe6f82eb3f7b5c505f50c1fcfe899e9aa14731dc3e0980be0502d38c6dd8d5432d9a4d2d39ae11e6fdc8918d857fdd96ac8a1ab313ad92a9e687cc11f384cb6e3402260c0b56c6ce40160c2a0684eb1b9b93211bcac7db7efe4ff330ba51737294d8255b6adf8a95dd418eb41bf3196a26df871b3cf2928f8d83a608fb5b12481ffc24218f455568ff3d97080aed9984506747166c6d8eb536ef2ac18590f012a7cf29dde8d4b931370dfd12a6dc3c3a3b5fe210c0f88cd0aab03eb8d718257f9aad3c8cc55b2dd5be97e2b9ef761cc7c33889467a5da3b01715d14396ca204044165499c28e0bb60d331d4edc2e3d65feaa8b8a4e00812b764eb78217553255d0d7cce02782662b5179b5e4808bffdf105c3e8c78b4cc0750c6e72a9680c509af4aae0af710eb144ad216d8b7a51ded2eab3a05ffcf26fbfc8f8ad9d7eadf0d640480235ebc2868d5b78e8297508e055678d4828a2d060a1b98bf6b929e682b674bb4237baaa15edd05418d8c142abe56f7ef30ae3da893912afa4e98ed0af286e5bd62043aaf1a0ba086d3f5a5e02bbb9c0d041cba0b13fcf60438c3d62ca8ecb310b27f713f9d1c4ec436f2bb15701d06c1b3336d67693feb93a22401b264934046b9ceaf4ac0512e70ceb11d08cf4871dd1dac3611036c776b2bfc1dd310c9c3cc0a4eec99f8e91c3923daf022464ad9c7fb2309181b57c853fce3ebf7f043b669ca7c6b934bd5f535b00ba2eca818ade5159c498ae133933faaee10fedf149c64e941de142f14f7959c5adf11bc32530262412f589e5ac1cfb4792da768f0e34f180446699a372b586ef0ba58292baaf7b4537ad41fe1bb63ca4c36838c74d86414fde77d665add94bef530390a729827f32dfc68a661b091ae6561585858a32528debf23a65b23b77fcd7683b77da098d00f96e396a1d7b17957c014152de1a8185ae3894c2a08200abdaff1c83c0dcfda7a5bf03ded0f7e7e88652ea94842622b92bd0344aace9faf963d6bd8431b5b82ab613ed843f7376b29c46527cc6d936c62029e1141037f761895a2247710d93977dda2cfe713debfb3cb03ca1674b7afd0dc3b502854dbf9d91f26334f26c729c2093c3efc14ad0cc830218756553aaa70c91e4879164d2e210ad7c2179de3de47e48e2b45e53a2b677b1f55d386edc4f14ce665d1770face3b792a5127b6d9d188672dfe9efae6fc4220f2901f88a1e36b9a6269896a0e4554c1593e8b365dcc8caefce2d41072b3fbb3ae85521a21f031810b27877884953834f860393a924f805bb1f35e6fd8e6aad83e8bbfdc3f78d38ffb84d305a49cae5c66a8d0264334661eda5e4e974b2a925da5813f1304a841bb9cd432e9c0a93b32384a1377310693b50946fa51d389ca130f2be017d5fbd5b7b4978c9ca2c110aef20c4da71b0276e159b08453c434c453e8ed887c358abb67abe1dab4ad07ac93b20d0d727ea1d37467b3bbbf7fffa8c83b97496df95d80dc98d6c6ce25f2ad00069f93372e6e082cd8bc0e541494cf51aa185e4a831cbe0dd77487e08141c89c26a2f9a8110ce09673d2e2574f297dba7d65c7b45ea09acd148d51e9fba12b0cb27d7e60d2767c19bdabad7418ef5532b2a2f4d9da6bbddfa03c5c2de620a50786c3c5884e34e5bb76b74482b0276faeb3f6a52abad6b619ff34b8d55ed48c3d7ae92b2b217726257e174b1faa77f4e713a42f216621ac3c8488279a76ae3e2304df03be45d46edc21a7ed4dc026cec0b7c28c66052d08ce2acb82624ebae2058ad9256d28df6a0f21d212a4322ec251f1d026df3cc93b0ba3fa4284ff9f23e0d7a9ba7623eb49cf467ce9b2ad336a97284633303baa8207bf049da6b8e3d6664c6d4cf198bf616e50c85a3d80b238ff8ccd68ca0d4e97f940e8e405b5adfee1991b25e1e200f6dafc48b273dbcdf2053d8dee64a51ed09598f92091e4d12bd0ef7fd23a508f345eace5c832b67eb3338217c11917ef1860a14f008066398cd1643c8132ce48b49093fe8ffee45dd2aa64bf3291c753035c189e284f40fba09a0febbd7f0c334de4089e2fafd191058edd8a61cd1e9d01889ef7814964ff395e15aeea8cfde2c0991f58a89a4e6251dca856f935ae77657a03b91061d3086bb720e0fd1eb59578cac1793b6b58f98320814ab564d5fc5f559404d7c730e08b290ac2066a0392d81569f2918dbf81fcd97206bccf2e75a6d6937956ba6bd86592d13bcd6446cf5f8b5ea95661307306e5823c7522fd6e672605ed650cfe91513b0bca6483cc742fe1b9c53cb83a89f1d7cf21976b7c9d7892ccd70d6f8b8851b4124b005d168883385954b8a0919da9576828ddcb97d16bcd3563a3fe25538ec9d3255eff87201be11caf932525359b26e9b287145f7c469c151bef1140bcf9f94d6e67539eb7f9872efae56768bea61e0fc7a00c2fa6f062616a881b50fc9db7fc4bfb44439aa6bf244c7b9a28ba31fc011a88b4e8abc260d57b769ecaf379d8a06ddf477a9432dc21483bd08942b72fbdd61ba7f56baf77ff8a5e8a4fe526fe09ac65d6dc0c21cd7cdf14823f35c79edd39f37c8bafcf5c9d818d183bedb501b885c4f2938d41c88e70c726e12a991d555da1c2815f9d8a56e11ba51c127881beb7a99df2576d98f82881a72bc0f3431b2299a14cf78fd3ebfc5a3c576e6ac9818997bb46b65cbf1fb689aa92e61f89fa458b4bf7a880424ce70b61846803f5c4b52a668b094fcc958fa124b05e530b874bef5c4e1f295cda00b558c3141724421fa46915465742d4d79fcaef42b237872bd30c627f5d92705f8cda48949f859dd201f08b63f5ad48399d3e9a04302fdfcd6513235bfb580e34cce1d3a58b9638824d46fdad4c566f656a5afc9d9dee87e30fa69a7de04b7a59878ccc39dcb70b6b5517eb335fb8061f3a301b4563f4887b797463dd84b0c4fe1879817883ed4dc7b6f15f5c48eeb5462bdb8a8dca6d58b1bb737a090745719ee2aa2f4ce1ca0e527c5767fa1a6ef3824c749eaf3309cc741c8f9a41bd019ddfefb287a6f9fe15119c9d34251ce9c68d8a09ce4447dcd04e48b620fd9cf0386660f5830888f0c5b7b9d21b5723eefba3583be48b4d862249d817d4f22f55aa0a9cafc611996ec5fbcfabc07e00d31216b8efe2c4fbe645d97b10f68dd92419e2372b434106c4828788e994f5a7a6e738f02e77e1fc07be6bad99d1f7313b10ec37b29218ce03452ebcec433f4d17f7a169f2176ecc7558bf969cc3443951724e76bb07f696db4cff369e6e93f51f365fc0f04b6247ec8ebb7774ceeb95c1128e2a8b2cb90d604083cfbd0f1a9cb8fd40983133b36484f7d67caf9d11cd1e6a2bd4e6cef4567adb37f92617ace5388dbd7f7becd67caf902a0a61c3077209f9520c8c59c59d4ca6324ae88bbc1f29d0a2522ef85f45d738188e284d0381aa6b5395b5e77345f062a540ec4372b61b60ff8d52201c25ee5e678a4b21b8d18ad00758645e6d1d0c3dcbe7ca6f428b278e3bb1b860b964a4915f9d1ca35041fcdf7c43005e4d9e8d6fed94c1c7534cf8daa38cda0162caf11a0dc380821537f48de2aa84867bd7c0bce8d228a321b3c6cab200e810f514555f247b0b0b6c9c1728acfa2d063e931e84fd18abd31a871e390209660dca2e1e07100b990dbc26756ec32a1984daf7d5be90ac02e8c488de0aafccb49f5cd8dd3da5a6f3190a62aaedca226be6bf59ad17451d7a4ce9782c73d486c1746cd2ee5ddaee93a407e85f92154a4ba5c99d880ae541e59512bf7829338217d1cdca25c82fb6bec6006cd417f92be3977c3c939eef09ed7485f236f0872f1033a1e0aea21e18bae55ab837ba5399bc9f11e63430cabee2453c17d50d1c8bf7039166e9705a4b721c2c4419076dfe396f6ab789c62dfcd131c03a088a59761154962a7ecbb893b5bf5443756f4b990fe29a6380a8d3efded7b6042397d61e9f0fd4020a0a84f0b72ad2775dd15751d6f9aa53da512ed04b791c4fbe3dd19cecf20224e8e7f01e1f39bc4ea0f0702d5ca7048eb0a59009909eb5530dbe5ee191fb80e2b6415c3a8dfa19ffa9ca32625edd5d602e0bfa91ea3266226a4c47bc49daa324a25cadd1d0be863aea6afa8f8ec81b381fed84794d27a9172ebf530585bdfda62c33826a00d13ae3d20653bebec0df3e0ab997ecc5d962b96a24b02a6f970c01346a0b8ea70f41a45c62c57dfe149a1cbbe6ab443057ca8345f529cf86831bb1865e3b3c71f9b746112709a8e5bca0ee1d1bcb42c72e2b4624cb598ce698a531ef92544639d4b36aa56c101f5d94aa968d140c94e728757fa474fc9db92c088"}) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000001480)={@broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @empty}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x65899913, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}, 0x1c) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000240)={0x3, {{0x2, 0x4e22, @private=0xa010101}}, {{0x2, 0x4e20, @loopback}}}, 0x108) close(r2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000140)={'nat\x00', 0x0, [0x5, 0x5, 0x0, 0x5, 0x94]}, &(0x7f00000001c0)=0x54) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x7, 0xc, 0x1, {0x0, 0x0, r1}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x22b80, 0x1b7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x51b6aade, 0xfffffffffffffffc, &(0x7f0000000280)="912f22a28677810fb97b26eb66c677ae57fa757a92c684c6bcbd323db3347d8313e732ffaf032b24a79256fd09ea9225", 0x2, 0x0, 0x0, {0x2}}, 0x0) syz_io_uring_complete(0x0) 18:06:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@getsa={0x3c, 0xf, 0x1, 0x0, 0x0, {@in6=@loopback, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) [ 1966.921411] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=12353 comm=syz-executor.3 18:06:51 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x5c, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @rand_addr, @multicast2]}]}}}}}}}, 0x0) 18:06:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8000, 0x177) lseek(r2, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) [ 1982.732100] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888019f701a0 (size 144): comm "syz-executor.1", pid 12342, jiffies 4296633712 (age 24.390s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 3a d4 9c 68 00 00 00 00 ........:..h.... 63 ea c3 33 00 00 00 00 3a d4 9c 68 00 00 00 00 c..3....:..h.... backtrace: [<0000000094ed955a>] __kernfs_iattrs+0xbc/0x470 [<000000001679c906>] kernfs_xattr_set+0x2b/0x80 [<0000000040637bcf>] selinux_kernfs_init_security+0x26d/0x4c0 [<000000009bb2e7c3>] security_kernfs_init_security+0x4e/0xb0 [<000000000674e2a5>] __kernfs_new_node+0x531/0x860 [<000000001da6f778>] kernfs_new_node+0x18d/0x250 [<00000000eca3b4ff>] kernfs_create_dir_ns+0x49/0x160 [<0000000047e2f637>] cgroup_mkdir+0x315/0xf50 [<0000000001bbc951>] kernfs_iop_mkdir+0x14d/0x1e0 [<00000000daef2a51>] vfs_mkdir+0x493/0x750 [<0000000045a89d5f>] do_mkdirat+0x150/0x2b0 [<0000000018bedb3b>] do_syscall_64+0x33/0x40 [<0000000096638461>] entry_SYSCALL_64_after_hwframe+0x67/0xd1 BUG: leak checking failed VM DIAGNOSIS: 18:07:15 Registers: info registers vcpu 0 RAX=ffffffff83e953c0 RBX=0000000000000000 RCX=ffffffff83e7d02c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e95b88 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85679448 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e953ce RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc40ef57670 CR3=000000000b36a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2934343120657a697328203061313037 XMM03=3120646970202c22312e726f74756365 XMM04=2e2e2e2e2e2e2e202030302030302030 XMM05=20303020303020303020303020303020 XMM06=65747962203233207473726966282070 XMM07=34322065676128203231373333363639 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e953c0 RBX=0000000000000001 RCX=ffffffff83e7d02c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e95b88 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85679448 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e953ce RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc395811d0 CR3=000000000e28c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=31636e75662e6e75522e6c697475736f XMM03=00000000000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00520044004300200020002000200020 XMM09=002000200020002000200020004d004f XMM10=00000000000000200020002000200020 XMM11=00000000452f25280000000000002800 XMM12=00000000000000000000000000000000 XMM13=00000101000001000000000000000000 XMM14=0000181c0000000000001c0008080001 XMM15=1e0022000000001a0000000000000000